pullfrog 0.1.60 → 0.1.61

package/dist/agents/shared.d.ts

@@ -52,6 +52,16 @@ export declare function hasPostRunIssues(issues: PostRunIssues): boolean;
  * cache hit ratio at a glance. Dashboards that query `WorkflowRun.inputTokens`
  * directly are seeing the full total, not the log column.
  */
+/**
+ * Which credential actually paid for a run.
+ *
+ * `subscription` is the one that changes what a cost figure MEANS: a Claude
+ * Pro/Max or ChatGPT subscription moves no per-token money, so a dollar figure
+ * on such a run is what it WOULD have cost on the API, not spend. Without this
+ * recorded, `WorkflowRun.costUsd` silently mixes the two and there is no way
+ * after the fact to separate them.
+ */
+export type AgentCredential = "subscription" | "api_key" | "gateway" | "bedrock" | "vertex" | "foundry";
 export interface AgentUsage {
     agent: string;
     /** full billable input: non-cached + cache read + cache write */

package/dist/cli.mjs

@@ -107355,7 +107355,7 @@ var import_semver = __toESM(require_semver2(), 1);
 // package.json
 var package_default = {
   name: "pullfrog",
-  version: "0.1.60",
+  version: "0.1.61",
   type: "module",
   bin: {
     pullfrog: "dist/cli.mjs",
@@ -109481,6 +109481,19 @@ var claude = agent({
           delete env2.CLAUDE_CODE_OAUTH_TOKEN;
         }
       }
+      if (env2.CLAUDE_CODE_USE_BEDROCK) {
+        ctx.toolState.credential = "bedrock";
+      } else if (env2.CLAUDE_CODE_USE_VERTEX) {
+        ctx.toolState.credential = "vertex";
+      } else if (env2.CLAUDE_CODE_USE_FOUNDRY) {
+        ctx.toolState.credential = "foundry";
+      } else if (env2.ANTHROPIC_AUTH_TOKEN) {
+        ctx.toolState.credential = "gateway";
+      } else if (env2.ANTHROPIC_API_KEY) {
+        ctx.toolState.credential = "api_key";
+      } else if (env2.CLAUDE_CODE_OAUTH_TOKEN) {
+        ctx.toolState.credential = "subscription";
+      }
       const effortEnvOverride = env2[CLAUDE_EFFORT_ENV]?.trim();
       if (effortEnvOverride) {
         log2.warning(
@@ -109943,6 +109956,18 @@ function toTodoWriteInput(item) {
     }))
   };
 }
+var CODEX_MODEL_PRICING = {
+  "gpt-5.6-sol": { input: 5, cacheRead: 0.5, cacheWrite: 6.25, output: 30 },
+  "gpt-5.6-luna": { input: 0.2, cacheRead: 0.02, cacheWrite: 0.25, output: 1.2 },
+  "gpt-5.6-terra": { input: 2, cacheRead: 0.2, cacheWrite: 2.5, output: 12 }
+};
+function codexCostUsd(params) {
+  const price = params.model ? CODEX_MODEL_PRICING[params.model] : void 0;
+  if (!price) return void 0;
+  const fresh = Math.max(0, params.input - params.cacheRead - params.cacheWrite);
+  const usd = (fresh * price.input + params.cacheRead * price.cacheRead + params.cacheWrite * price.cacheWrite + params.output * price.output) / 1e6;
+  return usd > 0 ? usd : void 0;
+}
 async function runCodex2(params) {
   const startTime = performance6.now();
   const thinkingTimer = new ThinkingTimer();
@@ -109954,14 +109979,15 @@ async function runCodex2(params) {
   let turnError = null;
   let lastProviderError = null;
   let stdoutBuffer = "";
-  const tokens = { input: 0, cacheRead: 0, output: 0 };
+  const tokens = { input: 0, cacheRead: 0, cacheWrite: 0, output: 0 };
   function buildUsage2() {
     if (tokens.input === 0 && tokens.output === 0) return void 0;
     return {
       agent: "codex",
       inputTokens: tokens.input,
       outputTokens: tokens.output,
-      cacheReadTokens: tokens.cacheRead || void 0
+      cacheReadTokens: tokens.cacheRead || void 0,
+      costUsd: codexCostUsd({ model: params.model, ...tokens })
     };
   }
   function onItem(item, phase) {
@@ -110026,6 +110052,7 @@ async function runCodex2(params) {
       case "turn.completed":
         tokens.input += event.usage.input_tokens ?? 0;
         tokens.cacheRead += event.usage.cached_input_tokens ?? 0;
+        tokens.cacheWrite += event.usage.cache_write_input_tokens ?? 0;
         tokens.output += event.usage.output_tokens ?? 0;
         return;
       case "turn.failed":
@@ -110186,6 +110213,11 @@ var codex = agent({
     } else if (process.env.OPENAI_API_KEY) {
       env2.CODEX_API_KEY = process.env.OPENAI_API_KEY;
     }
+    if (codexHomeAuth) {
+      ctx.toolState.credential = "subscription";
+    } else if (env2.CODEX_API_KEY) {
+      ctx.toolState.credential = "api_key";
+    }
     const securityFlags = securityOverrideFlags({
       ctx,
       sandboxMode: ctx.payload.push === "disabled" ? "read-only" : "workspace-write",
@@ -110194,7 +110226,13 @@ var codex = agent({
       model: resolveCodexModel(ctx),
       effortRung: effort.rung && CODEX_EFFORTS.includes(effort.rung) ? effort.rung : void 0
     });
-    const runnerArgs = { cliPath, cwd: process.cwd(), env: env2, todoTracker: ctx.todoTracker };
+    const runnerArgs = {
+      cliPath,
+      cwd: process.cwd(),
+      env: env2,
+      todoTracker: ctx.todoTracker,
+      model: resolveCodexModel(ctx)
+    };
     const initial = await runCodex2({
       ...runnerArgs,
       args: [...securityFlags, "exec", "--json", ctx.instructions.full],
@@ -189416,7 +189454,9 @@ var STRING_KEYS = [
   "reviewNodeId",
   "planCommentNodeId",
   "summarySnapshot",
-  "model"
+  "model",
+  "agent",
+  "credential"
 ];
 var NUMBER_KEYS = [
   "inputTokens",
@@ -196195,7 +196235,10 @@ var JsonPayload = type({
   // optional so a payload from an older server build (pre-`checkRun`) still parses
   // against a newer action across a rolling deploy.
   "checkRun?": type({ id: "string" }).or("undefined"),
-  "generateSummary?": "boolean | undefined"
+  "generateSummary?": "boolean | undefined",
+  // optional so a payload from a pre-canary server build still parses against a
+  // newer action across a rolling deploy.
+  "codexArm?": "boolean | undefined"
 });
 var COLLABORATOR_PERMISSIONS = ["admin", "maintain", "write"];
 function isCollaborator(event) {
@@ -196324,6 +196367,7 @@ function resolvePayload(resolvedPromptInput, repoSettings) {
     progressComment: jsonPayload?.progressComment,
     checkRun: jsonPayload?.checkRun,
     generateSummary: jsonPayload?.generateSummary,
+    codexArm: jsonPayload?.codexArm,
     // permissions: inputs > repoSettings > fallbacks
     push: inputs.push ?? repoSettings.push ?? "restricted",
     shell: resolvedShell,
@@ -198268,8 +198312,12 @@ async function main() {
         const agent2 = resolveAgent({
           model: resolvedModel,
           proxyModel: payload.proxyModel,
-          codexAgent: runContext.repoSettings.codexAgent
+          // the account opt-in and the canary arm are both admissions to codex, so
+          // they OR: an account that opted in explicitly always gets it, and the
+          // canary widens the pool without ever demoting a run that already had it.
+          codexAgent: runContext.repoSettings.codexAgent || payload.codexArm === true
         });
+        toolState.agent = agent2.name;
         const effectiveModel = payload.proxyModel ?? resolvedModel ?? payload.model;
         toolState.model = effectiveModel;
         if (!payload.proxyModel) {
@@ -198627,6 +198675,8 @@ ${instructions.user}` : null,
       if (toolContext) {
         const patch = aggregateUsage(toolState.usageEntries);
         if (toolState.model) patch.model = toolState.model;
+        if (toolState.agent) patch.agent = toolState.agent;
+        if (toolState.credential) patch.credential = toolState.credential;
         if (Object.keys(patch).length > 0) {
           await patchWorkflowRunFields(toolContext, patch);
         }
@@ -199184,7 +199234,7 @@ async function runCli4(input) {
 }
 
 // cli.ts
-var VERSION10 = "0.1.60";
+var VERSION10 = "0.1.61";
 var bin = basename2(process.argv[1] || "");
 var PROG = bin === "pf" || bin === "pullfrog" ? bin : "pullfrog";
 var rawArgs = process.argv.slice(2);

package/dist/external.d.ts

@@ -322,6 +322,13 @@ export interface WriteablePayload {
     } | undefined;
     /** when true, seed the PR summary tmpfile + persist edits at run end */
     generateSummary?: boolean | undefined;
+    /**
+     * the codex canary assigned this run to the EXPERIMENTAL codex harness. rolled
+     * once server-side at reservation and stamped on the run row, so the row and the
+     * run always agree on which arm this was. ORed with the account opt-in in
+     * `resolveAgent` — it widens who reaches codex, never narrows it.
+     */
+    codexArm?: boolean | undefined;
 }
 export type Payload = Readonly<WriteablePayload>;
 /**

package/dist/index.js

@@ -105188,7 +105188,7 @@ var import_semver = __toESM(require_semver2(), 1);
 // package.json
 var package_default = {
   name: "pullfrog",
-  version: "0.1.60",
+  version: "0.1.61",
   type: "module",
   bin: {
     pullfrog: "dist/cli.mjs",
@@ -107314,6 +107314,19 @@ var claude = agent({
           delete env2.CLAUDE_CODE_OAUTH_TOKEN;
         }
       }
+      if (env2.CLAUDE_CODE_USE_BEDROCK) {
+        ctx.toolState.credential = "bedrock";
+      } else if (env2.CLAUDE_CODE_USE_VERTEX) {
+        ctx.toolState.credential = "vertex";
+      } else if (env2.CLAUDE_CODE_USE_FOUNDRY) {
+        ctx.toolState.credential = "foundry";
+      } else if (env2.ANTHROPIC_AUTH_TOKEN) {
+        ctx.toolState.credential = "gateway";
+      } else if (env2.ANTHROPIC_API_KEY) {
+        ctx.toolState.credential = "api_key";
+      } else if (env2.CLAUDE_CODE_OAUTH_TOKEN) {
+        ctx.toolState.credential = "subscription";
+      }
       const effortEnvOverride = env2[CLAUDE_EFFORT_ENV]?.trim();
       if (effortEnvOverride) {
         log.warning(
@@ -107823,6 +107836,18 @@ function toTodoWriteInput(item) {
     }))
   };
 }
+var CODEX_MODEL_PRICING = {
+  "gpt-5.6-sol": { input: 5, cacheRead: 0.5, cacheWrite: 6.25, output: 30 },
+  "gpt-5.6-luna": { input: 0.2, cacheRead: 0.02, cacheWrite: 0.25, output: 1.2 },
+  "gpt-5.6-terra": { input: 2, cacheRead: 0.2, cacheWrite: 2.5, output: 12 }
+};
+function codexCostUsd(params) {
+  const price = params.model ? CODEX_MODEL_PRICING[params.model] : void 0;
+  if (!price) return void 0;
+  const fresh = Math.max(0, params.input - params.cacheRead - params.cacheWrite);
+  const usd = (fresh * price.input + params.cacheRead * price.cacheRead + params.cacheWrite * price.cacheWrite + params.output * price.output) / 1e6;
+  return usd > 0 ? usd : void 0;
+}
 async function runCodex(params) {
   const startTime = performance6.now();
   const thinkingTimer = new ThinkingTimer();
@@ -107834,14 +107859,15 @@ async function runCodex(params) {
   let turnError = null;
   let lastProviderError = null;
   let stdoutBuffer = "";
-  const tokens = { input: 0, cacheRead: 0, output: 0 };
+  const tokens = { input: 0, cacheRead: 0, cacheWrite: 0, output: 0 };
   function buildUsage2() {
     if (tokens.input === 0 && tokens.output === 0) return void 0;
     return {
       agent: "codex",
       inputTokens: tokens.input,
       outputTokens: tokens.output,
-      cacheReadTokens: tokens.cacheRead || void 0
+      cacheReadTokens: tokens.cacheRead || void 0,
+      costUsd: codexCostUsd({ model: params.model, ...tokens })
     };
   }
   function onItem(item, phase) {
@@ -107906,6 +107932,7 @@ async function runCodex(params) {
       case "turn.completed":
         tokens.input += event.usage.input_tokens ?? 0;
         tokens.cacheRead += event.usage.cached_input_tokens ?? 0;
+        tokens.cacheWrite += event.usage.cache_write_input_tokens ?? 0;
         tokens.output += event.usage.output_tokens ?? 0;
         return;
       case "turn.failed":
@@ -108066,6 +108093,11 @@ var codex = agent({
     } else if (process.env.OPENAI_API_KEY) {
       env2.CODEX_API_KEY = process.env.OPENAI_API_KEY;
     }
+    if (codexHomeAuth) {
+      ctx.toolState.credential = "subscription";
+    } else if (env2.CODEX_API_KEY) {
+      ctx.toolState.credential = "api_key";
+    }
     const securityFlags = securityOverrideFlags({
       ctx,
       sandboxMode: ctx.payload.push === "disabled" ? "read-only" : "workspace-write",
@@ -108074,7 +108106,13 @@ var codex = agent({
       model: resolveCodexModel(ctx),
       effortRung: effort.rung && CODEX_EFFORTS.includes(effort.rung) ? effort.rung : void 0
     });
-    const runnerArgs = { cliPath, cwd: process.cwd(), env: env2, todoTracker: ctx.todoTracker };
+    const runnerArgs = {
+      cliPath,
+      cwd: process.cwd(),
+      env: env2,
+      todoTracker: ctx.todoTracker,
+      model: resolveCodexModel(ctx)
+    };
     const initial = await runCodex({
       ...runnerArgs,
       args: [...securityFlags, "exec", "--json", ctx.instructions.full],
@@ -187296,7 +187334,9 @@ var STRING_KEYS = [
   "reviewNodeId",
   "planCommentNodeId",
   "summarySnapshot",
-  "model"
+  "model",
+  "agent",
+  "credential"
 ];
 var NUMBER_KEYS = [
   "inputTokens",
@@ -194075,7 +194115,10 @@ var JsonPayload = type({
   // optional so a payload from an older server build (pre-`checkRun`) still parses
   // against a newer action across a rolling deploy.
   "checkRun?": type({ id: "string" }).or("undefined"),
-  "generateSummary?": "boolean | undefined"
+  "generateSummary?": "boolean | undefined",
+  // optional so a payload from a pre-canary server build still parses against a
+  // newer action across a rolling deploy.
+  "codexArm?": "boolean | undefined"
 });
 var COLLABORATOR_PERMISSIONS = ["admin", "maintain", "write"];
 function isCollaborator(event) {
@@ -194204,6 +194247,7 @@ function resolvePayload(resolvedPromptInput, repoSettings) {
     progressComment: jsonPayload?.progressComment,
     checkRun: jsonPayload?.checkRun,
     generateSummary: jsonPayload?.generateSummary,
+    codexArm: jsonPayload?.codexArm,
     // permissions: inputs > repoSettings > fallbacks
     push: inputs.push ?? repoSettings.push ?? "restricted",
     shell: resolvedShell,
@@ -196148,8 +196192,12 @@ async function main() {
         const agent2 = resolveAgent({
           model: resolvedModel,
           proxyModel: payload.proxyModel,
-          codexAgent: runContext.repoSettings.codexAgent
+          // the account opt-in and the canary arm are both admissions to codex, so
+          // they OR: an account that opted in explicitly always gets it, and the
+          // canary widens the pool without ever demoting a run that already had it.
+          codexAgent: runContext.repoSettings.codexAgent || payload.codexArm === true
         });
+        toolState.agent = agent2.name;
         const effectiveModel = payload.proxyModel ?? resolvedModel ?? payload.model;
         toolState.model = effectiveModel;
         if (!payload.proxyModel) {
@@ -196507,6 +196555,8 @@ ${instructions.user}` : null,
       if (toolContext) {
         const patch = aggregateUsage(toolState.usageEntries);
         if (toolState.model) patch.model = toolState.model;
+        if (toolState.agent) patch.agent = toolState.agent;
+        if (toolState.credential) patch.credential = toolState.credential;
         if (Object.keys(patch).length > 0) {
           await patchWorkflowRunFields(toolContext, patch);
         }

package/dist/toolState.d.ts

@@ -1,4 +1,4 @@
-import type { AgentUsage } from "./agents/shared.ts";
+import type { AgentCredential, AgentUsage } from "./agents/shared.ts";
 import type { PrepResult } from "./prep/types.ts";
 import type { AgentDiagnostic } from "./utils/agentHangReport.ts";
 import type { DiffCoverageState } from "./utils/diffCoverage.ts";
@@ -136,6 +136,8 @@ export interface ToolState {
     output?: string | undefined;
     usageEntries: AgentUsage[];
     model?: string | undefined;
+    agent?: string | undefined;
+    credential?: AgentCredential | undefined;
     modelFallback?: {
         from: string;
     } | undefined;

package/dist/utils/patchWorkflowRunFields.d.ts

@@ -10,7 +10,7 @@ import type { ToolContext } from "../mcp/server.ts";
  *    don't parse the audit-only `payload`.
  * Keep in sync with `STRING_FIELDS` in `app/api/workflow-run/[runId]/route.ts`.
  */
-declare const STRING_KEYS: readonly ["prNodeId", "issueNodeId", "reviewNodeId", "planCommentNodeId", "summarySnapshot", "model"];
+declare const STRING_KEYS: readonly ["prNodeId", "issueNodeId", "reviewNodeId", "planCommentNodeId", "summarySnapshot", "model", "agent", "credential"];
 /**
  * Number-valued usage fields — aggregated across all agent calls and PATCHed
  * once at end-of-run. Token counts are Int4 on the DB side (ample for any

package/dist/utils/payload.d.ts

@@ -28,6 +28,7 @@ export declare const JsonPayload: import("arktype/internal/variants/object.ts").
         id: string;
     } | undefined;
     generateSummary?: boolean | undefined;
+    codexArm?: boolean | undefined;
 }, {}>;
 export declare const Inputs: import("arktype/internal/variants/object.ts").ObjectType<{
     prompt?: string | undefined;
@@ -75,6 +76,7 @@ export declare function resolvePayload(resolvedPromptInput: ResolvedPromptInput,
         id: string;
     } | undefined;
     generateSummary: boolean | undefined;
+    codexArm: boolean | undefined;
     push: import("../external.ts").PushPermission;
     shell: import("../external.ts").ShellPermission;
     runStatusCheck: boolean;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "pullfrog",
-  "version": "0.1.60",
+  "version": "0.1.61",
   "type": "module",
   "bin": {
     "pullfrog": "dist/cli.mjs",