pullfrog 0.1.52 → 0.1.53

package/dist/cli.mjs

@@ -102232,9 +102232,9 @@ var providers = {
       },
       "gemini-flash": {
         displayName: "Gemini Flash",
-        resolve: "google/gemini-3.5-flash",
+        resolve: "google/gemini-3.6-flash",
         effort: ["minimal", "low", "medium", "high"],
-        openRouterResolve: "openrouter/google/gemini-3.5-flash"
+        openRouterResolve: "openrouter/google/gemini-3.6-flash"
       }
     }
   }),
@@ -102244,26 +102244,26 @@ var providers = {
     models: {
       grok: {
         displayName: "Grok",
-        resolve: "xai/grok-4.3",
-        effort: ["none", "low", "medium", "high"],
-        openRouterResolve: "openrouter/x-ai/grok-4.3",
+        resolve: "xai/grok-4.5",
+        effort: ["low", "medium", "high"],
+        openRouterResolve: "openrouter/x-ai/grok-4.5",
         preferred: true
       },
       // legacy aliases — xAI retired the entire fast/code-fast line on
       // 2026-05-15 (https://docs.x.ai/developers/migration/may-15-deprecation)
       // and now redirects every deprecated text-model slug to grok-4.3 at
       // standard pricing. fall back to the live `xai/grok` so the alias
-      // chain resolves to grok-4.3 for both direct-key and OpenRouter users.
+      // chain resolves to grok-4.5 for both direct-key and OpenRouter users.
       "grok-fast": {
         displayName: "Grok Fast",
         resolve: "xai/grok-4-1-fast",
-        openRouterResolve: "openrouter/x-ai/grok-4.3",
+        openRouterResolve: "openrouter/x-ai/grok-4.5",
         fallback: "xai/grok"
       },
       "grok-code-fast": {
         displayName: "Grok Code Fast",
         resolve: "xai/grok-code-fast-1",
-        openRouterResolve: "openrouter/x-ai/grok-4.3",
+        openRouterResolve: "openrouter/x-ai/grok-4.5",
         fallback: "xai/grok"
       }
     }
@@ -102280,20 +102280,25 @@ var providers = {
         openRouterResolve: "openrouter/deepseek/deepseek-v4-pro",
         preferred: true
       },
-      // DeepSeek upgraded the `deepseek-v4-flash` API model in place to the
-      // 0731 release, but OpenRouter forked it into a separate `-0731` id and
-      // left the April preview live at a HIGHER price — so the direct
-      // `resolve` needs no version and the OpenRouter route must be pinned.
-      // 0731 publishes a DIFFERENT OpenRouter ladder to both the April preview
-      // and Pro (`high, xhigh`) — it gained a `low` rung and renamed the top to
-      // `max`. that makes `low`, not `high`, position 0 on this route, which is
+      // DeepSeek upgrades the `deepseek-v4-flash` API model in place, so the
+      // direct `resolve` needs no version. OpenRouter instead forked the 0731
+      // release into its own id and left the April preview live under the
+      // unversioned one at a HIGHER price ($0.14/$0.28 vs $0.09/$0.18) — so the
+      // OpenRouter route can never use the bare id. it tracks the rolling
+      // `~deepseek/*-latest` pointer (rule 4), which resolves to 0731 at the
+      // same price today and follows the next in-place upgrade on its own,
+      // rather than pinning a dated snapshot that goes stale every release.
+      // 0731 gained a `low` rung and renamed the top to `max`, unlike Pro
+      // (`high, max` direct / `high, xhigh` via OpenRouter). that ladder now
+      // reads the same on BOTH routes — the in-place direct upgrade caught up
+      // to the fork — so `low`, not `high`, is position 0 either way, which is
       // why the OSS effort floor in `main.ts` pins the `high` rung by name.
       "deepseek-flash": {
         displayName: "DeepSeek Flash",
         resolve: "deepseek/deepseek-v4-flash",
-        effort: ["high", "max"],
+        effort: ["low", "high", "max"],
         openRouterEffort: ["low", "high", "max"],
-        openRouterResolve: "openrouter/deepseek/deepseek-v4-flash-0731"
+        openRouterResolve: "openrouter/~deepseek/deepseek-v4-flash-latest"
       },
       // legacy aliases — deepseek retires these on 2026-07-24; transparently
       // upgrade existing users to the v4 family via the fallback chain.
@@ -102439,21 +102444,19 @@ var providers = {
       },
       "gemini-flash": {
         displayName: "Gemini Flash",
-        resolve: "opencode/gemini-3.5-flash",
+        resolve: "opencode/gemini-3.6-flash",
         effort: ["minimal", "low", "medium", "high"],
-        openRouterResolve: "openrouter/google/gemini-3.5-flash"
+        openRouterResolve: "openrouter/google/gemini-3.6-flash"
       },
       "kimi-k2": {
         displayName: "Kimi K2",
-        // opencode Zen serves only up to k2.6; the OpenRouter fallback (used for
-        // router/oss proxy runs) takes the newer k2.7-code.
-        resolve: "opencode/kimi-k2.6",
+        resolve: "opencode/kimi-k2.7-code",
         openRouterResolve: "openrouter/moonshotai/kimi-k2.7-code"
       },
-      // Zen serves m2.5; the funded OpenRouter path tracks the current m2.7.
+      // slug pins the m2 line for DB stability; resolve tracks the current m2.7.
       "minimax-m2.5": {
         displayName: "MiniMax M2",
-        resolve: "opencode/minimax-m2.5",
+        resolve: "opencode/minimax-m2.7",
         openRouterResolve: "openrouter/minimax/minimax-m2.7"
       },
       "gpt-5-nano": {
@@ -102673,9 +102676,9 @@ var providers = {
       },
       grok: {
         displayName: "Grok",
-        resolve: "openrouter/x-ai/grok-4.3",
-        effort: ["none", "low", "medium", "high"],
-        openRouterResolve: "openrouter/x-ai/grok-4.3"
+        resolve: "openrouter/x-ai/grok-4.5",
+        effort: ["low", "medium", "high"],
+        openRouterResolve: "openrouter/x-ai/grok-4.5"
       },
       "deepseek-pro": {
         displayName: "DeepSeek Pro",
@@ -102683,11 +102686,13 @@ var providers = {
         effort: ["high", "xhigh"],
         openRouterResolve: "openrouter/deepseek/deepseek-v4-pro"
       },
+      // rolling pointer, not the bare id — see `deepseek/deepseek-flash` for why
+      // OpenRouter's unversioned `deepseek-v4-flash` is the stale April preview.
       "deepseek-flash": {
         displayName: "DeepSeek Flash",
-        resolve: "openrouter/deepseek/deepseek-v4-flash-0731",
+        resolve: "openrouter/~deepseek/deepseek-v4-flash-latest",
         effort: ["low", "high", "max"],
-        openRouterResolve: "openrouter/deepseek/deepseek-v4-flash-0731"
+        openRouterResolve: "openrouter/~deepseek/deepseek-v4-flash-latest"
       },
       // legacy alias — deepseek retires this on 2026-07-24; transparently
       // upgrade existing users to the v4 family via the fallback chain.
@@ -103588,7 +103593,7 @@ var import_semver = __toESM(require_semver2(), 1);
 // package.json
 var package_default = {
   name: "pullfrog",
-  version: "0.1.52",
+  version: "0.1.53",
   type: "module",
   bin: {
     pullfrog: "dist/cli.mjs",
@@ -164723,6 +164728,7 @@ var ShellParams = type({
   "background?": "boolean"
 });
 var detectedSandboxMethod;
+var usernsProbeError;
 function detectSandboxMethod() {
   if (detectedSandboxMethod !== void 0) {
     return detectedSandboxMethod;
@@ -164756,6 +164762,35 @@ function detectSandboxMethod() {
     }
   } catch {
   }
+  try {
+    const result = spawnSync6(
+      "unshare",
+      [
+        "--user",
+        "--map-root-user",
+        "--pid",
+        "--fork",
+        "--mount",
+        "setpriv",
+        "--no-new-privs",
+        "--bounding-set",
+        "-all",
+        "--inh-caps",
+        "-all",
+        "--ambient-caps",
+        "-all",
+        "true"
+      ],
+      { timeout: 5e3, stdio: ["ignore", "ignore", "pipe"] }
+    );
+    if (result.status === 0) {
+      detectedSandboxMethod = "userns-unshare";
+      log.debug("PID namespace isolation enabled (unprivileged userns unshare)");
+      return "userns-unshare";
+    }
+    usernsProbeError = result.stderr?.toString().trim() || result.error?.message;
+  } catch {
+  }
   detectedSandboxMethod = "none";
   log.info("PID namespace isolation not available");
   return "none";
@@ -164803,7 +164838,7 @@ function spawnShell(params) {
   const ci = process.env.CI === "true";
   if (ci && sandboxMethod === "none") {
     throw new Error(
-      "pid namespace isolation is required in CI but unavailable (both unshare and sudo unshare failed)"
+      "PID-namespace isolation is required in CI but unavailable: unprivileged unshare, sudo unshare, and userns-nested unshare all failed. " + (usernsProbeError ? `userns probe said: ${usernsProbeError}. ` : "") + "on a containerized / Kubernetes self-hosted runner the cause is usually one of: the pod's seccomp profile blocks user-namespace creation (Pod Security Standards baseline/restricted); the pod runs as root without CAP_SETFCAP, which the kernel requires to map uid 0; or the node kernel disallows unprivileged user namespaces (Ubuntu >= 23.10, Bottlerocket, Talos). elsewhere, check that `unshare` and `setpriv` (util-linux >= 2.31, which is what added --ambient-caps) are on PATH. see https://docs.pullfrog.com/security#self-hosted-runners"
     );
   }
   const repoRoot = resolveRepoRoot();
@@ -164822,6 +164857,23 @@ function spawnShell(params) {
       spawnOpts
     );
   }
+  if (sandboxMethod === "userns-unshare") {
+    const escaped = params.command.replace(/'/g, "'\\''");
+    return spawn5(
+      "unshare",
+      [
+        "--user",
+        "--map-root-user",
+        "--pid",
+        "--fork",
+        "--mount",
+        "bash",
+        "-c",
+        `${PROC_CLEANUP} ${SOCKET_CLEANUP} ${fsMounts} exec setpriv --no-new-privs --bounding-set -all --inh-caps -all --ambient-caps -all bash -c '${escaped}'`
+      ],
+      spawnOpts
+    );
+  }
   if (sandboxMethod === "sudo-unshare") {
     const envArgs = [];
     for (const [k, v] of Object.entries(params.env)) {
@@ -166751,12 +166803,14 @@ var ShellPermissionInput = type.enumerated("disabled", "restricted", "enabled");
 var PushPermissionInput = type.enumerated("disabled", "restricted", "enabled");
 var StatusChecksInput = type.enumerated("disabled", "enabled");
 var ProgressCommentsInput = type.enumerated("disabled", "enabled");
+var DebugInput = type.enumerated("disabled", "enabled");
 var JsonPayload = type({
   "~pullfrog": "true",
   version: "string",
   "model?": "string | undefined",
   "modelExplicit?": "boolean | undefined",
   "effort?": "number | string | undefined",
+  "debug?": "boolean | undefined",
   prompt: "string",
   "triggerer?": "string | undefined",
   "baseInstructions?": "string | undefined",
@@ -166791,6 +166845,7 @@ var Inputs = type({
   "prompt_file?": type.string.or("undefined"),
   "model?": type.string.or("undefined"),
   "effort?": type.string.or("undefined"),
+  "debug?": DebugInput.or("undefined"),
   "timeout?": type.string.or("undefined"),
   "push?": PushPermissionInput.or("undefined"),
   "shell?": ShellPermissionInput.or("undefined"),
@@ -166854,6 +166909,7 @@ function resolveNonPromptInputs() {
   return Inputs.omit("prompt", "prompt_file").assert({
     model: core6.getInput("model") || void 0,
     effort: core6.getInput("effort") || void 0,
+    debug: core6.getInput("debug") || void 0,
     timeout: core6.getInput("timeout") || void 0,
     cwd: core6.getInput("cwd") || void 0,
     push: core6.getInput("push") || void 0,
@@ -166870,6 +166926,8 @@ function resolvePayload(resolvedPromptInput, repoSettings) {
   const model = jsonPayload?.model ?? inputs.model ?? repoSettings.model ?? void 0;
   const rawEffort = jsonPayload?.effort ?? inputs.effort ?? repoSettings.effort ?? void 0;
   const effort = rawEffort === void 0 ? void 0 : parseEffortPosition(String(rawEffort));
+  const debug4 = jsonPayload?.debug ?? inputs.debug === "enabled";
+  if (debug4) process.env.LOG_LEVEL = "debug";
   const isNonCollaborator = !isCollaborator(event);
   const repoShell = repoSettings.shell ?? "restricted";
   const inputShell = inputs.shell;
@@ -166890,6 +166948,7 @@ function resolvePayload(resolvedPromptInput, repoSettings) {
     // the JSON payload). a GHA `model` input or the repo default is not explicit.
     modelExplicit: jsonPayload?.modelExplicit ?? false,
     effort,
+    debug: debug4 || void 0,
     prompt,
     triggerer: jsonPayload?.triggerer ?? // it's not a common use case but GITHUB_ACTOR can be a user when the workflow is manually triggered by a user through GitHub Actions UI
     (!isPullfrog(process.env.GITHUB_ACTOR) ? process.env.GITHUB_ACTOR : void 0),
@@ -170053,7 +170112,7 @@ async function runCli4(input) {
 }
 
 // cli.ts
-var VERSION10 = "0.1.52";
+var VERSION10 = "0.1.53";
 var bin = basename2(process.argv[1] || "");
 var PROG = bin === "pf" || bin === "pullfrog" ? bin : "pullfrog";
 var rawArgs = process.argv.slice(2);

package/dist/external.d.ts

@@ -232,6 +232,14 @@ export interface WriteablePayload {
     modelExplicit?: boolean | undefined;
     /** reasoning-effort position on [0,1]; 0 is the model's cheapest rung, 1 its priciest */
     effort?: EffortPosition | undefined;
+    /**
+     * raise this one run's logging (`--debug`, or the `debug` action input): makes
+     * `log.debug` output visible and puts the opencode server at INFO. the only
+     * way to diagnose a run that fails with an empty log — see
+     * wiki/opencode-silent-stall.md. affects what we print, never what the agent
+     * may do, so it carries no access/permission consequence.
+     */
+    debug?: boolean | undefined;
     /** the user's actual request (body if @pullfrog tagged) */
     prompt: string;
     /** github username of the human who triggered this workflow run */

package/dist/index.js

@@ -100297,9 +100297,9 @@ var providers = {
       },
       "gemini-flash": {
         displayName: "Gemini Flash",
-        resolve: "google/gemini-3.5-flash",
+        resolve: "google/gemini-3.6-flash",
         effort: ["minimal", "low", "medium", "high"],
-        openRouterResolve: "openrouter/google/gemini-3.5-flash"
+        openRouterResolve: "openrouter/google/gemini-3.6-flash"
       }
     }
   }),
@@ -100309,26 +100309,26 @@ var providers = {
     models: {
       grok: {
         displayName: "Grok",
-        resolve: "xai/grok-4.3",
-        effort: ["none", "low", "medium", "high"],
-        openRouterResolve: "openrouter/x-ai/grok-4.3",
+        resolve: "xai/grok-4.5",
+        effort: ["low", "medium", "high"],
+        openRouterResolve: "openrouter/x-ai/grok-4.5",
         preferred: true
       },
       // legacy aliases — xAI retired the entire fast/code-fast line on
       // 2026-05-15 (https://docs.x.ai/developers/migration/may-15-deprecation)
       // and now redirects every deprecated text-model slug to grok-4.3 at
       // standard pricing. fall back to the live `xai/grok` so the alias
-      // chain resolves to grok-4.3 for both direct-key and OpenRouter users.
+      // chain resolves to grok-4.5 for both direct-key and OpenRouter users.
       "grok-fast": {
         displayName: "Grok Fast",
         resolve: "xai/grok-4-1-fast",
-        openRouterResolve: "openrouter/x-ai/grok-4.3",
+        openRouterResolve: "openrouter/x-ai/grok-4.5",
         fallback: "xai/grok"
       },
       "grok-code-fast": {
         displayName: "Grok Code Fast",
         resolve: "xai/grok-code-fast-1",
-        openRouterResolve: "openrouter/x-ai/grok-4.3",
+        openRouterResolve: "openrouter/x-ai/grok-4.5",
         fallback: "xai/grok"
       }
     }
@@ -100345,20 +100345,25 @@ var providers = {
         openRouterResolve: "openrouter/deepseek/deepseek-v4-pro",
         preferred: true
       },
-      // DeepSeek upgraded the `deepseek-v4-flash` API model in place to the
-      // 0731 release, but OpenRouter forked it into a separate `-0731` id and
-      // left the April preview live at a HIGHER price — so the direct
-      // `resolve` needs no version and the OpenRouter route must be pinned.
-      // 0731 publishes a DIFFERENT OpenRouter ladder to both the April preview
-      // and Pro (`high, xhigh`) — it gained a `low` rung and renamed the top to
-      // `max`. that makes `low`, not `high`, position 0 on this route, which is
+      // DeepSeek upgrades the `deepseek-v4-flash` API model in place, so the
+      // direct `resolve` needs no version. OpenRouter instead forked the 0731
+      // release into its own id and left the April preview live under the
+      // unversioned one at a HIGHER price ($0.14/$0.28 vs $0.09/$0.18) — so the
+      // OpenRouter route can never use the bare id. it tracks the rolling
+      // `~deepseek/*-latest` pointer (rule 4), which resolves to 0731 at the
+      // same price today and follows the next in-place upgrade on its own,
+      // rather than pinning a dated snapshot that goes stale every release.
+      // 0731 gained a `low` rung and renamed the top to `max`, unlike Pro
+      // (`high, max` direct / `high, xhigh` via OpenRouter). that ladder now
+      // reads the same on BOTH routes — the in-place direct upgrade caught up
+      // to the fork — so `low`, not `high`, is position 0 either way, which is
       // why the OSS effort floor in `main.ts` pins the `high` rung by name.
       "deepseek-flash": {
         displayName: "DeepSeek Flash",
         resolve: "deepseek/deepseek-v4-flash",
-        effort: ["high", "max"],
+        effort: ["low", "high", "max"],
         openRouterEffort: ["low", "high", "max"],
-        openRouterResolve: "openrouter/deepseek/deepseek-v4-flash-0731"
+        openRouterResolve: "openrouter/~deepseek/deepseek-v4-flash-latest"
       },
       // legacy aliases — deepseek retires these on 2026-07-24; transparently
       // upgrade existing users to the v4 family via the fallback chain.
@@ -100504,21 +100509,19 @@ var providers = {
       },
       "gemini-flash": {
         displayName: "Gemini Flash",
-        resolve: "opencode/gemini-3.5-flash",
+        resolve: "opencode/gemini-3.6-flash",
         effort: ["minimal", "low", "medium", "high"],
-        openRouterResolve: "openrouter/google/gemini-3.5-flash"
+        openRouterResolve: "openrouter/google/gemini-3.6-flash"
       },
       "kimi-k2": {
         displayName: "Kimi K2",
-        // opencode Zen serves only up to k2.6; the OpenRouter fallback (used for
-        // router/oss proxy runs) takes the newer k2.7-code.
-        resolve: "opencode/kimi-k2.6",
+        resolve: "opencode/kimi-k2.7-code",
         openRouterResolve: "openrouter/moonshotai/kimi-k2.7-code"
       },
-      // Zen serves m2.5; the funded OpenRouter path tracks the current m2.7.
+      // slug pins the m2 line for DB stability; resolve tracks the current m2.7.
       "minimax-m2.5": {
         displayName: "MiniMax M2",
-        resolve: "opencode/minimax-m2.5",
+        resolve: "opencode/minimax-m2.7",
         openRouterResolve: "openrouter/minimax/minimax-m2.7"
       },
       "gpt-5-nano": {
@@ -100738,9 +100741,9 @@ var providers = {
       },
       grok: {
         displayName: "Grok",
-        resolve: "openrouter/x-ai/grok-4.3",
-        effort: ["none", "low", "medium", "high"],
-        openRouterResolve: "openrouter/x-ai/grok-4.3"
+        resolve: "openrouter/x-ai/grok-4.5",
+        effort: ["low", "medium", "high"],
+        openRouterResolve: "openrouter/x-ai/grok-4.5"
       },
       "deepseek-pro": {
         displayName: "DeepSeek Pro",
@@ -100748,11 +100751,13 @@ var providers = {
         effort: ["high", "xhigh"],
         openRouterResolve: "openrouter/deepseek/deepseek-v4-pro"
       },
+      // rolling pointer, not the bare id — see `deepseek/deepseek-flash` for why
+      // OpenRouter's unversioned `deepseek-v4-flash` is the stale April preview.
       "deepseek-flash": {
         displayName: "DeepSeek Flash",
-        resolve: "openrouter/deepseek/deepseek-v4-flash-0731",
+        resolve: "openrouter/~deepseek/deepseek-v4-flash-latest",
         effort: ["low", "high", "max"],
-        openRouterResolve: "openrouter/deepseek/deepseek-v4-flash-0731"
+        openRouterResolve: "openrouter/~deepseek/deepseek-v4-flash-latest"
       },
       // legacy alias — deepseek retires this on 2026-07-24; transparently
       // upgrade existing users to the v4 family via the fallback chain.
@@ -101653,7 +101658,7 @@ var import_semver = __toESM(require_semver2(), 1);
 // package.json
 var package_default = {
   name: "pullfrog",
-  version: "0.1.52",
+  version: "0.1.53",
   type: "module",
   bin: {
     pullfrog: "dist/cli.mjs",
@@ -162830,6 +162835,7 @@ var ShellParams = type({
   "background?": "boolean"
 });
 var detectedSandboxMethod;
+var usernsProbeError;
 function detectSandboxMethod() {
   if (detectedSandboxMethod !== void 0) {
     return detectedSandboxMethod;
@@ -162863,6 +162869,35 @@ function detectSandboxMethod() {
     }
   } catch {
   }
+  try {
+    const result = spawnSync6(
+      "unshare",
+      [
+        "--user",
+        "--map-root-user",
+        "--pid",
+        "--fork",
+        "--mount",
+        "setpriv",
+        "--no-new-privs",
+        "--bounding-set",
+        "-all",
+        "--inh-caps",
+        "-all",
+        "--ambient-caps",
+        "-all",
+        "true"
+      ],
+      { timeout: 5e3, stdio: ["ignore", "ignore", "pipe"] }
+    );
+    if (result.status === 0) {
+      detectedSandboxMethod = "userns-unshare";
+      log.debug("PID namespace isolation enabled (unprivileged userns unshare)");
+      return "userns-unshare";
+    }
+    usernsProbeError = result.stderr?.toString().trim() || result.error?.message;
+  } catch {
+  }
   detectedSandboxMethod = "none";
   log.info("PID namespace isolation not available");
   return "none";
@@ -162910,7 +162945,7 @@ function spawnShell(params) {
   const ci = process.env.CI === "true";
   if (ci && sandboxMethod === "none") {
     throw new Error(
-      "pid namespace isolation is required in CI but unavailable (both unshare and sudo unshare failed)"
+      "PID-namespace isolation is required in CI but unavailable: unprivileged unshare, sudo unshare, and userns-nested unshare all failed. " + (usernsProbeError ? `userns probe said: ${usernsProbeError}. ` : "") + "on a containerized / Kubernetes self-hosted runner the cause is usually one of: the pod's seccomp profile blocks user-namespace creation (Pod Security Standards baseline/restricted); the pod runs as root without CAP_SETFCAP, which the kernel requires to map uid 0; or the node kernel disallows unprivileged user namespaces (Ubuntu >= 23.10, Bottlerocket, Talos). elsewhere, check that `unshare` and `setpriv` (util-linux >= 2.31, which is what added --ambient-caps) are on PATH. see https://docs.pullfrog.com/security#self-hosted-runners"
     );
   }
   const repoRoot = resolveRepoRoot();
@@ -162929,6 +162964,23 @@ function spawnShell(params) {
       spawnOpts
     );
   }
+  if (sandboxMethod === "userns-unshare") {
+    const escaped = params.command.replace(/'/g, "'\\''");
+    return spawn3(
+      "unshare",
+      [
+        "--user",
+        "--map-root-user",
+        "--pid",
+        "--fork",
+        "--mount",
+        "bash",
+        "-c",
+        `${PROC_CLEANUP} ${SOCKET_CLEANUP} ${fsMounts} exec setpriv --no-new-privs --bounding-set -all --inh-caps -all --ambient-caps -all bash -c '${escaped}'`
+      ],
+      spawnOpts
+    );
+  }
   if (sandboxMethod === "sudo-unshare") {
     const envArgs = [];
     for (const [k, v] of Object.entries(params.env)) {
@@ -164858,12 +164910,14 @@ var ShellPermissionInput = type.enumerated("disabled", "restricted", "enabled");
 var PushPermissionInput = type.enumerated("disabled", "restricted", "enabled");
 var StatusChecksInput = type.enumerated("disabled", "enabled");
 var ProgressCommentsInput = type.enumerated("disabled", "enabled");
+var DebugInput = type.enumerated("disabled", "enabled");
 var JsonPayload = type({
   "~pullfrog": "true",
   version: "string",
   "model?": "string | undefined",
   "modelExplicit?": "boolean | undefined",
   "effort?": "number | string | undefined",
+  "debug?": "boolean | undefined",
   prompt: "string",
   "triggerer?": "string | undefined",
   "baseInstructions?": "string | undefined",
@@ -164898,6 +164952,7 @@ var Inputs = type({
   "prompt_file?": type.string.or("undefined"),
   "model?": type.string.or("undefined"),
   "effort?": type.string.or("undefined"),
+  "debug?": DebugInput.or("undefined"),
   "timeout?": type.string.or("undefined"),
   "push?": PushPermissionInput.or("undefined"),
   "shell?": ShellPermissionInput.or("undefined"),
@@ -164961,6 +165016,7 @@ function resolveNonPromptInputs() {
   return Inputs.omit("prompt", "prompt_file").assert({
     model: core6.getInput("model") || void 0,
     effort: core6.getInput("effort") || void 0,
+    debug: core6.getInput("debug") || void 0,
     timeout: core6.getInput("timeout") || void 0,
     cwd: core6.getInput("cwd") || void 0,
     push: core6.getInput("push") || void 0,
@@ -164977,6 +165033,8 @@ function resolvePayload(resolvedPromptInput, repoSettings) {
   const model = jsonPayload?.model ?? inputs.model ?? repoSettings.model ?? void 0;
   const rawEffort = jsonPayload?.effort ?? inputs.effort ?? repoSettings.effort ?? void 0;
   const effort = rawEffort === void 0 ? void 0 : parseEffortPosition(String(rawEffort));
+  const debug3 = jsonPayload?.debug ?? inputs.debug === "enabled";
+  if (debug3) process.env.LOG_LEVEL = "debug";
   const isNonCollaborator = !isCollaborator(event);
   const repoShell = repoSettings.shell ?? "restricted";
   const inputShell = inputs.shell;
@@ -164997,6 +165055,7 @@ function resolvePayload(resolvedPromptInput, repoSettings) {
     // the JSON payload). a GHA `model` input or the repo default is not explicit.
     modelExplicit: jsonPayload?.modelExplicit ?? false,
     effort,
+    debug: debug3 || void 0,
     prompt,
     triggerer: jsonPayload?.triggerer ?? // it's not a common use case but GITHUB_ACTOR can be a user when the workflow is manually triggered by a user through GitHub Actions UI
     (!isPullfrog(process.env.GITHUB_ACTOR) ? process.env.GITHUB_ACTOR : void 0),

package/dist/internal.js

@@ -207,9 +207,9 @@ var providers = {
       },
       "gemini-flash": {
         displayName: "Gemini Flash",
-        resolve: "google/gemini-3.5-flash",
+        resolve: "google/gemini-3.6-flash",
         effort: ["minimal", "low", "medium", "high"],
-        openRouterResolve: "openrouter/google/gemini-3.5-flash"
+        openRouterResolve: "openrouter/google/gemini-3.6-flash"
       }
     }
   }),
@@ -219,26 +219,26 @@ var providers = {
     models: {
       grok: {
         displayName: "Grok",
-        resolve: "xai/grok-4.3",
-        effort: ["none", "low", "medium", "high"],
-        openRouterResolve: "openrouter/x-ai/grok-4.3",
+        resolve: "xai/grok-4.5",
+        effort: ["low", "medium", "high"],
+        openRouterResolve: "openrouter/x-ai/grok-4.5",
         preferred: true
       },
       // legacy aliases — xAI retired the entire fast/code-fast line on
       // 2026-05-15 (https://docs.x.ai/developers/migration/may-15-deprecation)
       // and now redirects every deprecated text-model slug to grok-4.3 at
       // standard pricing. fall back to the live `xai/grok` so the alias
-      // chain resolves to grok-4.3 for both direct-key and OpenRouter users.
+      // chain resolves to grok-4.5 for both direct-key and OpenRouter users.
       "grok-fast": {
         displayName: "Grok Fast",
         resolve: "xai/grok-4-1-fast",
-        openRouterResolve: "openrouter/x-ai/grok-4.3",
+        openRouterResolve: "openrouter/x-ai/grok-4.5",
         fallback: "xai/grok"
       },
       "grok-code-fast": {
         displayName: "Grok Code Fast",
         resolve: "xai/grok-code-fast-1",
-        openRouterResolve: "openrouter/x-ai/grok-4.3",
+        openRouterResolve: "openrouter/x-ai/grok-4.5",
         fallback: "xai/grok"
       }
     }
@@ -255,20 +255,25 @@ var providers = {
         openRouterResolve: "openrouter/deepseek/deepseek-v4-pro",
         preferred: true
       },
-      // DeepSeek upgraded the `deepseek-v4-flash` API model in place to the
-      // 0731 release, but OpenRouter forked it into a separate `-0731` id and
-      // left the April preview live at a HIGHER price — so the direct
-      // `resolve` needs no version and the OpenRouter route must be pinned.
-      // 0731 publishes a DIFFERENT OpenRouter ladder to both the April preview
-      // and Pro (`high, xhigh`) — it gained a `low` rung and renamed the top to
-      // `max`. that makes `low`, not `high`, position 0 on this route, which is
+      // DeepSeek upgrades the `deepseek-v4-flash` API model in place, so the
+      // direct `resolve` needs no version. OpenRouter instead forked the 0731
+      // release into its own id and left the April preview live under the
+      // unversioned one at a HIGHER price ($0.14/$0.28 vs $0.09/$0.18) — so the
+      // OpenRouter route can never use the bare id. it tracks the rolling
+      // `~deepseek/*-latest` pointer (rule 4), which resolves to 0731 at the
+      // same price today and follows the next in-place upgrade on its own,
+      // rather than pinning a dated snapshot that goes stale every release.
+      // 0731 gained a `low` rung and renamed the top to `max`, unlike Pro
+      // (`high, max` direct / `high, xhigh` via OpenRouter). that ladder now
+      // reads the same on BOTH routes — the in-place direct upgrade caught up
+      // to the fork — so `low`, not `high`, is position 0 either way, which is
       // why the OSS effort floor in `main.ts` pins the `high` rung by name.
       "deepseek-flash": {
         displayName: "DeepSeek Flash",
         resolve: "deepseek/deepseek-v4-flash",
-        effort: ["high", "max"],
+        effort: ["low", "high", "max"],
         openRouterEffort: ["low", "high", "max"],
-        openRouterResolve: "openrouter/deepseek/deepseek-v4-flash-0731"
+        openRouterResolve: "openrouter/~deepseek/deepseek-v4-flash-latest"
       },
       // legacy aliases — deepseek retires these on 2026-07-24; transparently
       // upgrade existing users to the v4 family via the fallback chain.
@@ -414,21 +419,19 @@ var providers = {
       },
       "gemini-flash": {
         displayName: "Gemini Flash",
-        resolve: "opencode/gemini-3.5-flash",
+        resolve: "opencode/gemini-3.6-flash",
         effort: ["minimal", "low", "medium", "high"],
-        openRouterResolve: "openrouter/google/gemini-3.5-flash"
+        openRouterResolve: "openrouter/google/gemini-3.6-flash"
       },
       "kimi-k2": {
         displayName: "Kimi K2",
-        // opencode Zen serves only up to k2.6; the OpenRouter fallback (used for
-        // router/oss proxy runs) takes the newer k2.7-code.
-        resolve: "opencode/kimi-k2.6",
+        resolve: "opencode/kimi-k2.7-code",
         openRouterResolve: "openrouter/moonshotai/kimi-k2.7-code"
       },
-      // Zen serves m2.5; the funded OpenRouter path tracks the current m2.7.
+      // slug pins the m2 line for DB stability; resolve tracks the current m2.7.
       "minimax-m2.5": {
         displayName: "MiniMax M2",
-        resolve: "opencode/minimax-m2.5",
+        resolve: "opencode/minimax-m2.7",
         openRouterResolve: "openrouter/minimax/minimax-m2.7"
       },
       "gpt-5-nano": {
@@ -648,9 +651,9 @@ var providers = {
       },
       grok: {
         displayName: "Grok",
-        resolve: "openrouter/x-ai/grok-4.3",
-        effort: ["none", "low", "medium", "high"],
-        openRouterResolve: "openrouter/x-ai/grok-4.3"
+        resolve: "openrouter/x-ai/grok-4.5",
+        effort: ["low", "medium", "high"],
+        openRouterResolve: "openrouter/x-ai/grok-4.5"
       },
       "deepseek-pro": {
         displayName: "DeepSeek Pro",
@@ -658,11 +661,13 @@ var providers = {
         effort: ["high", "xhigh"],
         openRouterResolve: "openrouter/deepseek/deepseek-v4-pro"
       },
+      // rolling pointer, not the bare id — see `deepseek/deepseek-flash` for why
+      // OpenRouter's unversioned `deepseek-v4-flash` is the stale April preview.
       "deepseek-flash": {
         displayName: "DeepSeek Flash",
-        resolve: "openrouter/deepseek/deepseek-v4-flash-0731",
+        resolve: "openrouter/~deepseek/deepseek-v4-flash-latest",
         effort: ["low", "high", "max"],
-        openRouterResolve: "openrouter/deepseek/deepseek-v4-flash-0731"
+        openRouterResolve: "openrouter/~deepseek/deepseek-v4-flash-latest"
       },
       // legacy alias — deepseek retires this on 2026-07-24; transparently
       // upgrade existing users to the v4 family via the fallback chain.

package/dist/mcp/shell.d.ts

@@ -6,7 +6,7 @@ export declare const ShellParams: import("arktype/internal/variants/object.ts").
     working_directory?: string;
     background?: boolean;
 }, {}>;
-export type SandboxMethod = "unshare" | "sudo-unshare" | "none";
+export type SandboxMethod = "unshare" | "sudo-unshare" | "userns-unshare" | "none";
 /** get the current sandbox method (for testing/diagnostics) */
 export declare function getSandboxMethod(): SandboxMethod;
 /** chars of shell output kept inline in the agent reply. anything past this

package/dist/utils/payload.d.ts

@@ -7,6 +7,7 @@ export declare const JsonPayload: import("arktype/internal/variants/object.ts").
     model?: string | undefined;
     modelExplicit?: boolean | undefined;
     effort?: string | number | undefined;
+    debug?: boolean | undefined;
     triggerer?: string | undefined;
     baseInstructions?: string | undefined;
     eventInstructions?: string;
@@ -33,6 +34,7 @@ export declare const Inputs: import("arktype/internal/variants/object.ts").Objec
     prompt_file?: string | undefined;
     model?: string | undefined;
     effort?: string | undefined;
+    debug?: "disabled" | "enabled" | undefined;
     timeout?: string | undefined;
     push?: "disabled" | "enabled" | "restricted" | undefined;
     shell?: "disabled" | "enabled" | "restricted" | undefined;
@@ -50,6 +52,7 @@ export declare function resolvePayload(resolvedPromptInput: ResolvedPromptInput,
     model: string | undefined;
     modelExplicit: boolean;
     effort: number | undefined;
+    debug: true | undefined;
     prompt: string;
     triggerer: string | undefined;
     baseInstructions: string | undefined;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "pullfrog",
-  "version": "0.1.52",
+  "version": "0.1.53",
   "type": "module",
   "bin": {
     "pullfrog": "dist/cli.mjs",