pullfrog 0.1.88 → 0.1.90

package/dist/cli.mjs

@@ -107103,7 +107103,7 @@ var import_picocolors = __toESM(require_picocolors(), 1);
 // package.json
 var package_default = {
   name: "pullfrog",
-  version: "0.1.88",
+  version: "0.1.90",
   cliContractVersion: "1",
   type: "module",
   bin: {
@@ -111130,6 +111130,11 @@ import { spawnSync as spawnSync2 } from "node:child_process";
 import { chmodSync, createWriteStream, existsSync as existsSync3, mkdirSync } from "node:fs";
 import { join as join2 } from "node:path";
 import { pipeline } from "node:stream/promises";
+function resolveNpm() {
+  const npmCli = process.env.npm_execpath;
+  if (npmCli?.endsWith("npm-cli.js")) return { command: process.execPath, args: [npmCli] };
+  return { command: "npm", args: [] };
+}
 async function installFromNpmTarball(params) {
   const tempDir = process.env.PULLFROG_TEMP_DIR;
   if (!tempDir) throw new Error("PULLFROG_TEMP_DIR is not set");
@@ -111192,7 +111197,8 @@ async function installFromNpmTarball(params) {
   }
   if (params.installDependencies) {
     log2.debug(`\xBB installing dependencies for ${params.packageName}...`);
-    const installResult = spawnSync2("npm", ["install", "--production"], {
+    const npm2 = resolveNpm();
+    const installResult = spawnSync2(npm2.command, [...npm2.args, "install", "--production"], {
       cwd: extractedDir,
       stdio: "pipe",
       encoding: "utf-8",
@@ -196666,8 +196672,9 @@ function ResolveReviewThreadTool(ctx) {
 }
 
 // mcp/searchIssues.ts
+var TERM = /^[\p{L}\p{N}_./-]+$/u;
 var SearchIssues = type({
-  terms: type.string.matching(/^[\p{L}\p{N}_./-]+$/u).atMostLength(40).array().atLeastLength(1).atMostLength(5).describe("1-5 keywords from the issue; no GitHub qualifiers or query operators")
+  terms: type.string.atMostLength(40).array().atLeastLength(1).atMostLength(5).describe("1-5 keywords from the issue; no GitHub qualifiers or query operators")
 });
 function SearchIssuesTool(ctx) {
   return tool({
@@ -196675,6 +196682,10 @@ function SearchIssuesTool(ctx) {
     description: "Find open or closed issues in this repository by keyword. Inspect promising matches with get_issue before deciding whether they are duplicates or related. Results are bounded, not an exhaustive duplicate check.",
     parameters: SearchIssues,
     execute: execute(async (params) => {
+      const invalid = params.terms.find((term) => !TERM.test(term));
+      if (invalid) {
+        throw new Error(`search term "${invalid}" may contain only letters, digits and _ . / -`);
+      }
       const repoPath = `/repos/${ctx.repo.owner}/${ctx.repo.name}`.toLowerCase();
       const terms = params.terms.map((term) => `"${term}"`).join(" ");
       const response = await ctx.octokit.rest.search.issuesAndPullRequests({
@@ -200098,6 +200109,23 @@ ${input.raw}
 \`\`\``
   ].join("\n");
 }
+function isRunTimeoutError(message) {
+  return message.startsWith("agent run timed out after");
+}
+function formatRunTimeoutSummary(input) {
+  const settingsUrl = `${getApiUrl()}/console/${input.owner}/${input.name}`;
+  return [
+    "**This run hit its time limit while still working, so it stopped before finishing.**",
+    "",
+    "Give runs longer with `--timeout=2h` (or `--notimeout`) in this repo's instructions \u2014 or raise the workflow's `timeout` input if it sets one, since that input wins. A smaller PR or a lower effort also finishes sooner.",
+    "",
+    `[Repo settings \u2192](${settingsUrl}) \xB7 [Flags \u2192](https://docs.pullfrog.com/flags)`,
+    "",
+    `\`\`\`
+${input.raw}
+\`\`\``
+  ].join("\n");
+}
 function formatContextOverflowSummary(input) {
   const settingsUrl = `${getApiUrl()}/console/${input.owner}/${input.name}`;
   return [
@@ -200347,6 +200375,16 @@ ${body}`, comment: body };
     });
     return { summary: `### \u274C Pullfrog failed
 
+${body}`, comment: body };
+  }
+  if (isRunTimeoutError(input.errorMessage)) {
+    const body = formatRunTimeoutSummary({
+      owner: input.repo.owner,
+      name: input.repo.name,
+      raw: input.errorMessage
+    });
+    return { summary: `### \u274C Pullfrog failed
+
 ${body}`, comment: body };
   }
   if (isTransientUpstreamError(input.errorMessage)) {
@@ -202192,7 +202230,7 @@ function resolveTarget2(repo) {
   return { owner: match3[1], repo: match3[2] };
 }
 function cliVersion() {
-  const parts = /^(\d+)\.(\d+)\.(\d+)$/.exec("0.1.88");
+  const parts = /^(\d+)\.(\d+)\.(\d+)$/.exec("0.1.90");
   if (!parts) return "0.0.0";
   return `${Number(parts[1])}.${Number(parts[2])}.${Number(parts[3])}`;
 }
@@ -202359,7 +202397,7 @@ async function runCli8(input) {
 }
 
 // cli.ts
-var VERSION10 = "0.1.88";
+var VERSION10 = "0.1.90";
 var bin = basename2(process.argv[1] || "");
 var PROG = bin === "pf" || bin === "pullfrog" ? bin : "pullfrog";
 var rawArgs = process.argv.slice(2);

package/dist/index.js

@@ -105416,6 +105416,11 @@ import { spawnSync } from "node:child_process";
 import { chmodSync, createWriteStream, existsSync as existsSync2, mkdirSync } from "node:fs";
 import { join } from "node:path";
 import { pipeline } from "node:stream/promises";
+function resolveNpm() {
+  const npmCli = process.env.npm_execpath;
+  if (npmCli?.endsWith("npm-cli.js")) return { command: process.execPath, args: [npmCli] };
+  return { command: "npm", args: [] };
+}
 async function installFromNpmTarball(params) {
   const tempDir = process.env.PULLFROG_TEMP_DIR;
   if (!tempDir) throw new Error("PULLFROG_TEMP_DIR is not set");
@@ -105478,7 +105483,8 @@ async function installFromNpmTarball(params) {
   }
   if (params.installDependencies) {
     log.debug(`\xBB installing dependencies for ${params.packageName}...`);
-    const installResult = spawnSync("npm", ["install", "--production"], {
+    const npm2 = resolveNpm();
+    const installResult = spawnSync(npm2.command, [...npm2.args, "install", "--production"], {
       cwd: extractedDir,
       stdio: "pipe",
       encoding: "utf-8",
@@ -105723,7 +105729,7 @@ var import_semver = __toESM(require_semver2(), 1);
 // package.json
 var package_default = {
   name: "pullfrog",
-  version: "0.1.88",
+  version: "0.1.90",
   cliContractVersion: "1",
   type: "module",
   bin: {
@@ -193159,8 +193165,9 @@ function ResolveReviewThreadTool(ctx) {
 }
 
 // mcp/searchIssues.ts
+var TERM = /^[\p{L}\p{N}_./-]+$/u;
 var SearchIssues = type({
-  terms: type.string.matching(/^[\p{L}\p{N}_./-]+$/u).atMostLength(40).array().atLeastLength(1).atMostLength(5).describe("1-5 keywords from the issue; no GitHub qualifiers or query operators")
+  terms: type.string.atMostLength(40).array().atLeastLength(1).atMostLength(5).describe("1-5 keywords from the issue; no GitHub qualifiers or query operators")
 });
 function SearchIssuesTool(ctx) {
   return tool({
@@ -193168,6 +193175,10 @@ function SearchIssuesTool(ctx) {
     description: "Find open or closed issues in this repository by keyword. Inspect promising matches with get_issue before deciding whether they are duplicates or related. Results are bounded, not an exhaustive duplicate check.",
     parameters: SearchIssues,
     execute: execute(async (params) => {
+      const invalid = params.terms.find((term) => !TERM.test(term));
+      if (invalid) {
+        throw new Error(`search term "${invalid}" may contain only letters, digits and _ . / -`);
+      }
       const repoPath = `/repos/${ctx.repo.owner}/${ctx.repo.name}`.toLowerCase();
       const terms = params.terms.map((term) => `"${term}"`).join(" ");
       const response = await ctx.octokit.rest.search.issuesAndPullRequests({
@@ -196591,6 +196602,23 @@ ${input.raw}
 \`\`\``
   ].join("\n");
 }
+function isRunTimeoutError(message) {
+  return message.startsWith("agent run timed out after");
+}
+function formatRunTimeoutSummary(input) {
+  const settingsUrl = `${getApiUrl()}/console/${input.owner}/${input.name}`;
+  return [
+    "**This run hit its time limit while still working, so it stopped before finishing.**",
+    "",
+    "Give runs longer with `--timeout=2h` (or `--notimeout`) in this repo's instructions \u2014 or raise the workflow's `timeout` input if it sets one, since that input wins. A smaller PR or a lower effort also finishes sooner.",
+    "",
+    `[Repo settings \u2192](${settingsUrl}) \xB7 [Flags \u2192](https://docs.pullfrog.com/flags)`,
+    "",
+    `\`\`\`
+${input.raw}
+\`\`\``
+  ].join("\n");
+}
 function formatContextOverflowSummary(input) {
   const settingsUrl = `${getApiUrl()}/console/${input.owner}/${input.name}`;
   return [
@@ -196840,6 +196868,16 @@ ${body}`, comment: body };
     });
     return { summary: `### \u274C Pullfrog failed
 
+${body}`, comment: body };
+  }
+  if (isRunTimeoutError(input.errorMessage)) {
+    const body = formatRunTimeoutSummary({
+      owner: input.repo.owner,
+      name: input.repo.name,
+      raw: input.errorMessage
+    });
+    return { summary: `### \u274C Pullfrog failed
+
 ${body}`, comment: body };
   }
   if (isTransientUpstreamError(input.errorMessage)) {

package/dist/internal/index.d.ts

@@ -24,6 +24,7 @@ export { countOutstandingPullfrogThreads } from "../utils/outstandingThreads.ts"
 export type { CreateProgressCommentTarget, ProgressComment, ProgressCommentType, } from "../utils/progressComment.ts";
 export { createLeapingProgressComment, deleteProgressCommentApi, getProgressComment, updateProgressComment, } from "../utils/progressComment.ts";
 export { PROVIDER_DASHBOARDS, type ProviderDashboard } from "../utils/providerDashboards.ts";
+export { detectProviderError } from "../utils/providerErrors.ts";
 export type { RunStatusCheckConclusion, RunStatusCheckOctokit, } from "../utils/runStatusCheck.ts";
 export { APPROVAL_CHECK_NAME, createRunStatusCheck, finalizeRunStatusCheck, RUN_STATUS_CHECK_NAME, runStatusCheckNeedsFinalizing, } from "../utils/runStatusCheck.ts";
 export * from "../utils/subscriptionCredentials.ts";

package/dist/internal.js

@@ -8,7 +8,7 @@ var __export = (target, all) => {
 // package.json
 var package_default = {
   name: "pullfrog",
-  version: "0.1.88",
+  version: "0.1.90",
   cliContractVersion: "1",
   type: "module",
   bin: {
@@ -16821,6 +16821,146 @@ var PROVIDER_DASHBOARDS = {
   }
 };
 
+// utils/providerErrors.ts
+var PROVIDER_BILLING_EXHAUSTED_LABEL = "provider billing exhausted";
+var PROVIDER_NO_ENDPOINTS_LABEL = "provider no routable endpoints";
+var PROVIDER_USAGE_LIMIT_LABEL = "provider usage limit reached";
+var statusKey = `\\b(?:status[_ ]?code|http[_ ]?status|status)["']?\\s*[:=]\\s*["']?`;
+var ANTHROPIC_SPEND_CAP_PATTERN = /reached your specified API usage limits\.?(?:\s*You will regain access on ([^"\n]+?)\.)?/i;
+var PROVIDER_ERROR_PATTERNS = [
+  // billing-payload patterns come BEFORE bare status-code patterns. providers
+  // commonly return 401 / 429 for billing/quota exhaustion (OpenCode Zen
+  // `CreditsError` / `FreeUsageLimitError`, Gemini `RESOURCE_EXHAUSTED` +
+  // "spending cap", Anthropic "Insufficient balance" / "credit balance is
+  // too low"). these are non-retryable and require user-billing action —
+  // distinct from a transient auth error or rate-limit. status-code patterns
+  // would otherwise win and surface "auth error (401)" / "rate limited (429)"
+  // with no billing hint. see #778, #835.
+  { regex: /\bCreditsError\b/, label: PROVIDER_BILLING_EXHAUSTED_LABEL },
+  { regex: /\bFreeUsageLimitError\b/, label: PROVIDER_BILLING_EXHAUSTED_LABEL },
+  // `balance` is DeepSeek's noun, `credits` is OpenRouter's for the SAME
+  // terminal state — #1164's run 7 (`Insufficient credits. Add more using
+  // …/settings/credits`) matched neither this nor `requires more credits`, so
+  // the one run in that episode that was a genuinely empty wallet rendered with
+  // no CTA at all while runs 1-6 rendered correctly.
+  { regex: /Insufficient (?:balance|credits)/i, label: PROVIDER_BILLING_EXHAUSTED_LABEL },
+  { regex: /credit balance is too low/i, label: PROVIDER_BILLING_EXHAUSTED_LABEL },
+  // "spending cap" (Gemini) and "spending limit" (xAI, #1076) are the same
+  // condition in two house styles — a configured ceiling was reached.
+  { regex: /spending (?:cap|limit)/i, label: PROVIDER_BILLING_EXHAUSTED_LABEL },
+  // xAI exhausts credits and the monthly ceiling in one 403 whose status code
+  // sits nowhere near a `status:` key, so no status pattern below fires (#1076).
+  { regex: /used all available credits/i, label: PROVIDER_BILLING_EXHAUSTED_LABEL },
+  // Gemini's daily / free-tier cap. it tells the user to "check your plan and
+  // billing details" in its own words but matches none of the wallet wordings
+  // above, so it fell to the catch-all `quota` label — which is not the label
+  // the actionable copy is keyed on, so the run rendered a blank comment for a
+  // condition the provider had spelled out (#1114).
+  {
+    regex: /exceeded your current quota, please check your plan and billing/i,
+    label: PROVIDER_BILLING_EXHAUSTED_LABEL
+  },
+  { regex: /generate_content_free_tier_requests/i, label: PROVIDER_BILLING_EXHAUSTED_LABEL },
+  // Anthropic's Console spend cap. its noun is "API usage limits", which none of
+  // the wallet-shaped patterns above reach, and its 400 sits nowhere near a
+  // `status:` key either — so the whole message was dropped on the floor (#1208).
+  { regex: ANTHROPIC_SPEND_CAP_PATTERN, label: PROVIDER_BILLING_EXHAUSTED_LABEL },
+  // OpenCode Zen / Codex-subscription cap: `AI_APICallError: The usage limit has
+  // been reached`. Its noun is "usage limit" with no "rate", no status code and
+  // no wallet wording, so every pattern here missed it and `lastProviderError`
+  // stayed unset — which suppresses nothing, so the run was reported as "The
+  // model produced no output at all … usually transient; re-running often
+  // succeeds" while the same log held nine of these. Measured on a live account
+  // whose ChatGPT subscription was capped.
+  { regex: /\bthe usage limit has been reached\b/i, label: PROVIDER_USAGE_LIMIT_LABEL },
+  // the OpenRouter shapes `isRouterKeylimitExhaustedError` matches. on a Router
+  // run those mean the PULLFROG wallet is empty and `renderRunError` returns a
+  // `BillingError` before ever reaching this list; on a BYOK run the very same
+  // wire text means the user's OWN OpenRouter wallet is empty, and this entry is
+  // what gives them the right dashboard instead of ours. see #1135.
+  {
+    regex: /requires more credits|Key limit exceeded \(total limit\)/i,
+    label: PROVIDER_BILLING_EXHAUSTED_LABEL
+  },
+  // OpenRouter has no endpoint it is allowed to route to: the customer's
+  // data-policy / guardrail settings exclude every provider serving the model.
+  // dies ~2s into the session with nothing billed, so it is neither a billing
+  // nor an auth condition — and both of those patterns would otherwise be
+  // reached first for a message that mentions neither. see #1164.
+  {
+    regex: /No endpoints available matching your (?:guardrail restrictions|data policy)/i,
+    label: PROVIDER_NO_ENDPOINTS_LABEL
+  },
+  // auth patterns must come BEFORE rate-limit patterns. OpenRouter 401 error
+  // payloads carry `x-ratelimit-*` response headers in the dump, and the
+  // free-form rate-limit regex below would otherwise win on word-boundary
+  // matches inside header names. canonical 401 messages: OpenRouter returns
+  // `{"error":{"message":"User not found","code":401}}` for disabled or
+  // invalid keys (https://openai.luzhipeng.com/docs/api/reference/errors-and-debugging).
+  { regex: new RegExp(`${statusKey}401\\b`, "i"), label: "auth error (401)" },
+  { regex: new RegExp(`${statusKey}403\\b`, "i"), label: "auth error (403)" },
+  { regex: /\bUser not found\b/i, label: "auth error (invalid/disabled key)" },
+  { regex: /\bInvalid authentication\b/i, label: "auth error (invalid credentials)" },
+  { regex: /\bNo auth credentials found\b/i, label: "auth error (missing credentials)" },
+  { regex: new RegExp(`${statusKey}429\\b`, "i"), label: "rate limited (429)" },
+  { regex: new RegExp(`${statusKey}500\\b`, "i"), label: "provider 500 error" },
+  { regex: new RegExp(`${statusKey}503\\b`, "i"), label: "provider unavailable (503)" },
+  // matches `rate limit`, `rate limited`, `rate limits exceeded`,
+  // `rate_limit_error`, `rate_limit_exceeded`. the leading `\b` + `[_ ]`
+  // separator rejects `x-ratelimit-*` / `anthropic-ratelimit-*` response
+  // headers (no separator between "rate" and "limit") which routinely
+  // appear in dumped 401 / 4xx error JSON.
+  { regex: /\brate[_ ]limit/i, label: "rate limited" },
+  { regex: /\bRESOURCE_EXHAUSTED\b/, label: "quota exhausted" },
+  // Google gRPC `INTERNAL` status. word-boundary anchors reject
+  // `INTERNAL_SERVER_ERROR` (HTTP 500 message that may appear in unrelated
+  // log lines) and identifiers like `INTERNALS`.
+  { regex: /\bINTERNAL\b/, label: "provider internal error" },
+  { regex: /\bUNAVAILABLE\b/, label: "provider unavailable" },
+  // matches `quota`, `insufficient_quota`, `quota_exceeded`, `quotaExceeded`.
+  // word-character lookarounds would reject `_quota` / `quotaX`; `quota` is
+  // specific enough that a plain substring match is safe.
+  { regex: /quota/i, label: "quota error" },
+  // explicit zero-quota response, e.g. `{"limit": 0}`. the `\b` anchor
+  // around `limit` rejects keys like `time_limit` or `field_limit`.
+  { regex: /["']?\blimit\b["']?\s*:\s*0\b/, label: "zero quota" }
+];
+var EXCERPT_MAX_BYTES = 600;
+var LINES_BEFORE = 1;
+var LINES_AFTER = 2;
+function findProviderErrorMatch(text) {
+  for (const entry of PROVIDER_ERROR_PATTERNS) {
+    const m = entry.regex.exec(text);
+    if (!m) continue;
+    return { label: entry.label, excerpt: extractExcerpt(text, m.index) };
+  }
+  return null;
+}
+function detectProviderError(text) {
+  return findProviderErrorMatch(text)?.label ?? null;
+}
+function extractExcerpt(text, matchIndex) {
+  const lineStart = text.lastIndexOf("\n", matchIndex - 1) + 1;
+  const lineEndRaw = text.indexOf("\n", matchIndex);
+  const lineEnd = lineEndRaw === -1 ? text.length : lineEndRaw;
+  let start = lineStart;
+  for (let i = 0; i < LINES_BEFORE && start > 0; i++) {
+    const prev = text.lastIndexOf("\n", start - 2);
+    start = prev < 0 ? 0 : prev + 1;
+  }
+  let end = lineEnd;
+  for (let i = 0; i < LINES_AFTER && end < text.length; i++) {
+    const next = text.indexOf("\n", end + 1);
+    end = next < 0 ? text.length : next;
+  }
+  let excerpt = text.slice(start, end);
+  if (excerpt.length > EXCERPT_MAX_BYTES) {
+    excerpt = text.slice(lineStart, lineEnd);
+    if (excerpt.length > EXCERPT_MAX_BYTES) excerpt = excerpt.slice(0, EXCERPT_MAX_BYTES);
+  }
+  return excerpt.trim();
+}
+
 // utils/runStatusCheck.ts
 var RUN_STATUS_CHECK_NAME = "pullfrog";
 var GITHUB_ACTIONS_APP_SLUG = "github-actions";
@@ -17214,6 +17354,7 @@ export {
   decodeJwtExpMs,
   defaultAutoTier,
   deleteProgressCommentApi,
+  detectProviderError,
   finalizeRunStatusCheck,
   getAutoSelectHintModel,
   getModelEffortLevels,

package/dist/utils/runErrorRenderer.d.ts

@@ -40,6 +40,9 @@
  *      `maximum context length is N tokens`. Actionable, so it renders on
  *      both surfaces rather than collapsing to the one-line comment.
  *
+ *   4b'. Run time limit — the agent was still working when the run's own
+ *      timeout fired. Actionable (raise the limit), so both surfaces.
+ *
  *   4c. Transient upstream failure (#1173) — Anthropic `529 Overloaded`,
  *      OpenRouter `provider_unavailable` / `timeout`, Zen `Streaming response
  *      failed: [5xx]`. Last of the classified branches so every more specific
@@ -63,8 +66,8 @@
  *      the hang case, since the raw internal string helps nobody on the PR.
  *
  * Net: the actionable classifications (billing, API-key, model-not-found,
- * no-provider-available, context-overflow, transient-upstream) render identical
- * bodies on both surfaces; the non-actionable ones (unexplained hang,
+ * no-provider-available, context-overflow, run time limit, transient-upstream)
+ * render identical bodies on both surfaces; the non-actionable ones (unexplained hang,
  * generic) keep the forensics in the Actions job summary and show a calm
  * one-liner in the PR comment, whose footer already carries Pullfrog
  * branding + rerun links.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "pullfrog",
-  "version": "0.1.88",
+  "version": "0.1.90",
   "cliContractVersion": "1",
   "type": "module",
   "bin": {