pullfrog 0.1.71 → 0.1.73

package/dist/index.js

@@ -17639,12 +17639,12 @@ var require_lib = __commonJS({
             throw new Error("Client has already been disposed.");
           }
           const parsedUrl = new URL(requestUrl);
-          let info2 = this._prepareRequest(verb, parsedUrl, headers);
+          let info3 = this._prepareRequest(verb, parsedUrl, headers);
           const maxTries = this._allowRetries && RetryableHttpVerbs.includes(verb) ? this._maxRetries + 1 : 1;
           let numTries = 0;
           let response;
           do {
-            response = yield this.requestRaw(info2, data);
+            response = yield this.requestRaw(info3, data);
             if (response && response.message && response.message.statusCode === HttpCodes.Unauthorized) {
               let authenticationHandler;
               for (const handler2 of this.handlers) {
@@ -17654,7 +17654,7 @@ var require_lib = __commonJS({
                 }
               }
               if (authenticationHandler) {
-                return authenticationHandler.handleAuthentication(this, info2, data);
+                return authenticationHandler.handleAuthentication(this, info3, data);
               } else {
                 return response;
               }
@@ -17677,8 +17677,8 @@ var require_lib = __commonJS({
                   }
                 }
               }
-              info2 = this._prepareRequest(verb, parsedRedirectUrl, headers);
-              response = yield this.requestRaw(info2, data);
+              info3 = this._prepareRequest(verb, parsedRedirectUrl, headers);
+              response = yield this.requestRaw(info3, data);
               redirectsRemaining--;
             }
             if (!response.message.statusCode || !HttpResponseRetryCodes.includes(response.message.statusCode)) {
@@ -17707,7 +17707,7 @@ var require_lib = __commonJS({
        * @param info
        * @param data
        */
-      requestRaw(info2, data) {
+      requestRaw(info3, data) {
         return __awaiter(this, void 0, void 0, function* () {
           return new Promise((resolve3, reject) => {
             function callbackForResult(err, res) {
@@ -17719,7 +17719,7 @@ var require_lib = __commonJS({
                 resolve3(res);
               }
             }
-            this.requestRawWithCallback(info2, data, callbackForResult);
+            this.requestRawWithCallback(info3, data, callbackForResult);
           });
         });
       }
@@ -17729,12 +17729,12 @@ var require_lib = __commonJS({
        * @param data
        * @param onResult
        */
-      requestRawWithCallback(info2, data, onResult) {
+      requestRawWithCallback(info3, data, onResult) {
         if (typeof data === "string") {
-          if (!info2.options.headers) {
-            info2.options.headers = {};
+          if (!info3.options.headers) {
+            info3.options.headers = {};
           }
-          info2.options.headers["Content-Length"] = Buffer.byteLength(data, "utf8");
+          info3.options.headers["Content-Length"] = Buffer.byteLength(data, "utf8");
         }
         let callbackCalled = false;
         function handleResult2(err, res) {
@@ -17743,7 +17743,7 @@ var require_lib = __commonJS({
             onResult(err, res);
           }
         }
-        const req = info2.httpModule.request(info2.options, (msg) => {
+        const req = info3.httpModule.request(info3.options, (msg) => {
           const res = new HttpClientResponse(msg);
           handleResult2(void 0, res);
         });
@@ -17755,7 +17755,7 @@ var require_lib = __commonJS({
           if (socket) {
             socket.end();
           }
-          handleResult2(new Error(`Request timeout: ${info2.options.path}`));
+          handleResult2(new Error(`Request timeout: ${info3.options.path}`));
         });
         req.on("error", function(err) {
           handleResult2(err);
@@ -17791,27 +17791,27 @@ var require_lib = __commonJS({
         return this._getProxyAgentDispatcher(parsedUrl, proxyUrl);
       }
       _prepareRequest(method, requestUrl, headers) {
-        const info2 = {};
-        info2.parsedUrl = requestUrl;
-        const usingSsl = info2.parsedUrl.protocol === "https:";
-        info2.httpModule = usingSsl ? https2 : http2;
+        const info3 = {};
+        info3.parsedUrl = requestUrl;
+        const usingSsl = info3.parsedUrl.protocol === "https:";
+        info3.httpModule = usingSsl ? https2 : http2;
         const defaultPort = usingSsl ? 443 : 80;
-        info2.options = {};
-        info2.options.host = info2.parsedUrl.hostname;
-        info2.options.port = info2.parsedUrl.port ? parseInt(info2.parsedUrl.port) : defaultPort;
-        info2.options.path = (info2.parsedUrl.pathname || "") + (info2.parsedUrl.search || "");
-        info2.options.method = method;
-        info2.options.headers = this._mergeHeaders(headers);
+        info3.options = {};
+        info3.options.host = info3.parsedUrl.hostname;
+        info3.options.port = info3.parsedUrl.port ? parseInt(info3.parsedUrl.port) : defaultPort;
+        info3.options.path = (info3.parsedUrl.pathname || "") + (info3.parsedUrl.search || "");
+        info3.options.method = method;
+        info3.options.headers = this._mergeHeaders(headers);
         if (this.userAgent != null) {
-          info2.options.headers["user-agent"] = this.userAgent;
+          info3.options.headers["user-agent"] = this.userAgent;
         }
-        info2.options.agent = this._getAgent(info2.parsedUrl);
+        info3.options.agent = this._getAgent(info3.parsedUrl);
         if (this.handlers) {
           for (const handler2 of this.handlers) {
-            handler2.prepareRequest(info2.options);
+            handler2.prepareRequest(info3.options);
           }
         }
-        return info2;
+        return info3;
       }
       _mergeHeaders(headers) {
         if (this.requestOptions && this.requestOptions.headers) {
@@ -19793,18 +19793,18 @@ Support boolean input list: \`true | True | TRUE | false | False | FALSE\``);
       (0, command_1.issueCommand)("error", (0, utils_1.toCommandProperties)(properties), message instanceof Error ? message.toString() : message);
     }
     exports.error = error62;
-    function warning3(message, properties = {}) {
+    function warning4(message, properties = {}) {
       (0, command_1.issueCommand)("warning", (0, utils_1.toCommandProperties)(properties), message instanceof Error ? message.toString() : message);
     }
-    exports.warning = warning3;
+    exports.warning = warning4;
     function notice(message, properties = {}) {
       (0, command_1.issueCommand)("notice", (0, utils_1.toCommandProperties)(properties), message instanceof Error ? message.toString() : message);
     }
     exports.notice = notice;
-    function info2(message) {
+    function info3(message) {
       process.stdout.write(message + os2.EOL);
     }
-    exports.info = info2;
+    exports.info = info3;
     function startGroup3(name) {
       (0, command_1.issue)("group", name);
     }
@@ -19834,10 +19834,10 @@ Support boolean input list: \`true | True | TRUE | false | False | FALSE\``);
       (0, command_1.issueCommand)("save-state", { name }, (0, utils_1.toCommandValue)(value2));
     }
     exports.saveState = saveState3;
-    function getState(name) {
+    function getState2(name) {
       return process.env[`STATE_${name}`] || "";
     }
-    exports.getState = getState;
+    exports.getState = getState2;
     function getIDToken2(aud) {
       return __awaiter(this, void 0, void 0, function* () {
         return yield oidc_utils_1.OidcClient.getIDToken(aud);
@@ -27621,11 +27621,11 @@ var require_mode = __commonJS({
 var require_isexe = __commonJS({
   "node_modules/.pnpm/isexe@2.0.0/node_modules/isexe/index.js"(exports, module) {
     var fs5 = __require("fs");
-    var core11;
+    var core12;
     if (process.platform === "win32" || global.TESTING_WINDOWS) {
-      core11 = require_windows();
+      core12 = require_windows();
     } else {
-      core11 = require_mode();
+      core12 = require_mode();
     }
     module.exports = isexe;
     isexe.sync = sync;
@@ -27648,7 +27648,7 @@ var require_isexe = __commonJS({
           });
         });
       }
-      core11(path4, options || {}, function(er, is) {
+      core12(path4, options || {}, function(er, is) {
         if (er) {
           if (er.code === "EACCES" || options && options.ignoreErrors) {
             er = null;
@@ -27660,7 +27660,7 @@ var require_isexe = __commonJS({
     }
     function sync(path4, options) {
       try {
-        return core11.sync(path4, options || {});
+        return core12.sync(path4, options || {});
       } catch (er) {
         if (options && options.ignoreErrors || er.code === "EACCES") {
           return false;
@@ -38449,8 +38449,8 @@ var require_socks5_proxy_agent = __commonJS({
           const timeout = setTimeout(() => {
             reject(new Error("SOCKS5 connection timeout"));
           }, 5e3);
-          const onConnected = (info2) => {
-            debug3("SOCKS5 tunnel established to", targetHost, targetPort, "via", info2);
+          const onConnected = (info3) => {
+            debug3("SOCKS5 tunnel established to", targetHost, targetPort, "via", info3);
             clearTimeout(timeout);
             socks5Client.removeListener("error", onError);
             resolve3();
@@ -80800,7 +80800,7 @@ var require_core3 = __commonJS({
     Object.defineProperty(exports, "__esModule", { value: true });
     var id_1 = require_id();
     var ref_1 = require_ref();
-    var core11 = [
+    var core12 = [
       "$schema",
       "$id",
       "$defs",
@@ -80810,7 +80810,7 @@ var require_core3 = __commonJS({
       id_1.default,
       ref_1.default
     ];
-    exports.default = core11;
+    exports.default = core12;
   }
 });
 
@@ -108857,6 +108857,10 @@ function getModelManagedCredentials(slug2) {
   const providerConfig = providers[parsed2.provider];
   return providerConfig?.managedCredentials?.slice() ?? [];
 }
+var CLAUDE_CODE_ONLY_CREDENTIALS = ["ANTHROPIC_AUTH_TOKEN", "CLAUDE_CODE_OAUTH_TOKEN"];
+function getOpenCodeEnvVars(slug2) {
+  return getModelEnvVars(slug2).filter((v) => !CLAUDE_CODE_ONLY_CREDENTIALS.includes(v));
+}
 var modelAliases = Object.entries(providers).flatMap(
   ([providerKey, config3]) => Object.entries(config3.models).map(([modelId, def]) => ({
     slug: `${providerKey}/${modelId}`,
@@ -109791,7 +109795,8 @@ var import_semver = __toESM(require_semver2(), 1);
 // package.json
 var package_default = {
   name: "pullfrog",
-  version: "0.1.71",
+  version: "0.1.73",
+  cliContractVersion: "1",
   type: "module",
   bin: {
     pullfrog: "dist/cli.mjs",
@@ -109857,7 +109862,8 @@ var package_default = {
     typescript: "^5.9.3",
     undici: "^7.22.0",
     vitest: "^4.0.17",
-    yaml: "^2.8.2"
+    yaml: "^2.8.2",
+    zod: "4.3.6"
   },
   repository: {
     type: "git",
@@ -111830,6 +111836,11 @@ function installManagedSettings(params) {
     return false;
   }
 }
+function autoSelectClaudeModel() {
+  return modelAliases.find(
+    (a) => a.provider === "anthropic" && a.preferred && !a.hidden && !a.fallback && !a.routing
+  )?.resolve;
+}
 var claude = agent({
   name: "claude",
   install: installClaudeCli,
@@ -111837,7 +111848,8 @@ var claude = agent({
     var _stack = [];
     try {
       const cliPath = await installClaudeCli();
-      const specifier = ctx.payload.proxyModel ?? ctx.resolvedModel;
+      const specifier = ctx.payload.proxyModel ?? ctx.resolvedModel ?? autoSelectClaudeModel();
+      if (specifier) ctx.toolState.model = specifier;
       const bedrockModelId = process.env[BEDROCK_MODEL_ID_ENV]?.trim();
       const isBedrockRoute = specifier !== void 0 && bedrockModelId !== void 0 && bedrockModelId === specifier;
       const vertexModelId = process.env[VERTEX_MODEL_ID_ENV]?.trim();
@@ -111857,7 +111869,10 @@ var claude = agent({
       });
       installBundledSkills({ home: homeEnv.HOME });
       const mcpConfigPath = writeMcpConfig(ctx);
-      const effort = resolveRunEffort(ctx);
+      const effort = resolveRunEffort({ ...ctx, resolvedModel: specifier });
+      if (!ctx.resolvedModel && !ctx.payload.proxyModel) {
+        log.info(`\xBB effort: ${effort.rung ?? "n/a (model has no effort control)"}`);
+      }
       const stopHookPath = join4(ctx.tmpdir, "pullfrog-stop-hook.sh");
       writeFileSync3(stopHookPath, buildStopHookScript(), { mode: 493 });
       const pretoolGate = writePretoolGateAssets({ ctx, stopHookPath });
@@ -111961,7 +111976,7 @@ var claude = agent({
 });
 
 // agents/codex.ts
-var core2 = __toESM(require_core(), 1);
+var core3 = __toESM(require_core(), 1);
 import { existsSync as existsSync5, mkdirSync as mkdirSync6, readFileSync as readFileSync3, writeFileSync as writeFileSync5 } from "node:fs";
 import { join as join6 } from "node:path";
 import { performance as performance6 } from "node:perf_hooks";
@@ -112189,6 +112204,64 @@ function bootstrapPullfrogDataDir() {
   }
 }
 
+// utils/oauthWriteback.ts
+var core2 = __toESM(require_core(), 1);
+
+// utils/apiUrl.ts
+function isLocalUrl(url4) {
+  return url4.hostname === "localhost" || url4.hostname === "127.0.0.1";
+}
+function getApiUrl() {
+  const raw2 = process.env.API_URL || "https://pullfrog.com";
+  const parsed2 = new URL(raw2);
+  if (parsed2.protocol !== "https:" && !isLocalUrl(parsed2)) {
+    throw new Error(
+      `API_URL must use https:// (got ${parsed2.protocol}). only localhost is exempt.`
+    );
+  }
+  log.debug(`resolved API_URL: ${raw2}`);
+  return raw2;
+}
+function isLocalApiUrl() {
+  try {
+    return isLocalUrl(new URL(getApiUrl()));
+  } catch {
+    return false;
+  }
+}
+
+// utils/apiFetch.ts
+async function apiFetch(options) {
+  const apiUrl = getApiUrl();
+  const url4 = new URL(options.path, apiUrl);
+  const bypassSecret = process.env.VERCEL_AUTOMATION_BYPASS_SECRET;
+  if (bypassSecret) {
+    url4.searchParams.set("x-vercel-protection-bypass", bypassSecret);
+  }
+  const headers = {
+    ...options.headers
+  };
+  if (bypassSecret) {
+    headers["x-vercel-protection-bypass"] = bypassSecret;
+  }
+  if (!options.body) {
+    for (const key of Object.keys(headers)) {
+      if (key.toLowerCase() === "content-type") delete headers[key];
+    }
+  }
+  log.debug(`api fetch: ${options.method ?? "GET"} ${url4.pathname}`);
+  const init = {
+    method: options.method ?? "GET",
+    headers
+  };
+  if (options.body) init.body = options.body;
+  if (options.signal) init.signal = options.signal;
+  return fetch(url4.toString(), init);
+}
+
+// utils/oauthWriteback.ts
+var OAUTH_WRITEBACK_STATE = "oauth_writeback";
+
 // utils/secrets.ts
 var SENSITIVE_PATTERNS = [
   /_KEY$/i,
@@ -112757,8 +112830,8 @@ var codex = agent({
       effortRung: effort.rung && CODEX_EFFORTS.includes(effort.rung) ? effort.rung : void 0
     });
     if (codexHomeAuth) {
-      core2.saveState(
-        "oauth_writeback",
+      core3.saveState(
+        OAUTH_WRITEBACK_STATE,
         JSON.stringify({
           apiToken: ctx.apiToken,
           entries: [
@@ -112842,7 +112915,7 @@ var codex = agent({
 });
 
 // agents/opencode.ts
-var core3 = __toESM(require_core(), 1);
+var core4 = __toESM(require_core(), 1);
 import { spawn as nodeSpawn2 } from "node:child_process";
 import { mkdirSync as mkdirSync7, writeFileSync as writeFileSync6 } from "node:fs";
 import { join as join7 } from "node:path";
@@ -118578,7 +118651,7 @@ function autoSelectModel() {
   const authorized2 = getAuthorizedModels();
   const selectable = modelAliases.filter((a) => !a.hidden && !a.fallback && !a.routing);
   const servable = selectable.filter((a) => {
-    const envVars = getModelEnvVars(a.resolve);
+    const envVars = getOpenCodeEnvVars(a.resolve);
     return envVars.length === 0 || envVars.some((name) => process.env[name]);
   });
   const pick4 = (list) => list.find((a) => a.preferred) ?? list[0];
@@ -119251,8 +119324,8 @@ var opencode = agent({
       });
     }
     if (writebacks.length > 0) {
-      core3.saveState(
-        "oauth_writeback",
+      core4.saveState(
+        OAUTH_WRITEBACK_STATE,
         JSON.stringify({ apiToken: ctx.apiToken, entries: writebacks })
       );
     }
@@ -125138,25 +125211,25 @@ var Protocol = class {
     });
   }
   _resetTimeout(messageId) {
-    const info2 = this._timeoutInfo.get(messageId);
-    if (!info2)
+    const info3 = this._timeoutInfo.get(messageId);
+    if (!info3)
       return false;
-    const totalElapsed = Date.now() - info2.startTime;
-    if (info2.maxTotalTimeout && totalElapsed >= info2.maxTotalTimeout) {
+    const totalElapsed = Date.now() - info3.startTime;
+    if (info3.maxTotalTimeout && totalElapsed >= info3.maxTotalTimeout) {
       this._timeoutInfo.delete(messageId);
       throw McpError.fromError(ErrorCode.RequestTimeout, "Maximum total timeout exceeded", {
-        maxTotalTimeout: info2.maxTotalTimeout,
+        maxTotalTimeout: info3.maxTotalTimeout,
         totalElapsed
       });
     }
-    clearTimeout(info2.timeoutId);
-    info2.timeoutId = setTimeout(info2.onTimeout, info2.timeout);
+    clearTimeout(info3.timeoutId);
+    info3.timeoutId = setTimeout(info3.onTimeout, info3.timeout);
     return true;
   }
   _cleanupTimeout(messageId) {
-    const info2 = this._timeoutInfo.get(messageId);
-    if (info2) {
-      clearTimeout(info2.timeoutId);
+    const info3 = this._timeoutInfo.get(messageId);
+    if (info3) {
+      clearTimeout(info3.timeoutId);
       this._timeoutInfo.delete(messageId);
     }
   }
@@ -125201,8 +125274,8 @@ var Protocol = class {
     this._progressHandlers.clear();
     this._taskProgressTokens.clear();
     this._pendingDebouncedNotifications.clear();
-    for (const info2 of this._timeoutInfo.values()) {
-      clearTimeout(info2.timeoutId);
+    for (const info3 of this._timeoutInfo.values()) {
+      clearTimeout(info3.timeoutId);
     }
     this._timeoutInfo.clear();
     for (const controller of this._requestHandlerAbortControllers.values()) {
@@ -135452,24 +135525,24 @@ var Protocol2 = class {
     });
   }
   _resetTimeout(messageId) {
-    const info2 = this._timeoutInfo.get(messageId);
-    if (!info2) return false;
-    const totalElapsed = Date.now() - info2.startTime;
-    if (info2.maxTotalTimeout && totalElapsed >= info2.maxTotalTimeout) {
+    const info3 = this._timeoutInfo.get(messageId);
+    if (!info3) return false;
+    const totalElapsed = Date.now() - info3.startTime;
+    if (info3.maxTotalTimeout && totalElapsed >= info3.maxTotalTimeout) {
       this._timeoutInfo.delete(messageId);
       throw new SdkError(SdkErrorCode.RequestTimeout, "Maximum total timeout exceeded", {
-        maxTotalTimeout: info2.maxTotalTimeout,
+        maxTotalTimeout: info3.maxTotalTimeout,
         totalElapsed
       });
     }
-    clearTimeout(info2.timeoutId);
-    info2.timeoutId = setTimeout(info2.onTimeout, info2.timeout);
+    clearTimeout(info3.timeoutId);
+    info3.timeoutId = setTimeout(info3.onTimeout, info3.timeout);
     return true;
   }
   _cleanupTimeout(messageId) {
-    const info2 = this._timeoutInfo.get(messageId);
-    if (info2) {
-      clearTimeout(info2.timeoutId);
+    const info3 = this._timeoutInfo.get(messageId);
+    if (info3) {
+      clearTimeout(info3.timeoutId);
       this._timeoutInfo.delete(messageId);
     }
   }
@@ -135514,7 +135587,7 @@ var Protocol2 = class {
     this._responseHandlers = /* @__PURE__ */ new Map();
     this._progressHandlers.clear();
     this._pendingDebouncedNotifications.clear();
-    for (const info2 of this._timeoutInfo.values()) clearTimeout(info2.timeoutId);
+    for (const info3 of this._timeoutInfo.values()) clearTimeout(info3.timeoutId);
     this._timeoutInfo.clear();
     const requestHandlerAbortControllers = this._requestHandlerAbortControllers;
     this._requestHandlerAbortControllers = /* @__PURE__ */ new Map();
@@ -136163,7 +136236,7 @@ function validateToolName(name) {
 function issueToolNameWarning(name, warnings) {
   if (warnings.length > 0) {
     console.warn(`Tool name validation warning for "${name}":`);
-    for (const warning3 of warnings) console.warn(`  - ${warning3}`);
+    for (const warning4 of warnings) console.warn(`  - ${warning4}`);
     console.warn("Tool registration will proceed, but this may cause compatibility issues.");
     console.warn("Consider updating the tool name to conform to the MCP tool naming standard.");
     console.warn("See SEP: Specify Format for Tool Names (https://github.com/modelcontextprotocol/modelcontextprotocol/issues/986) for more details.");
@@ -140119,7 +140192,7 @@ var require_core$2 = /* @__PURE__ */ __commonJSMin(((exports) => {
   Object.defineProperty(exports, "__esModule", { value: true });
   const id_1 = require_id2();
   const ref_1 = require_ref2();
-  const core11 = [
+  const core12 = [
     "$schema",
     "$id",
     "$defs",
@@ -140129,7 +140202,7 @@ var require_core$2 = /* @__PURE__ */ __commonJSMin(((exports) => {
     id_1.default,
     ref_1.default
   ];
-  exports.default = core11;
+  exports.default = core12;
 }));
 var require_limitNumber2 = /* @__PURE__ */ __commonJSMin(((exports) => {
   Object.defineProperty(exports, "__esModule", { value: true });
@@ -142267,7 +142340,7 @@ var require_json_schema_2019_09 = /* @__PURE__ */ __commonJSMin(((exports) => {
   const metaSchema = require_schema$1();
   const applicator = require_applicator$1();
   const content = require_content$1();
-  const core11 = require_core$1();
+  const core12 = require_core$1();
   const format2 = require_format3();
   const metadata = require_meta_data$1();
   const validation = require_validation$1();
@@ -142277,7 +142350,7 @@ var require_json_schema_2019_09 = /* @__PURE__ */ __commonJSMin(((exports) => {
       metaSchema,
       applicator,
       content,
-      core11,
+      core12,
       with$data(this, format2),
       metadata,
       with$data(this, validation)
@@ -142717,7 +142790,7 @@ var require_json_schema_2020_12 = /* @__PURE__ */ __commonJSMin(((exports) => {
   const applicator = require_applicator2();
   const unevaluated = require_unevaluated();
   const content = require_content();
-  const core11 = require_core4();
+  const core12 = require_core4();
   const format2 = require_format_annotation();
   const metadata = require_meta_data();
   const validation = require_validation2();
@@ -142728,7 +142801,7 @@ var require_json_schema_2020_12 = /* @__PURE__ */ __commonJSMin(((exports) => {
       applicator,
       unevaluated,
       content,
-      core11,
+      core12,
       with$data(this, format2),
       metadata,
       with$data(this, validation)
@@ -149593,24 +149666,24 @@ var Protocol3 = class {
     });
   }
   _resetTimeout(messageId) {
-    const info2 = this._timeoutInfo.get(messageId);
-    if (!info2) return false;
-    const totalElapsed = Date.now() - info2.startTime;
-    if (info2.maxTotalTimeout && totalElapsed >= info2.maxTotalTimeout) {
+    const info3 = this._timeoutInfo.get(messageId);
+    if (!info3) return false;
+    const totalElapsed = Date.now() - info3.startTime;
+    if (info3.maxTotalTimeout && totalElapsed >= info3.maxTotalTimeout) {
       this._timeoutInfo.delete(messageId);
       throw new SdkError2(SdkErrorCode2.RequestTimeout, "Maximum total timeout exceeded", {
-        maxTotalTimeout: info2.maxTotalTimeout,
+        maxTotalTimeout: info3.maxTotalTimeout,
         totalElapsed
       });
     }
-    clearTimeout(info2.timeoutId);
-    info2.timeoutId = setTimeout(info2.onTimeout, info2.timeout);
+    clearTimeout(info3.timeoutId);
+    info3.timeoutId = setTimeout(info3.onTimeout, info3.timeout);
     return true;
   }
   _cleanupTimeout(messageId) {
-    const info2 = this._timeoutInfo.get(messageId);
-    if (info2) {
-      clearTimeout(info2.timeoutId);
+    const info3 = this._timeoutInfo.get(messageId);
+    if (info3) {
+      clearTimeout(info3.timeoutId);
       this._timeoutInfo.delete(messageId);
     }
   }
@@ -149655,7 +149728,7 @@ var Protocol3 = class {
     this._responseHandlers = /* @__PURE__ */ new Map();
     this._progressHandlers.clear();
     this._pendingDebouncedNotifications.clear();
-    for (const info2 of this._timeoutInfo.values()) clearTimeout(info2.timeoutId);
+    for (const info3 of this._timeoutInfo.values()) clearTimeout(info3.timeoutId);
     this._timeoutInfo.clear();
     const requestHandlerAbortControllers = this._requestHandlerAbortControllers;
     this._requestHandlerAbortControllers = /* @__PURE__ */ new Map();
@@ -154170,7 +154243,7 @@ var require_core$22 = /* @__PURE__ */ __commonJSMin2(((exports) => {
   Object.defineProperty(exports, "__esModule", { value: true });
   const id_1 = require_id3();
   const ref_1 = require_ref3();
-  const core11 = [
+  const core12 = [
     "$schema",
     "$id",
     "$defs",
@@ -154180,7 +154253,7 @@ var require_core$22 = /* @__PURE__ */ __commonJSMin2(((exports) => {
     id_1.default,
     ref_1.default
   ];
-  exports.default = core11;
+  exports.default = core12;
 }));
 var require_limitNumber3 = /* @__PURE__ */ __commonJSMin2(((exports) => {
   Object.defineProperty(exports, "__esModule", { value: true });
@@ -156318,7 +156391,7 @@ var require_json_schema_2019_092 = /* @__PURE__ */ __commonJSMin2(((exports) =>
   const metaSchema = require_schema$12();
   const applicator = require_applicator$12();
   const content = require_content$12();
-  const core11 = require_core$12();
+  const core12 = require_core$12();
   const format2 = require_format4();
   const metadata = require_meta_data$12();
   const validation = require_validation$12();
@@ -156328,7 +156401,7 @@ var require_json_schema_2019_092 = /* @__PURE__ */ __commonJSMin2(((exports) =>
       metaSchema,
       applicator,
       content,
-      core11,
+      core12,
       with$data(this, format2),
       metadata,
       with$data(this, validation)
@@ -156768,7 +156841,7 @@ var require_json_schema_2020_122 = /* @__PURE__ */ __commonJSMin2(((exports) =>
   const applicator = require_applicator3();
   const unevaluated = require_unevaluated2();
   const content = require_content2();
-  const core11 = require_core5();
+  const core12 = require_core5();
   const format2 = require_format_annotation2();
   const metadata = require_meta_data2();
   const validation = require_validation3();
@@ -156779,7 +156852,7 @@ var require_json_schema_2020_122 = /* @__PURE__ */ __commonJSMin2(((exports) =>
       applicator,
       unevaluated,
       content,
-      core11,
+      core12,
       with$data(this, format2),
       metadata,
       with$data(this, validation)
@@ -186515,7 +186588,7 @@ this usually means your local branch has commits that were never pushed \u2014 s
 }
 
 // utils/github.ts
-var core4 = __toESM(require_core(), 1);
+var core5 = __toESM(require_core(), 1);
 import { createSign } from "node:crypto";
 import { rename, writeFile } from "node:fs/promises";
 import { dirname as dirname3, join as join11 } from "node:path";
@@ -186690,8 +186763,8 @@ function throttling(octokit, octokitOptions) {
       "error",
       (e) => octokit.log.warn("Error in throttling-plugin limit handler", e)
     );
-    state.retryLimiter.on("failed", async function(error62, info2) {
-      const [state2, request2, options] = info2.args;
+    state.retryLimiter.on("failed", async function(error62, info3) {
+      const [state2, request2, options] = info3.args;
       const { pathname } = new URL(options.url, "http://github.test");
       const shouldRetryGraphQL = pathname.startsWith("/graphql") && error62.status !== 401;
       if (!(shouldRetryGraphQL || error62.status === 403 || error62.status === 429)) {
@@ -190720,58 +190793,6 @@ var Octokit2 = Octokit.plugin(requestLog, legacyRestEndpointMethods, paginateRes
   }
 );
 
-// utils/apiUrl.ts
-function isLocalUrl(url4) {
-  return url4.hostname === "localhost" || url4.hostname === "127.0.0.1";
-}
-function getApiUrl() {
-  const raw2 = process.env.API_URL || "https://pullfrog.com";
-  const parsed2 = new URL(raw2);
-  if (parsed2.protocol !== "https:" && !isLocalUrl(parsed2)) {
-    throw new Error(
-      `API_URL must use https:// (got ${parsed2.protocol}). only localhost is exempt.`
-    );
-  }
-  log.debug(`resolved API_URL: ${raw2}`);
-  return raw2;
-}
-function isLocalApiUrl() {
-  try {
-    return isLocalUrl(new URL(getApiUrl()));
-  } catch {
-    return false;
-  }
-}
-
-// utils/apiFetch.ts
-async function apiFetch(options) {
-  const apiUrl = getApiUrl();
-  const url4 = new URL(options.path, apiUrl);
-  const bypassSecret = process.env.VERCEL_AUTOMATION_BYPASS_SECRET;
-  if (bypassSecret) {
-    url4.searchParams.set("x-vercel-protection-bypass", bypassSecret);
-  }
-  const headers = {
-    ...options.headers
-  };
-  if (bypassSecret) {
-    headers["x-vercel-protection-bypass"] = bypassSecret;
-  }
-  if (!options.body) {
-    for (const key of Object.keys(headers)) {
-      if (key.toLowerCase() === "content-type") delete headers[key];
-    }
-  }
-  log.debug(`api fetch: ${options.method ?? "GET"} ${url4.pathname}`);
-  const init = {
-    method: options.method ?? "GET",
-    headers
-  };
-  if (options.body) init.body = options.body;
-  if (options.signal) init.signal = options.signal;
-  return fetch(url4.toString(), init);
-}
-
 // utils/github.ts
 var OIDC_AUDIENCE = "pullfrog-api";
 function isObject4(value2) {
@@ -190817,7 +190838,7 @@ async function fetchIdTokenFromStash(creds) {
     throw new Error("ID token response has no value field");
   }
   if (isGitHubActions) {
-    core4.setSecret(body.value);
+    core5.setSecret(body.value);
   }
   return body.value;
 }
@@ -190830,7 +190851,7 @@ function translateIdTokenError(error62) {
 var mintIdToken = op(
   async () => {
     try {
-      return await core4.getIDToken(OIDC_AUDIENCE);
+      return await core5.getIDToken(OIDC_AUDIENCE);
     } catch (error62) {
       throw translateIdTokenError(error62);
     }
@@ -192500,11 +192521,6 @@ function buildTrialDisclosure(owner) {
 }
 function buildPullfrogFooter(params) {
   const parts = [];
-  if (params.shaPinned) {
-    parts.push(
-      "\u26A0\uFE0F this action is pinned to a commit SHA, which [freezes the cleanup step](https://docs.pullfrog.com/versioning) \u2014 switch to `@v0` or keep the SHA fresh with Dependabot"
-    );
-  }
   if (params.customParts) {
     parts.push(...params.customParts);
   }
@@ -192689,7 +192705,6 @@ function buildCommentFooter(ctx, customParts) {
     fallbackFrom: ctx.toolState.modelFallback?.from,
     clamped: ctx.toolState.modelClamped,
     unselectedProxyDefault: ctx.toolState.unselectedProxyDefault,
-    shaPinned: ctx.toolState.shaPinned,
     oss: ctx.oss,
     owner: ctx.repo.owner
   });
@@ -193689,7 +193704,6 @@ async function createAndSubmitWithFooter(ctx, params, opts) {
       fallbackFrom: ctx.toolState.modelFallback?.from,
       clamped: ctx.toolState.modelClamped,
       unselectedProxyDefault: ctx.toolState.unselectedProxyDefault,
-      shaPinned: ctx.toolState.shaPinned,
       oss: ctx.oss,
       owner: ctx.repo.owner
     });
@@ -196451,7 +196465,6 @@ function buildPrBodyWithFooter(ctx, body) {
     fallbackFrom: ctx.toolState.modelFallback?.from,
     clamped: ctx.toolState.modelClamped,
     unselectedProxyDefault: ctx.toolState.unselectedProxyDefault,
-    shaPinned: ctx.toolState.shaPinned,
     oss: ctx.oss,
     owner: ctx.repo.owner
   });
@@ -197532,8 +197545,8 @@ function CheckoutRepoTool(ctx) {
       const state = ensureRepoState(ctx.toolState, { owner, name: repo, dir, access });
       const rc = resolveRepoCtx(ctx, repo);
       try {
-        const info2 = await rc.octokit.rest.repos.get({ owner, repo });
-        const defaultBranch = info2.data.default_branch;
+        const info3 = await rc.octokit.rest.repos.get({ owner, repo });
+        const defaultBranch = info3.data.default_branch;
         state.defaultBranch = defaultBranch;
         const url4 = `https://github.com/${owner}/${repo}.git`;
         $("git", ["init", "-q"], { cwd: dir });
@@ -197900,7 +197913,7 @@ function hasEnvVar2(name) {
   return typeof value2 === "string" && value2.length > 0;
 }
 function modelHasRuntimeAuth(model) {
-  const authVars = [...getModelEnvVars(model), ...getModelManagedCredentials(model)];
+  const authVars = [...getOpenCodeEnvVars(model), ...getModelManagedCredentials(model)];
   return authVars.length === 0 || authVars.some(hasEnvVar2);
 }
 function hasPositiveNumberEnvVar(name) {
@@ -197994,7 +198007,7 @@ function validateAgentApiKey(params) {
       if (params.authorized.has(params.model)) return;
       const reason = getModelsFailure();
       if (reason) throw new Error(reason);
-      if (getModelEnvVars(params.model).some(hasEnvVar2)) return;
+      if (getOpenCodeEnvVars(params.model).some(hasEnvVar2)) return;
       throwKeyError({
         owner: params.owner,
         name: params.name,
@@ -198260,7 +198273,7 @@ function resolveAgent(ctx) {
     }
   }
   if (!ctx.model) {
-    if (hasEnvVar3("ANTHROPIC_AUTH_TOKEN") && !hasEnvVar3("ANTHROPIC_API_KEY") && !hasEnvVar3("CLAUDE_CODE_OAUTH_TOKEN")) {
+    if (!hasEnvVar3("ANTHROPIC_API_KEY") && CLAUDE_CODE_ONLY_CREDENTIALS.some(hasEnvVar3)) {
       return agents.claude;
     }
     if (ctx.codexAgent && hasCodexAuth() && !hasClaudeCodeAuth()) return agents.codex;
@@ -199226,7 +199239,7 @@ function buildModelAccessError(input2) {
 }
 
 // utils/normalizeEnv.ts
-var core5 = __toESM(require_core(), 1);
+var core6 = __toESM(require_core(), 1);
 function hasControlCharacter(value2) {
   return [...value2].some((ch) => {
     const code = ch.charCodeAt(0);
@@ -199252,7 +199265,7 @@ function sanitizeSecret(key, value2) {
       `\xBB stripped whitespace from ${key} (whitespace in secret values breaks GitHub Actions log masking)`
     );
   }
-  core5.setSecret(trimmed);
+  core6.setSecret(trimmed);
   return trimmed;
 }
 function normalizeEnv() {
@@ -199296,7 +199309,7 @@ function normalizeEnv() {
 }
 
 // utils/overrides.ts
-var core6 = __toESM(require_core(), 1);
+var core7 = __toESM(require_core(), 1);
 var DENIED_OVERRIDE_NAMES = /* @__PURE__ */ new Set([
   "GITHUB_TOKEN",
   "GH_TOKEN",
@@ -199342,7 +199355,7 @@ function applyOverrides(params) {
       denied.push(key);
       continue;
     }
-    if (value2.length > 0) core6.setSecret(value2);
+    if (value2.length > 0) core7.setSecret(value2);
     params.env[key] = value2;
     applied.push(key);
   }
@@ -199351,7 +199364,7 @@ function applyOverrides(params) {
 }
 
 // utils/payload.ts
-var core7 = __toESM(require_core(), 1);
+var core8 = __toESM(require_core(), 1);
 import { readFileSync as readFileSync7 } from "node:fs";
 import { isAbsolute as isAbsolute2, resolve as resolve2 } from "node:path";
 
@@ -199485,8 +199498,8 @@ function assertDispatchPayloadIntact(promptInput) {
   );
 }
 function resolvePromptInput() {
-  const promptInput = core7.getInput("prompt");
-  const promptFile = core7.getInput("prompt_file");
+  const promptInput = core8.getInput("prompt");
+  const promptFile = core8.getInput("prompt_file");
   if (promptInput && promptFile) {
     throw new Error("set exactly one of 'prompt' or 'prompt_file' inputs, not both.");
   }
@@ -199520,7 +199533,7 @@ function resolvePromptFile(input2) {
 }
 function warnIfDeprecatedStatusChecks(value2) {
   if (value2 !== void 0) {
-    core7.warning(
+    core8.warning(
       "`status_checks` is deprecated. Both checks are now repository settings \u2014 open the Pullfrog console for this repo (Automations \u2192 Review PRs) and set them there, then remove `status_checks` from your workflow. It keeps working until you do."
     );
   }
@@ -199528,15 +199541,15 @@ function warnIfDeprecatedStatusChecks(value2) {
 }
 function resolveNonPromptInputs() {
   return Inputs.omit("prompt", "prompt_file").assert({
-    model: core7.getInput("model") || void 0,
-    effort: core7.getInput("effort") || void 0,
-    debug: core7.getInput("debug") || void 0,
-    timeout: core7.getInput("timeout") || void 0,
-    cwd: core7.getInput("cwd") || void 0,
-    push: core7.getInput("push") || void 0,
-    shell: core7.getInput("shell") || void 0,
-    status_checks: warnIfDeprecatedStatusChecks(core7.getInput("status_checks") || void 0),
-    progress_comments: core7.getInput("progress_comments") || void 0
+    model: core8.getInput("model") || void 0,
+    effort: core8.getInput("effort") || void 0,
+    debug: core8.getInput("debug") || void 0,
+    timeout: core8.getInput("timeout") || void 0,
+    cwd: core8.getInput("cwd") || void 0,
+    push: core8.getInput("push") || void 0,
+    shell: core8.getInput("shell") || void 0,
+    status_checks: warnIfDeprecatedStatusChecks(core8.getInput("status_checks") || void 0),
+    progress_comments: core8.getInput("progress_comments") || void 0
   });
 }
 function resolvePayload(resolvedPromptInput, repoSettings) {
@@ -199606,7 +199619,7 @@ function resolvePayload(resolvedPromptInput, repoSettings) {
   };
 }
 function resolveOutputSchema() {
-  const raw2 = core7.getInput("output_schema");
+  const raw2 = core8.getInput("output_schema");
   if (!raw2) return void 0;
   let parsed2;
   try {
@@ -199622,10 +199635,10 @@ function resolveOutputSchema() {
 }
 
 // utils/proxy.ts
-var core9 = __toESM(require_core(), 1);
+var core10 = __toESM(require_core(), 1);
 
 // utils/token.ts
-var core8 = __toESM(require_core(), 1);
+var core9 = __toESM(require_core(), 1);
 import assert2 from "node:assert/strict";
 var mcpTokenValue;
 var refreshMcpTokenFn;
@@ -199633,7 +199646,7 @@ function getMcpTokenRefresh() {
   return refreshMcpTokenFn;
 }
 function getJobToken() {
-  const inputToken = core8.getInput("token");
+  const inputToken = core9.getInput("token");
   if (inputToken) {
     return inputToken;
   }
@@ -199649,7 +199662,7 @@ async function resolveTokens(params) {
   if (externalToken) {
     mcpTokenValue = externalToken;
     if (isGitHubActions) {
-      core8.setSecret(externalToken);
+      core9.setSecret(externalToken);
     }
     log.info("\xBB using external GH_TOKEN for both git and MCP");
     return {
@@ -199673,7 +199686,7 @@ async function resolveTokens(params) {
     permissions: gitPermissions
   });
   if (isGitHubActions) {
-    core8.setSecret(gitToken);
+    core9.setSecret(gitToken);
   }
   log.info(
     `\xBB acquired git token (${Object.entries(gitPermissions).map((e) => e.join(":")).join(", ")})`
@@ -199694,7 +199707,7 @@ async function resolveTokens(params) {
     permissions: mcpPermissions
   });
   if (isGitHubActions) {
-    core8.setSecret(mcpToken);
+    core9.setSecret(mcpToken);
   }
   log.info(
     `\xBB acquired scoped MCP token (${Object.entries(mcpPermissions).map((e) => e.join(":")).join(", ")})`
@@ -199703,7 +199716,7 @@ async function resolveTokens(params) {
   let ghToken;
   if (ghPermissions) {
     ghToken = await acquireNewToken({ permissions: ghPermissions });
-    if (isGitHubActions) core8.setSecret(ghToken);
+    if (isGitHubActions) core9.setSecret(ghToken);
     log.info(
       `\xBB acquired gh token mirroring ${params.authorPermission} (${formatPermissions(ghPermissions)})`
     );
@@ -199715,7 +199728,7 @@ async function resolveTokens(params) {
       xrepoGrant: params.xrepoGrant,
       permissions: { contents: "read" }
     });
-    if (isGitHubActions) core8.setSecret(readToken);
+    if (isGitHubActions) core9.setSecret(readToken);
     log.info(`\xBB acquired cross-repo read token (contents:read, ${params.xrepo.read.length} repos)`);
   }
   mcpTokenValue = mcpToken;
@@ -199735,7 +199748,7 @@ async function resolveTokens(params) {
       oidc: params.oidc ?? void 0
     }).then((fresh) => {
       if (isGitHubActions) {
-        core8.setSecret(fresh);
+        core9.setSecret(fresh);
       }
       mcpTokenValue = fresh;
       currentMcpToken = fresh;
@@ -199757,7 +199770,7 @@ async function resolveTokens(params) {
         permissions: gitPermissions,
         oidc: params.oidc ?? void 0
       }).then((fresh) => {
-        if (isGitHubActions) core8.setSecret(fresh);
+        if (isGitHubActions) core9.setSecret(fresh);
         void revokeGitHubInstallationToken(currentGitToken);
         currentGitToken = fresh;
         log.warning("\xBB GitHub rejected the git token; re-acquired a fresh git token");
@@ -199775,7 +199788,7 @@ async function resolveTokens(params) {
         permissions: { contents: "read" },
         oidc: params.oidc ?? void 0
       }).then((fresh) => {
-        if (isGitHubActions) core8.setSecret(fresh);
+        if (isGitHubActions) core9.setSecret(fresh);
         void revokeGitHubInstallationToken(read2);
         currentReadToken = fresh;
         log.warning("\xBB GitHub rejected the read token; re-acquired a fresh read token");
@@ -199869,7 +199882,6 @@ ${ctx.error}` : ctx.error;
     fallbackFrom: ctx.toolState.modelFallback?.from,
     clamped: ctx.toolState.modelClamped,
     unselectedProxyDefault: ctx.toolState.unselectedProxyDefault,
-    shaPinned: ctx.toolState.shaPinned,
     oss: ctx.toolState.oss,
     owner: repoContext.owner
   });
@@ -199990,7 +200002,7 @@ async function resolveProxyModel(ctx) {
   });
   if (!key) return;
   process.env.OPENROUTER_API_KEY = key;
-  core9.setSecret(key);
+  core10.setSecret(key);
   ctx.payload.proxyModel = ctx.proxyModel;
   ctx.toolState.model = ctx.proxyModel;
   const label = ctx.oss ? "oss" : "router";
@@ -200068,7 +200080,7 @@ async function resolveTrialFallback(ctx) {
   });
   if (!key) return false;
   process.env.OPENROUTER_API_KEY = key;
-  core9.setSecret(key);
+  core10.setSecret(key);
   ctx.payload.proxyModel = DEFAULT_PROXY_MODEL;
   ctx.toolState.model = DEFAULT_PROXY_MODEL;
   ctx.toolState.modelClamped = {
@@ -200304,23 +200316,11 @@ async function fetchRunContext(params) {
 }
 
 // utils/runContextData.ts
-function isActionPinnedToSha() {
-  const ref = process.env.GITHUB_ACTION_REF;
-  return !!ref && /^[0-9a-f]{40}$/i.test(ref);
-}
-function warnIfPinnedToSha() {
-  if (isActionPinnedToSha()) {
-    log.warning(
-      `\xBB pinned to a commit SHA (${process.env.GITHUB_ACTION_REF}); the post-run cleanup step is frozen at that commit and won't receive fixes. keep the SHA fresh with Dependabot, or pin to \`pullfrog/pullfrog@v0\` if your org doesn't require full-SHA action pinning \u2014 see https://docs.pullfrog.com/versioning`
-    );
-  }
-}
 async function resolveRunContextData(params) {
   const actionRef = process.env.GITHUB_ACTION_REF;
   log.info(
     `\xBB running Pullfrog v${package_default.version}${actionRef ? ` (ref: ${actionRef})` : ""}...`
   );
-  warnIfPinnedToSha();
   const repoContext = parseRepoContext();
   let oidcToken;
   try {
@@ -200754,7 +200754,7 @@ ${genericBody}`,
 }
 
 // utils/runLifecycle.ts
-var core10 = __toESM(require_core(), 1);
+var core11 = __toESM(require_core(), 1);
 
 // utils/autoMerge.ts
 function hasBlockingHumanReview(reviews) {
@@ -201150,7 +201150,7 @@ async function finalizeSuccessRun(input2) {
   }
   if (input2.toolState.output) {
     log.info(`::pullfrog-output::${Buffer.from(input2.toolState.output).toString("base64")}`);
-    core10.setOutput("result", input2.toolState.output);
+    core11.setOutput("result", input2.toolState.output);
   }
   if (input2.result.success) {
     await approveAfterFix(input2.toolContext).catch((error62) => {
@@ -201450,7 +201450,6 @@ async function main() {
     });
     toolState.model = payload.model;
     toolState.oss = runContext.oss;
-    toolState.shaPinned = isActionPinnedToSha();
     if (payload.event.issue_number !== void 0) {
       primaryRepoState(toolState).issueNumber = payload.event.issue_number;
     }