pullfrog 0.1.82 → 0.1.84

package/dist/internal/index.d.ts

@@ -20,6 +20,7 @@ export type { ResourceUsage, UsageSummary } from "../utils/github.ts";
 export { isPullfrog } from "../utils/isPullfrog.ts";
 export { isLeapingIntoActionCommentBody, LEAPING_INTO_ACTION_PREFIX, } from "../utils/leapingComment.ts";
 export { MAX_LEARNINGS_LENGTH, truncateAtLineBoundary } from "../utils/learningsTruncate.ts";
+export { countOutstandingPullfrogThreads } from "../utils/outstandingThreads.ts";
 export type { CreateProgressCommentTarget, ProgressComment, ProgressCommentType, } from "../utils/progressComment.ts";
 export { createLeapingProgressComment, deleteProgressCommentApi, getProgressComment, updateProgressComment, } from "../utils/progressComment.ts";
 export { PROVIDER_DASHBOARDS, type ProviderDashboard } from "../utils/providerDashboards.ts";

package/dist/internal.js

@@ -8,7 +8,7 @@ var __export = (target, all) => {
 // package.json
 var package_default = {
   name: "pullfrog",
-  version: "0.1.82",
+  version: "0.1.84",
   cliContractVersion: "1",
   type: "module",
   bin: {
@@ -25,6 +25,7 @@ var package_default = {
     typecheck: "tsc --noEmit",
     build: "node esbuild.config.js && tsc -p tsconfig.exports.json",
     "check:entrypoints": "nub scripts/check-entrypoint-imports.ts",
+    "check:secret-commands": "nub scripts/check-secret-commands.ts",
     docker: "nub docker.ts",
     play: "nub play.ts",
     runtest: "nub test/run.ts",
@@ -35,7 +36,7 @@ var package_default = {
   },
   devDependencies: {
     "@actions/core": "^1.11.1",
-    "@anthropic-ai/claude-code": "2.1.150",
+    "@anthropic-ai/claude-code": "2.1.280",
     "@ark/fs": "0.56.0",
     "@ark/util": "0.56.0",
     "@clack/prompts": "^1.2.0",
@@ -43,8 +44,8 @@ var package_default = {
     "@octokit/plugin-throttling": "^11.0.3",
     "@octokit/rest": "^22.0.0",
     "@octokit/webhooks-types": "^7.6.1",
-    "@openai/codex": "0.153.4",
-    "@openai/codex-sdk": "0.153.4",
+    "@openai/codex": "0.157.0",
+    "@openai/codex-sdk": "0.157.0",
     "@opencode-ai/sdk": "1.18.29",
     "@standard-schema/spec": "1.1.0",
     "@toon-format/toon": "^1.0.0",
@@ -14339,19 +14340,19 @@ var providers = {
       // API is the source of truth (#959).
       "claude-fable": {
         displayName: "Claude Fable",
-        resolve: "anthropic/claude-fable-5",
+        resolve: "anthropic/claude-fable-5-1",
         effort: ["low", "medium", "high", "xhigh", "max"],
         // rolling alias: models.dev's OpenRouter mirror lags brand-new pinned
-        // versions (claude-fable-5 isn't indexed yet), so track ~…-latest to
+        // versions (claude-fable-5 was missing there when this was added), so track ~…-latest to
         // stay catalog-valid and auto-follow version bumps.
         openRouterResolve: "openrouter/~anthropic/claude-fable-latest",
         subagentModel: "claude-sonnet"
       },
       "claude-opus": {
         displayName: "Claude Opus",
-        resolve: "anthropic/claude-opus-5",
+        resolve: "anthropic/claude-opus-5-5",
         effort: ["low", "medium", "high", "xhigh", "max"],
-        openRouterResolve: "openrouter/anthropic/claude-opus-5",
+        openRouterResolve: "openrouter/anthropic/claude-opus-5.5",
         preferred: true,
         subagentModel: "claude-sonnet"
       },
@@ -14386,9 +14387,9 @@ var providers = {
       },
       "gpt-sol": {
         displayName: "GPT Sol",
-        resolve: "openai/gpt-5.6-sol",
+        resolve: "openai/gpt-6-sol",
         effort: ["none", "low", "medium", "high", "xhigh", "max"],
-        openRouterResolve: "openrouter/openai/gpt-5.6-sol",
+        openRouterResolve: "openrouter/openai/gpt-6-sol",
         preferred: true,
         subagentModel: "gpt-terra"
       },
@@ -14398,9 +14399,9 @@ var providers = {
       "gpt-sol-pro": {
         displayName: "GPT Sol Pro",
         description: "Maximum reasoning effort",
-        resolve: "openai/gpt-5.6-sol",
+        resolve: "openai/gpt-6-sol",
         effort: ["none", "low", "medium", "high", "xhigh", "max"],
-        openRouterResolve: "openrouter/openai/gpt-5.6-sol-pro",
+        openRouterResolve: "openrouter/openai/gpt-6-sol-pro",
         subagentModel: "gpt-sol"
       },
       // gpt-5.6's balanced mid-tier. selectable on its own and doubles as Sol's
@@ -14413,9 +14414,9 @@ var providers = {
       },
       "gpt-luna": {
         displayName: "GPT Luna",
-        resolve: "openai/gpt-5.6-luna",
+        resolve: "openai/gpt-6-luna",
         effort: ["none", "low", "medium", "high", "xhigh", "max"],
-        openRouterResolve: "openrouter/openai/gpt-5.6-luna"
+        openRouterResolve: "openrouter/openai/gpt-6-luna"
       },
       // legacy aliases — openai unified the codex line into the main GPT family
       // and is shutting down every "-codex" snapshot on 2026-07-23. transparently
@@ -14509,9 +14510,9 @@ var providers = {
     models: {
       grok: {
         displayName: "Grok",
-        resolve: "xai/grok-4.6",
+        resolve: "xai/grok-4.7",
         effort: ["low", "medium", "high", "xhigh"],
-        openRouterResolve: "openrouter/x-ai/grok-4.6",
+        openRouterResolve: "openrouter/x-ai/grok-4.7",
         preferred: true
       },
       // the Smart ladder's cheap rung: 1.25/2.5 against 4.6's 2/6, and a 0.2
@@ -14526,17 +14527,17 @@ var providers = {
       // 2026-05-15 (https://docs.x.ai/developers/migration/may-15-deprecation)
       // and now redirects every deprecated text-model slug to grok-4.3 at
       // standard pricing. fall back to the live `xai/grok` so the alias
-      // chain resolves to grok-4.6 for both direct-key and OpenRouter users.
+      // chain resolves to grok-4.7 for both direct-key and OpenRouter users.
       "grok-fast": {
         displayName: "Grok Fast",
         resolve: "xai/grok-4-1-fast",
-        openRouterResolve: "openrouter/x-ai/grok-4.6",
+        openRouterResolve: "openrouter/x-ai/grok-4.7",
         fallback: "xai/grok"
       },
       "grok-code-fast": {
         displayName: "Grok Code Fast",
         resolve: "xai/grok-code-fast-1",
-        openRouterResolve: "openrouter/x-ai/grok-4.6",
+        openRouterResolve: "openrouter/x-ai/grok-4.7",
         fallback: "xai/grok"
       }
     }
@@ -14564,8 +14565,9 @@ var providers = {
       "deepseek-pro": {
         displayName: "DeepSeek Pro",
         resolve: "deepseek/deepseek-v4-pro",
-        effort: ["high", "max"],
-        openRouterEffort: ["low", "high", "max"],
+        // models.dev gave the direct id V4.1-Flash's ladder on 2026-09-21, which
+        // is what DeepSeek now serves under it — and the same as the Router pin's.
+        effort: ["low", "high", "max"],
         openRouterResolve: "openrouter/deepseek/deepseek-v4-pro-0813",
         preferred: true
       },
@@ -14763,24 +14765,15 @@ var providers = {
       },
       "claude-opus": {
         displayName: "Claude Opus",
-        resolve: "opencode/claude-opus-5",
+        resolve: "opencode/claude-opus-5-5",
         effort: ["low", "medium", "high", "xhigh", "max"],
-        openRouterResolve: "openrouter/anthropic/claude-opus-5",
-        subagentModel: "claude-sonnet",
-        // TEMPORARY — clear this ONLY when opus completes a run through opencode,
-        // never when the endpoint merely answers. Zen LISTS claude-opus-5 in
-        // /zen/v1/models, so the catalog test passes; on 2026-08-25 the endpoint
-        // itself answered 503 `Upstream request failed: Endpoint is unavailable.`
-        // (measured 5/5; claude-sonnet-5, claude-opus-4-8, claude-haiku-4-5 and
-        // claude-fable-5 all 200 on the same key). opencode retries above the AI
-        // SDK emitting no part.updated, so a run just produces nothing until it is
-        // killed — metaideas/init logged six zero-output failures from 2026-08-23.
-        // The 503 has since cleared and the model is STILL unusable: re-measured
-        // 2026-08-26, direct POST /zen/v1/messages is 10/10 200 at 1.3-4.1s while
-        // `opencode run --model opencode/claude-opus-5` on the same trivial prompt
-        // emitted nothing for 240s in CI. A raw-endpoint 200 is not runtime
-        // availability. see wiki/opencode-silent-stall.md
-        fallback: "opencode/claude-sonnet"
+        openRouterResolve: "openrouter/anthropic/claude-opus-5.5",
+        subagentModel: "claude-sonnet"
+        // fell back to Sonnet from 2026-08-25 to 2026-09-25: Zen listed
+        // claude-opus-5 while `opencode run` on it emitted nothing for 240s. A
+        // raw-endpoint 200 is not runtime availability — the fallback was cleared
+        // only once `opencode run` completed on both claude-opus-5 and 5-5. see
+        // wiki/opencode-silent-stall.md
       },
       "claude-sonnet": {
         displayName: "Claude Sonnet",
@@ -14795,9 +14788,9 @@ var providers = {
       },
       "gpt-sol": {
         displayName: "GPT Sol",
-        resolve: "opencode/gpt-5.6-sol",
+        resolve: "opencode/gpt-6-sol",
         effort: ["none", "low", "medium", "high", "xhigh", "max"],
-        openRouterResolve: "openrouter/openai/gpt-5.6-sol",
+        openRouterResolve: "openrouter/openai/gpt-6-sol",
         subagentModel: "gpt-terra"
       },
       "gpt-astra": {
@@ -14811,9 +14804,9 @@ var providers = {
       "gpt-sol-pro": {
         displayName: "GPT Sol Pro",
         description: "Maximum reasoning effort",
-        resolve: "opencode/gpt-5.6-sol",
+        resolve: "opencode/gpt-6-sol",
         effort: ["none", "low", "medium", "high", "xhigh", "max"],
-        openRouterResolve: "openrouter/openai/gpt-5.6-sol-pro",
+        openRouterResolve: "openrouter/openai/gpt-6-sol-pro",
         subagentModel: "gpt-sol"
       },
       // gpt-5.6 balanced mid-tier — selectable + Sol's subagent. see openai above.
@@ -14825,9 +14818,9 @@ var providers = {
       },
       "gpt-luna": {
         displayName: "GPT Luna",
-        resolve: "opencode/gpt-5.6-luna",
+        resolve: "opencode/gpt-6-luna",
         effort: ["none", "low", "medium", "high", "xhigh", "max"],
-        openRouterResolve: "openrouter/openai/gpt-5.6-luna"
+        openRouterResolve: "openrouter/openai/gpt-6-luna"
       },
       // legacy aliases — see openai provider above for context.
       "gpt-codex": {
@@ -14926,9 +14919,26 @@ var providers = {
       },
       grok: {
         displayName: "Grok",
-        resolve: "opencode/grok-4.6",
+        resolve: "opencode/grok-4.7",
         effort: ["low", "medium", "high", "xhigh"],
-        openRouterResolve: "openrouter/x-ai/grok-4.6"
+        openRouterResolve: "openrouter/x-ai/grok-4.7"
+      },
+      // Zen began listing Qwen's Max and Flash tiers in late 2026-09 (Max on
+      // 09-25); until then `opencode-go` was the only Qwen route, so a Zen
+      // subscriber without Go had none. Plus is still Go-only. Zen's Max entry
+      // publishes a reasoning toggle but no effort rungs.
+      "qwen-max": {
+        displayName: "Qwen Max",
+        resolve: "opencode/qwen3.8-max",
+        openRouterEffort: ["minimal", "low", "medium", "high", "xhigh"],
+        openRouterResolve: "openrouter/qwen/qwen3.8-max-0902"
+      },
+      "qwen-flash": {
+        displayName: "Qwen Flash",
+        resolve: "opencode/qwen3.8-flash",
+        effort: ["low", "medium", "xhigh"],
+        openRouterEffort: [],
+        openRouterResolve: "openrouter/qwen/qwen3.8-flash"
       },
       "gpt-5-nano": {
         displayName: "GPT Nano",
@@ -14977,11 +14987,27 @@ var providers = {
         // model, as `minimax-m2.5-free` does.
         fallback: "opencode/big-pickle"
       },
+      // Zen's FREE stealth preview (listed 2026-09-23), the third after
+      // big-pickle and union-alpha. OpenRouter's listing: prompts and
+      // completions may be retained by the provider, not trained on. unlike the
+      // first two it publishes an effort ladder, so the gate mirrors one here.
+      "space-bunny": {
+        displayName: "Space Bunny",
+        description: "Stealth preview; prompts may be retained",
+        resolve: "opencode/space-bunny-free",
+        effort: ["low", "medium", "high", "xhigh", "max"],
+        // free to run, still gated on the provider's own OPENCODE_API_KEY —
+        // see the big-pickle note above (#1077).
+        isFree: true
+      },
       // Zen's live free MiMo, and the second free row in a menu that big-pickle
       // was alone in since `mimo-v2-pro-free` lost its model.
       mimo: {
         displayName: "MiMo",
-        resolve: "opencode/mimo-v2.5-free",
+        // models.dev deprecated `mimo-v2.5-free` on 2026-09-22. V2.6-Flash is
+        // the only other MiMo Zen serves, so the slug follows it across the
+        // tier rather than leaving stored picks on a dying id.
+        resolve: "opencode/mimo-v2.6-flash-free",
         // free to run, still gated on the provider's own OPENCODE_API_KEY —
         // see the big-pickle note above (#1077).
         isFree: true
@@ -15010,11 +15036,12 @@ var providers = {
   // OpenCode Go is a separate $10/mo subscription from Zen, served on its own
   // base URL (`https://opencode.ai/zen/go/v1`) but authenticated with the SAME
   // `OPENCODE_API_KEY`. it carries the open-weight coding models plus a couple
-  // of frontier ones, six of which are served ONLY here — Zen's `/v1/models`
-  // does not list qwen3.7/3.8-*, mimo-v2.5-pro, longcat-2.0 or hy3. (it listed
+  // of frontier ones, four of which are served ONLY here — Zen's `/v1/models`
+  // does not list qwen3.7-plus, mimo-v2.6-pro, longcat-2.0 or hy3. (it listed
   // no glm-5.3* either until 2026-09, which is why `opencode/glm` trailed on
-  // 5.2.) so for a Go subscriber this provider is not a duplicate route to Zen,
-  // it is the only route to a large part of what they pay for.
+  // 5.2, and no qwen3.8-* until late 2026-09.) so for a Go subscriber this
+  // provider is not a duplicate route to Zen, it is the only route to a large
+  // part of what they pay for.
   // like `opencode` and `openrouter` this is a ROUTER, not a vendor: slugs and
   // display names mirror the upstream brand tier, and the picker groups them
   // under the upstream vendor.
@@ -15074,7 +15101,8 @@ var providers = {
       // picker row that fails for almost everyone is worse than none. DeepSeek
       // stays reachable ungated via `deepseek/*`, `opencode/*` and
       // `openrouter/*`; both remain runnable by full specifier once opted in.
-      // Alibaba — new vendor family for the catalog; Zen serves neither tier.
+      // Alibaba — Zen serves Max and Flash too (see `opencode/qwen-max`); Plus
+      // is Go-only.
       "qwen-max": {
         displayName: "Qwen Max",
         resolve: "opencode-go/qwen3.8-max",
@@ -15117,8 +15145,8 @@ var providers = {
       // Xiaomi — Go-only; Zen serves the free `mimo-v2-pro-free` promo instead.
       "mimo-pro": {
         displayName: "MiMo Pro",
-        resolve: "opencode-go/mimo-v2.5-pro",
-        openRouterResolve: "openrouter/xiaomi/mimo-v2.5-pro"
+        resolve: "opencode-go/mimo-v2.6-pro",
+        openRouterResolve: "openrouter/xiaomi/mimo-v2.6-pro"
       },
       // Meituan — Go-only.
       longcat: {
@@ -15144,15 +15172,15 @@ var providers = {
       // wiki/models-catalog.md on `opencode/kimi-k2`.
       grok: {
         displayName: "Grok",
-        resolve: "opencode-go/grok-4.6",
+        resolve: "opencode-go/grok-4.7",
         effort: ["low", "medium", "high", "xhigh"],
-        openRouterResolve: "openrouter/x-ai/grok-4.6"
+        openRouterResolve: "openrouter/x-ai/grok-4.7"
       },
       "gpt-luna": {
         displayName: "GPT Luna",
-        resolve: "opencode-go/gpt-5.6-luna",
+        resolve: "opencode-go/gpt-6-luna",
         effort: ["none", "low", "medium", "high", "xhigh", "max"],
-        openRouterResolve: "openrouter/openai/gpt-5.6-luna"
+        openRouterResolve: "openrouter/openai/gpt-6-luna"
       }
     }
   }),
@@ -15254,15 +15282,15 @@ var providers = {
         resolve: "openrouter/~anthropic/claude-haiku-latest",
         openRouterResolve: "openrouter/~anthropic/claude-haiku-latest"
       },
-      // pinned to the explicit gpt-5.6 tiers (not the ~openai/gpt-latest rolling
-      // alias): after the Sol/Terra/Luna rename, ~gpt-mini-latest no longer maps
+      // pinned to the explicit Sol/Terra/Luna tiers (not the ~openai/gpt-latest
+      // rolling alias): after that rename, ~gpt-mini-latest no longer maps
       // to Luna, so rolling aliases would silently diverge `gpt`/`gpt-mini` from
       // the chosen tiers across funding paths.
       "gpt-sol": {
         displayName: "GPT Sol",
-        resolve: "openrouter/openai/gpt-5.6-sol",
+        resolve: "openrouter/openai/gpt-6-sol",
         effort: ["none", "low", "medium", "high", "xhigh", "max"],
-        openRouterResolve: "openrouter/openai/gpt-5.6-sol",
+        openRouterResolve: "openrouter/openai/gpt-6-sol",
         subagentModel: "gpt-terra"
       },
       "gpt-astra": {
@@ -15276,9 +15304,9 @@ var providers = {
       "gpt-sol-pro": {
         displayName: "GPT Sol Pro",
         description: "Maximum reasoning effort",
-        resolve: "openrouter/openai/gpt-5.6-sol-pro",
+        resolve: "openrouter/openai/gpt-6-sol-pro",
         effort: ["none", "low", "medium", "high", "xhigh", "max"],
-        openRouterResolve: "openrouter/openai/gpt-5.6-sol-pro",
+        openRouterResolve: "openrouter/openai/gpt-6-sol-pro",
         subagentModel: "gpt-sol"
       },
       // gpt-5.6 balanced mid-tier — selectable + Sol's subagent. see openai above.
@@ -15290,9 +15318,9 @@ var providers = {
       },
       "gpt-luna": {
         displayName: "GPT Luna",
-        resolve: "openrouter/openai/gpt-5.6-luna",
+        resolve: "openrouter/openai/gpt-6-luna",
         effort: ["none", "low", "medium", "high", "xhigh", "max"],
-        openRouterResolve: "openrouter/openai/gpt-5.6-luna"
+        openRouterResolve: "openrouter/openai/gpt-6-luna"
       },
       // legacy aliases — see openai provider for context.
       "gpt-codex": {
@@ -15356,9 +15384,9 @@ var providers = {
       },
       grok: {
         displayName: "Grok",
-        resolve: "openrouter/x-ai/grok-4.6",
+        resolve: "openrouter/x-ai/grok-4.7",
         effort: ["low", "medium", "high", "xhigh"],
-        openRouterResolve: "openrouter/x-ai/grok-4.6"
+        openRouterResolve: "openrouter/x-ai/grok-4.7"
       },
       // dated pin, not the bare id — see `deepseek/deepseek-pro` for why
       // OpenRouter's unversioned `deepseek-v4-pro` is the stale April preview.
@@ -15429,8 +15457,10 @@ var providers = {
   vercel: provider({
     // Vercel AI Gateway — one key serves every model it fronts. model IDs use
     // the models.dev `vercel` catalog's own naming (dotted versions, e.g.
-    // `anthropic/claude-opus-5`, `zai/glm-5.3`), and effort ladders mirror that
-    // catalog's entries, not the upstream vendor's. deliberately no
+    // `anthropic/claude-opus-5.5`, `zai/glm-5.3`). effort ladders come from the
+    // gateway's OWN `/v1/models`, not models.dev — the two disagree routinely
+    // (on 2026-09-22 they disagreed on all ten entries that drifted), and the
+    // drift test reads the gateway for that reason. deliberately no
     // `openRouterResolve`: a gateway pick is BYOK-only — silently rerouting it
     // over the Router proxy would bill the wallet for traffic the user pointed
     // at their own gateway.
@@ -15439,7 +15469,7 @@ var providers = {
     models: {
       "claude-opus": {
         displayName: "Claude Opus",
-        resolve: "vercel/anthropic/claude-opus-5",
+        resolve: "vercel/anthropic/claude-opus-5.5",
         effort: ["low", "medium", "high", "xhigh", "max"],
         preferred: true,
         subagentModel: "claude-sonnet"
@@ -15447,7 +15477,7 @@ var providers = {
       "claude-sonnet": {
         displayName: "Claude Sonnet",
         resolve: "vercel/anthropic/claude-sonnet-5",
-        effort: ["low", "medium", "high", "xhigh"]
+        effort: ["none", "low", "medium", "high", "xhigh", "max"]
       },
       "claude-haiku": {
         displayName: "Claude Haiku",
@@ -15455,7 +15485,7 @@ var providers = {
       },
       "gpt-sol": {
         displayName: "GPT Sol",
-        resolve: "vercel/openai/gpt-5.6-sol",
+        resolve: "vercel/openai/gpt-6-sol",
         effort: ["none", "low", "medium", "high", "xhigh", "max"],
         subagentModel: "gpt-terra"
       },
@@ -15468,35 +15498,35 @@ var providers = {
       "gpt-terra": {
         displayName: "GPT Terra",
         resolve: "vercel/openai/gpt-5.6-terra",
-        effort: ["none", "low", "medium", "high", "xhigh", "max"]
+        effort: ["none", "minimal", "low", "medium", "high", "xhigh", "max"]
       },
       "gpt-luna": {
         displayName: "GPT Luna",
-        resolve: "vercel/openai/gpt-5.6-luna",
+        resolve: "vercel/openai/gpt-6-luna",
         effort: ["none", "low", "medium", "high", "xhigh", "max"]
       },
       "gemini-pro": {
         displayName: "Gemini Pro",
         resolve: "vercel/google/gemini-3.1-pro-preview",
-        effort: ["low", "medium", "high"]
+        effort: ["low", "high"]
       },
       "gemini-flash": {
         displayName: "Gemini Flash",
         resolve: "vercel/google/gemini-3.8-flash",
-        effort: ["low", "medium", "high"]
+        effort: ["low", "high"]
       },
       "deepseek-pro": {
         displayName: "DeepSeek Pro",
         resolve: "vercel/deepseek/deepseek-v4-pro-0813",
-        effort: ["high", "xhigh"]
+        effort: ["none", "high", "max"]
       },
       // the gateway's bare `deepseek-v4-flash` is the April preview — the same
       // fork trap as OpenRouter, with `deepseek-v4-flash-0731` beside it — so
-      // this entry sat on the preview until V4.1. the gateway publishes no
-      // effort ladder for the V4.1 id.
+      // this entry sat on the preview until V4.1.
       "deepseek-flash": {
         displayName: "DeepSeek Flash",
-        resolve: "vercel/deepseek/deepseek-v4.1-flash"
+        resolve: "vercel/deepseek/deepseek-v4.1-flash",
+        effort: ["none", "high", "max"]
       },
       glm: {
         displayName: "GLM",
@@ -15506,12 +15536,12 @@ var providers = {
       "kimi-k3": {
         displayName: "Kimi K3",
         resolve: "vercel/moonshotai/kimi-k3",
-        effort: ["low", "high", "max"]
+        effort: ["none", "low", "high", "max"]
       },
-      // the gateway publishes no effort ladder for this id.
       "muse-spark": {
         displayName: "Muse Spark",
-        resolve: "vercel/meta/muse-spark-1.3"
+        resolve: "vercel/meta/muse-spark-1.3",
+        effort: ["minimal", "low", "medium", "high", "xhigh"]
       }
     }
   })
@@ -15921,7 +15951,7 @@ For simple, well-defined tasks, skip the plan phase and go straight to build.`
 6. Finalize:
    - **only if code changed**, ${finalizeStep} (same push/prepush guidance as Build mode in *SYSTEM*). If push/commit fails, report the exact error and STOP without claiming a fix or resolving its threads.
    - reply ONCE per relevant thread via \`${t("reply_to_review_comment")}\`, including when no code changed. The \`comment_id\` is the root comment's numeric \`id=\`, NOT the \`thread=\` value from \`${t("get_review_comments")}\`. The runtime dedupes identical bodies within a session.
-   - resolve a thread via \`${t("resolve_review_thread")}\` (using \`thread=\` as \`thread_id\`) only after its requested fix is fully on the remote, or the user explicitly asks to resolve it. Leave discussion-only replies, partial fixes, and disagreements open.
+   - resolve a thread via \`${t("resolve_review_thread")}\` (using \`thread=\` as \`thread_id\`) only after its requested fix is fully on the remote, the user explicitly asks to resolve it, or it is a Pullfrog finding you agree to withdraw. Leave other discussion-only replies, partial fixes, and disagreements open.
    - call \`${t("report_progress")}\` with a brief summary. If your last \`${t("get_review_comments")}\` turned up threads you did not address, name them there \u2014 a review arriving this late is suppressed as a duplicate and nothing else will pick it up.`
     },
     // Review and IncrementalReview route the minimum reviewfrog specialists
@@ -16548,6 +16578,42 @@ function truncateAtLineBoundary(body, cap) {
   return head.slice(0, lastNewline);
 }
 
+// utils/outstandingThreads.ts
+var OUTSTANDING_THREADS_QUERY = `
+query ($owner: String!, $name: String!, $prNumber: Int!, $cursor: String) {
+  repository(owner: $owner, name: $name) {
+    pullRequest(number: $prNumber) {
+      reviewThreads(first: 100, after: $cursor) {
+        pageInfo { hasNextPage endCursor }
+        nodes {
+          isResolved
+          comments(first: 1) { nodes { author { login } } }
+        }
+      }
+    }
+  }
+}
+`;
+async function countOutstandingPullfrogThreads(ctx, pullNumber) {
+  let count = 0;
+  let cursor = null;
+  for (let page = 0; page < 50; page += 1) {
+    const response = await ctx.octokit.graphql(
+      OUTSTANDING_THREADS_QUERY,
+      { owner: ctx.repo.owner, name: ctx.repo.name, prNumber: pullNumber, cursor }
+    );
+    const conn = response.repository?.pullRequest?.reviewThreads;
+    for (const thread of conn?.nodes ?? []) {
+      if (!thread || thread.isResolved) continue;
+      const root = thread.comments?.nodes?.find((c) => c != null);
+      if (root && isPullfrog(root.author?.login)) count += 1;
+    }
+    if (!conn?.pageInfo.hasNextPage) break;
+    cursor = conn.pageInfo.endCursor;
+  }
+  return count;
+}
+
 // utils/progressComment.ts
 async function getProgressComment(ctx, comment) {
   const result = await (comment.type === "review" ? ctx.octokit.rest.pulls.getReviewComment({
@@ -16979,6 +17045,7 @@ export {
   configFields,
   configResponseSchema,
   configValueSchema,
+  countOutstandingPullfrogThreads,
   createLeapingProgressComment,
   createRunStatusCheck,
   decodeJwtExpMs,

package/dist/mcp/review.d.ts

@@ -23,20 +23,6 @@ export declare const TRANSIENT_REVIEW_RETRY_DELAYS_MS: number[];
  */
 export declare function commentableLinesForFile(patch: string | undefined): CommentableLines;
 export declare function buildCommentableMap(ctx: ToolContext, pullNumber: number): Promise<Map<string, CommentableLines>>;
-/**
- * count unresolved review threads on a PR whose root comment was authored by
- * Pullfrog's bot. this is the full set of open Pullfrog findings on the PR —
- * the basis for both the never-approve-with-outstanding-issues invariant (the
- * approval gate below) and the `pullfrog-approval` status verdict. it is a
- * function of all open findings, NOT just the latest commit's delta.
- *
- * outdated-but-unresolved threads still count — GitHub marks a thread
- * `[OUTDATED]` when the anchor line moved (reformat, rename, force-push), which
- * is not the same as the concern being addressed. human-reviewer threads are
- * excluded: they belong to those reviewers to resolve. walks every page so a
- * long-lived PR with >100 threads can't hide an outstanding finding.
- */
-export declare function countOutstandingPullfrogThreads(ctx: ToolContext, pullNumber: number): Promise<number>;
 /**
  * proactive approve-when-clean for the Fix-all / Fix-👍s flow (`fix_review`
  * trigger). when such a run completes successfully and every Pullfrog-originated

package/dist/mcp/searchIssues.d.ts

@@ -0,0 +1,8 @@
+import type { ToolContext } from "./server.ts";
+export declare function SearchIssuesTool(ctx: ToolContext): import("fastmcp").Tool<any, import("@standard-schema/spec").StandardSchemaV1<{
+    terms: string[];
+}, {
+    terms: string[];
+}>> & {
+    mutates?: boolean;
+};

package/dist/mcp/server.d.ts

@@ -23,6 +23,7 @@ export interface ToolContext {
     postCheckoutScript: string | null;
     prepushScript: string | null;
     prApproveEnabled: boolean;
+    reviewDrafts: boolean;
     autoMergeEnabled: boolean;
     signedCommits: boolean;
     repoIntelligence: boolean;

package/dist/utils/normalizeEnv.d.ts

@@ -5,7 +5,7 @@
  * that re-emits parts of it leaks the unmasked tail. Trimming canonicalises
  * the value so the mask matches exactly what downstream tools will print.
  *
- * Masking is delegated to `core.setSecret` (not raw `console.log`) so the
+ * Masking is delegated to `maskSecret` (not raw `console.log`) so the
  * toolkit percent-encodes `\r`/`\n`; the runner V2 parser decodes them and
  * registers the full value plus every non-empty line as separate masks. That
  * keeps us safe for embedded-newline values (PEMs, kubeconfigs, JSON blobs)

package/dist/utils/outstandingThreads.d.ts

@@ -0,0 +1,25 @@
+/** the slice of a run or webhook context the query needs — shared by the action and the server. */
+export type OutstandingThreadsCtx = {
+    octokit: {
+        graphql: <T>(query: string, variables: Record<string, unknown>) => Promise<T>;
+    };
+    repo: {
+        owner: string;
+        name: string;
+    };
+};
+/**
+ * count unresolved review threads on a PR whose root comment was authored by
+ * Pullfrog's bot. this is the full set of open Pullfrog findings on the PR —
+ * the basis for both the never-approve-with-outstanding-issues invariant (the
+ * approval gate in create_pull_request_review) and the `pullfrog-approval`
+ * status verdict. it is a function of all open findings, NOT just the latest
+ * commit's delta.
+ *
+ * outdated-but-unresolved threads still count — GitHub marks a thread
+ * `[OUTDATED]` when the anchor line moved (reformat, rename, force-push), which
+ * is not the same as the concern being addressed. human-reviewer threads are
+ * excluded: they belong to those reviewers to resolve. walks every page so a
+ * long-lived PR with >100 threads can't hide an outstanding finding.
+ */
+export declare function countOutstandingPullfrogThreads(ctx: OutstandingThreadsCtx, pullNumber: number): Promise<number>;

package/dist/utils/overrides.d.ts

@@ -27,7 +27,7 @@ export declare function parseOverrides(raw: string): Record<string, string>;
 /**
  * Mutate `params.env` in place with the supplied JSON overrides, skipping any
  * names in `DENIED_OVERRIDE_NAMES`. Each applied value is registered with
- * `core.setSecret` so the runner masks it in subsequent log output, and the
+ * `maskSecret` so the runner masks it in subsequent log output, and the
  * raw `UNSAFE_OVERRIDES` env var is deleted so spawned subprocesses don't
  * inherit the original JSON (which would defeat both the deny-list and the
  * masking by exposing the values verbatim).