pullfrog 0.1.95 → 0.1.96

package/dist/internal/index.d.ts

@@ -6,7 +6,7 @@ export { CLI_CONTRACT_HEADER, CLI_CONTRACT_VERSION, CLI_UPGRADE_MESSAGE } from "
 export type { ConfigField, ConfigScope, ConfigValue } from "../configuration.ts";
 export { configEntrySchema, configFields, configResponseSchema, configValueSchema, } from "../configuration.ts";
 export type { AuthorPermission, AutoTier, EffortPosition, ModelAlias, ModelProvider, Payload, PayloadEvent, PayloadRouting, ProviderConfig, PushPermission, RouterSource, RouterTier, ShellPermission, ToolPermission, WriteablePayload, XrepoConfig, } from "../external.ts";
-export { AUTO_EFFICIENT, AUTO_INTELLIGENT, AUTO_ROUTER, autoLadder, autoRoutedSlug, DEFAULT_EFFORT_POSITION, DEFAULT_PROXY_MODEL, defaultAutoTier, EFFORT_ALIASES, getAutoSelectHintModel, getModelEffortLevels, getModelEnvVars, getModelManagedCredentials, getModelProvider, getProviderDisplayName, isAutoRouted, isAutoSlug, isAutoTier, isCardGatedModel, isEffortPosition, isOssAllowedModel, isRouterTier, ladderRungs, modelAliases, modelHasStoredAuth, modelIdLabel, OSS_MODEL_ALLOWLIST, OSS_RECOMMENDED_MODEL, offeredRungs, ossFundedModelNames, PROVIDER_GATEWAY_URL_ENV, parseEffortPosition, parseModel, pickUsesOpenRouter, providers, pullfrogMcpName, ROUTED_PROVIDERS, ROUTER_LADDER, ROUTER_TIERS, resolveAutoTier, resolveCliModel, resolveDisplayAlias, resolveModelRung, resolveModelSlug, resolveOpenRouterModel, resolveRoutedModel, resolveRung, routerProxyOptOut, rungLabel, rungPosition, SUBSIDY_RUNG, } from "../external.ts";
+export { AUTO_EFFICIENT, AUTO_INTELLIGENT, AUTO_ROUTER, autoLadder, autoRoutedSlug, DEFAULT_EFFORT_POSITION, DEFAULT_PROXY_MODEL, defaultAutoTier, EFFORT_ALIASES, getAutoSelectHintModel, getModelEffortLevels, getModelEnvVars, getModelManagedCredentials, getModelProvider, getProviderDisplayName, isAutoRouted, isAutoSlug, isAutoTier, isCardGatedModel, isEffortPosition, isOssAllowedModel, isRouterTier, ladderRungs, modelAliases, modelHasStoredAuth, modelIdLabel, OSS_MODEL_ALLOWLIST, OSS_RECOMMENDED_MODEL, offeredRungs, ossFundedModelNames, PROVIDER_GATEWAY_URL_ENV, parseEffortPosition, parseModel, providers, pullfrogMcpName, ROUTED_PROVIDERS, ROUTER_LADDER, ROUTER_TIERS, resolveAutoTier, resolveCliModel, resolveDisplayAlias, resolveModelRung, resolveModelSlug, resolveOpenRouterModel, resolvePickModel, resolveRoutedModel, resolveRung, routerProxyOptOut, rungLabel, rungPosition, SUBSIDY_RUNG, } from "../external.ts";
 export type { Mode } from "../modes.ts";
 export { modes } from "../modes.ts";
 export { type CommercialRefusal, commercialPaywallBody } from "../utils/billingErrors.ts";

package/dist/internal.js

@@ -8,7 +8,7 @@ var __export = (target, all) => {
 // package.json
 var package_default = {
   name: "pullfrog",
-  version: "0.1.95",
+  version: "0.1.96",
   cliContractVersion: "1",
   type: "module",
   bin: {
@@ -74,7 +74,7 @@ var package_default = {
     undici: "^7.22.0",
     vitest: "^4.0.17",
     yaml: "^2.8.2",
-    yes: "0.1.0",
+    yes: "0.2.3",
     zod: "4.3.6"
   },
   repository: {
@@ -15076,7 +15076,11 @@ var providers = {
       "glm-flash": {
         displayName: "GLM Flash",
         resolve: "opencode-go/glm-5.3-flash",
-        effort: ["low", "high", "max"],
+        // the Go endpoint intermittently rejects reasoning_effort ("native reasoning
+        // control reasoning_effort is not allowed") mid-run, despite models.dev
+        // advertising a ladder — so this route sends none.
+        effort: [],
+        openRouterEffort: ["low", "high", "max"],
         openRouterResolve: "openrouter/z-ai/glm-5.3-flash"
       },
       // legacy alias — the slug pinned a version instead of a brand tier and
@@ -15532,7 +15536,7 @@ var providers = {
       "deepseek-pro": {
         displayName: "DeepSeek Pro",
         resolve: "vercel/deepseek/deepseek-v4-pro-0813",
-        effort: ["none", "high", "max"]
+        effort: ["none", "low", "high", "max"]
       },
       // the gateway's bare `deepseek-v4-flash` is the April preview — the same
       // fork trap as OpenRouter, with `deepseek-v4-flash-0731` beside it — so
@@ -15540,7 +15544,7 @@ var providers = {
       "deepseek-flash": {
         displayName: "DeepSeek Flash",
         resolve: "vercel/deepseek/deepseek-v4.1-flash",
-        effort: ["none", "high", "max"]
+        effort: ["none", "low", "high", "max"]
       },
       glm: {
         displayName: "GLM",
@@ -15611,8 +15615,8 @@ function routerProxyOptOut(ctx) {
   if (ctx.slug === null) return false;
   return resolveDisplayAlias(ctx.slug)?.isFree === true || modelHasStoredAuth({ model: ctx.slug, secretNames: ctx.secretNames });
 }
-function pickUsesOpenRouter(params) {
-  return params.proxied && !routerProxyOptOut(params);
+function resolvePickModel(params) {
+  return params.proxied && !routerProxyOptOut(params) ? resolveOpenRouterModel(params.slug) : resolveCliModel(params.slug);
 }
 var modelAliases = Object.entries(providers).flatMap(
   ([providerKey, config2]) => Object.entries(config2.models).map(([modelId, def]) => ({
@@ -15795,13 +15799,13 @@ for (const [name, ladder] of Object.entries({ ...PROVIDER_LADDERS, router: ROUTE
   if (terminal.size < 2) throw new Error(`${name} ladder runs every tier on ${[...terminal][0]}`);
 }
 var OSS_MODEL_ALLOWLIST = [
-  "deepseek/deepseek-flash",
-  "openai/gpt-luna",
-  "openrouter/minimax-m2.5",
   // opt-in: 0.86x the old default on the measured mix, and Meta trains on the
   // traffic — fine for public code on headless runs, the human decided
   // 2026-09-11. unmeasured on a real run; not the default until it is.
-  "meta/muse-spark-contributor"
+  "meta/muse-spark-contributor",
+  "deepseek/deepseek-flash",
+  "openai/gpt-luna",
+  "openrouter/minimax-m2.5"
 ];
 var OSS_RECOMMENDED_MODEL = AUTO_TIER_TARGET[AUTO_EFFICIENT];
 function ossFundedModelNames() {
@@ -16135,7 +16139,7 @@ ${PR_SUMMARY_FORMAT}`
 
    Follow these rules:
    - note: the first create_pull_request_review submission may error with a one-time diff-coverage nudge listing unread TOC regions. retry the same call to proceed \u2014 optionally after reading the listed ranges. the pre-flight will not block again this session.
-   - IF NO NEW ISSUES, NON-SUBSTANTIVE CHANGES ONLY (trivial formatting, import reordering, comment tweaks): do NOT submit a review. Instead call \`${t("report_progress")}\` with a 1-2 sentence note explaining no review was warranted (e.g. "No new issues. Changes since last review are formatting-only."). this leaves a visible signal that the run completed.
+   - IF NO NEW ISSUES, NON-SUBSTANTIVE CHANGES ONLY (trivial formatting, import reordering, comment tweaks): do NOT submit a review. Instead call \`${t("report_progress")}\` with \`no_review_needed: true\` and a 1-2 sentence note explaining no review was warranted (e.g. "No new issues. Changes since last review are formatting-only."). this leaves a visible signal that the run completed.
    - ELSE IF NEW CRITICAL ISSUES (blocks merge \u2014 bugs, security, data loss, broken core flows): call \`${t("create_pull_request_review")}\` with \`approved: false\`, all comments, and the review body. body opens with \`> [!CAUTION]\\n> This PR introduces ...\`, followed by the PR summary using the default format below.
    - ELSE IF NEW MUST-ADDRESS NON-CRITICAL FINDINGS (real consequences if shipped \u2014 incorrect behavior, missing validation, regressions the author should fix before merge): call \`${t("create_pull_request_review")}\` with \`approved: false\`, all comments, and the review body. body opens with \`> [!IMPORTANT]\\n> ...\`, followed by the PR summary using the default format below. Do NOT use this tier for nits, style preferences, or "consider also" suggestions.
    - ELSE IF NEW MINOR SUGGESTIONS ONLY (low-stakes findings, or Nitpicks only): call \`${t("create_pull_request_review")}\` with \`approved: false\`, all comments, and the review body. body opens with \`> \u2139\uFE0F No critical issues \u2014 minor suggestions inline.\\n\\n\` (vary the wording after \u2139\uFE0F to fit the review), followed by the PR summary using the default format below.
@@ -17019,7 +17023,12 @@ function terminalOutput(params) {
   const review = params.reviewUrl ? `
 
 [View the review Pullfrog posted \u2192](${params.reviewUrl})` : "";
-  if (params.conclusion === "success") return { title: base.title, summary: base.summary + review };
+  if (params.conclusion === "success") {
+    const note = params.note ? `
+
+${params.note}` : "";
+    return { title: base.title, summary: base.summary + review + note };
+  }
   return {
     title: base.title,
     summary: base.summary + logsLine(params.detailsUrl) + review + disableCheckLine(params.owner, params.repo)
@@ -17061,7 +17070,8 @@ async function finalizeRunStatusCheck(params) {
       owner: params.owner,
       repo: params.repo,
       detailsUrl: params.detailsUrl,
-      reviewUrl: params.reviewUrl
+      reviewUrl: params.reviewUrl,
+      note: params.note
     })
   };
   if (params.detailsUrl) updateParams.details_url = params.detailsUrl;
@@ -17204,7 +17214,13 @@ var codexUsageSchema = external_exports.object({
     limit_reached: external_exports.boolean(),
     primary_window: codexWindowSchema,
     secondary_window: codexWindowSchema
-  }).optional()
+  }).optional(),
+  credits: external_exports.object({
+    has_credits: external_exports.boolean().optional(),
+    unlimited: external_exports.boolean().optional(),
+    overage_limit_reached: external_exports.boolean().optional()
+  }).nullish(),
+  spend_control: external_exports.object({ reached: external_exports.boolean().optional() }).nullish()
 });
 var unknown2 = { status: "unknown" };
 var SubscriptionCredentialError = class extends Error {
@@ -17272,9 +17288,12 @@ async function probeSubscription(input) {
   const body = await response.json().catch(() => null);
   if (!codex) return unknown2;
   const parsed = codexUsageSchema.safeParse(body);
-  const limit = parsed.success ? parsed.data.rate_limit : void 0;
-  if (!limit) return unknown2;
+  if (!parsed.success || !parsed.data.rate_limit) return unknown2;
+  const limit = parsed.data.rate_limit;
   if (limit.allowed && !limit.limit_reached) return { status: "usable" };
+  const credits = parsed.data.credits;
+  if ((credits?.has_credits || credits?.unlimited) && !credits.overage_limit_reached && !parsed.data.spend_control?.reached)
+    return { status: "usable" };
   const windows = [limit.primary_window, limit.secondary_window];
   const full = windows.filter((window) => (window?.used_percent ?? 0) >= 100);
   const resets = (full.length ? full : windows).flatMap(
@@ -17322,15 +17341,24 @@ async function probeInference(input) {
     const error48 = external_exports.object({ error: external_exports.object({ code: external_exports.string() }) }).safeParse(await response.json().catch(() => null));
     return error48.success && error48.data.error.code === "insufficient_quota" ? { status: "exhausted", detail: "refused with 429: insufficient quota", resetAt: void 0 } : unknown2;
   }
+  if (response?.status === 401 || response?.status === 403)
+    return {
+      status: "rejected",
+      detail: `rejected with ${response.status}${await providerReason(response)}`
+    };
   await response?.body?.cancel();
   if (!response) return unknown2;
   if (response.ok) return { status: "usable" };
-  if (response.status === 401 || response.status === 403)
-    return { status: "rejected", detail: `rejected with ${response.status}` };
   if (response.status === 402)
     return { status: "exhausted", detail: "refused with 402", resetAt: void 0 };
   return unknown2;
 }
+async function providerReason(response) {
+  const body = external_exports.object({ error: external_exports.union([external_exports.string(), external_exports.object({ message: external_exports.string() })]) }).safeParse(await response.json().catch(() => null));
+  if (!body.success) return "";
+  const error48 = body.data.error;
+  return `: ${(typeof error48 === "string" ? error48 : error48.message).slice(0, 300)}`;
+}
 
 // utils/time.ts
 var TIMEOUT_DISABLED = "none";
@@ -17420,7 +17448,6 @@ export {
   parseModel,
   parseTimeString,
   parseXaiAuthBody,
-  pickUsesOpenRouter,
   probeSubscription,
   providers,
   pullfrogMcpName,
@@ -17432,6 +17459,7 @@ export {
   resolveModelRung,
   resolveModelSlug,
   resolveOpenRouterModel,
+  resolvePickModel,
   resolveRoutedModel,
   resolveRung,
   routerProxyOptOut,

package/dist/mcp/comment.d.ts

@@ -33,6 +33,7 @@ export declare function EditCommentTool(ctx: ToolContext): import("fastmcp").Too
 export declare const ReportProgress: import("arktype/internal/variants/object.ts").ObjectType<{
     body: string;
     target_plan_comment?: boolean;
+    no_review_needed?: boolean;
 }, {}>;
 /**
  * Report progress to a GitHub comment.
@@ -61,9 +62,11 @@ export declare function reportProgress(ctx: ToolContext, params: {
 export declare function ReportProgressTool(ctx: ToolContext): import("fastmcp").Tool<any, import("@standard-schema/spec").StandardSchemaV1<{
     body: string;
     target_plan_comment?: boolean;
+    no_review_needed?: boolean;
 }, {
     body: string;
     target_plan_comment?: boolean;
+    no_review_needed?: boolean;
 }>> & {
     mutates?: boolean;
 };

package/dist/models.d.ts

@@ -189,7 +189,7 @@ export declare function modelHasStoredAuth(params: {
  * as-configured rather than clamping to the auto tier.
  *
  * one predicate for every reader — the console picker's `customLocked`, the
- * effort ladder's `resolveRunning` and `pickUsesOpenRouter`. they held two
+ * effort ladder's `resolveRunning` and `resolvePickModel`. they held two
  * copies and the free half was missing from both, which put the whole `opencode/*` free tier (`opencode/big-pickle`
  * is `preferred`, so the most-picked model there is) behind "add a payment
  * method to run it" on a card-less Router repo, against a server that ran it.
@@ -198,13 +198,13 @@ export declare function routerProxyOptOut(ctx: {
     slug: string | null;
     secretNames: string[];
 }): boolean;
-/** whether a pick runs as its OpenRouter target: a proxied account (Router, the OSS subsidy)
- * mints for every pick `routerProxyOptOut` does not exempt. */
-export declare function pickUsesOpenRouter(params: {
+/** the specifier a pick runs as: its OpenRouter target on a proxied account (Router, the OSS
+ * subsidy), which mints for every pick `routerProxyOptOut` does not exempt, else its direct one. */
+export declare function resolvePickModel(params: {
     slug: string;
     proxied: boolean;
     secretNames: string[];
-}): boolean;
+}): string | undefined;
 export declare const modelAliases: ModelAlias[];
 /**
  * `repo.model` sentinels for the two managed auto tiers. stored verbatim in

package/dist/toolState.d.ts

@@ -106,6 +106,7 @@ export interface ToolState {
         sha: string | undefined;
         url?: string | undefined;
     };
+    noReviewNeededSha?: string | undefined;
     reviewReplies?: Map<number, {
         commentId: number;
         url: string | undefined;
@@ -147,10 +148,11 @@ export interface ToolState {
     todoTracker?: TodoTracker | undefined;
     agentDiagnostic?: AgentDiagnostic | undefined;
     /**
-     * a `PATCH /api/workflow-run/:id` came back 404 — the reservation was never
-     * claimed, which is permanent for the life of the run (the claim happens at
-     * setup, strictly before any PATCH). latched so the remaining calls stop
-     * firing: one CI run spent 28 doomed round trips on it. see #1153.
+     * a `PATCH /api/workflow-run/:id` came back 404 — Pullfrog neither claimed a
+     * reservation for the run nor recorded it as a custom run, which is permanent for
+     * the life of the run (both happen at setup, strictly before any PATCH). latched so
+     * the remaining calls stop firing: one CI run spent 28 doomed round trips on it.
+     * see #1153.
      */
     workflowRunUnclaimed?: boolean | undefined;
 }

package/dist/utils/github.d.ts

@@ -75,7 +75,7 @@ export declare function fetchIdTokenFromStash(creds: OidcCredentials): Promise<s
  * own retry still re-mints. Mid-run refreshes take the stashed-credentials path
  * (`opts.oidc`) and deliberately bypass this.
  */
-export declare const mintIdToken: yes.OpFunction<() => Promise<string>>;
+export declare const mintIdToken: (() => Promise<string>) & yes.CacheMethods<undefined, undefined>;
 /**
  * ensure a GitHub token is available in the environment.
  *

package/dist/utils/patchWorkflowRunFields.d.ts

@@ -9,6 +9,9 @@ import type { ToolContext } from "../mcp/server.ts";
  *    `Repo.model` slug), PATCHed once at end-of-run so per-model cost analytics
  *    don't parse the audit-only `payload`.
  * Keep in sync with `STRING_FIELDS` in `app/api/workflow-run/[runId]/route.ts`.
+ * `succeeded` and the usage fields below are this start's own report: a custom
+ * workflow can start the action several times in one run, and the server keeps
+ * one row per start, keyed by `START_KEY`, and sums them onto the run.
  */
 declare const STRING_KEYS: readonly ["prNodeId", "issueNodeId", "reviewNodeId", "planCommentNodeId", "summarySnapshot", "model", "agent", "credential"];
 /**
@@ -18,7 +21,11 @@ declare const STRING_KEYS: readonly ["prNodeId", "issueNodeId", "reviewNodeId",
  * amounts. Keep in sync with `INT_FIELDS` + `DECIMAL_FIELDS` in the server route.
  */
 declare const NUMBER_KEYS: readonly ["inputTokens", "outputTokens", "cacheReadTokens", "cacheWriteTokens", "costUsd"];
-export type WorkflowRunPatch = Partial<Record<(typeof STRING_KEYS)[number], string>> & Partial<Record<(typeof NUMBER_KEYS)[number], number>>;
+/** one-way flags, only ever sent as `true`. Keep in sync with `BOOLEAN_FIELDS` in the server route. */
+declare const FLAG_KEYS: readonly ["reviewSkipped"];
+export type WorkflowRunPatch = Partial<Record<(typeof STRING_KEYS)[number], string>> & Partial<Record<(typeof NUMBER_KEYS)[number], number>> & Partial<Record<(typeof FLAG_KEYS)[number], true>> & {
+    succeeded?: boolean;
+};
 /** PATCH workflow-run fields (Pullfrog JWT, not GitHub). */
 export declare function patchWorkflowRunFields(ctx: ToolContext, fields: WorkflowRunPatch): Promise<void>;
 /**

package/dist/utils/runContext.d.ts

@@ -3,6 +3,11 @@ import type { RouterTier } from "../models.ts";
 import type { CommercialRefusal } from "./billingErrors.ts";
 import type { RepoContext } from "./github.ts";
 import type { CredentialAccess } from "./subscriptionCredentials.ts";
+/**
+ * One per process, which is one start of the action within its GitHub run. Sent to run-context
+ * first, so a custom run's start is recorded before it reports, and then on each workflow-run PATCH.
+ */
+export declare const START_KEY: `${string}-${string}-${string}-${string}-${string}`;
 export interface Mode {
     id: string;
     name: string;
@@ -108,6 +113,9 @@ export declare function fetchRunContext(params: {
     /** `payload.type` — lets the server apply this repo's per-trigger model
      * override, which it cannot derive from owner/repo alone. */
     runType?: string | undefined;
+    /** a plain-text prompt, which no Pullfrog dispatch sends — so the server
+     * can record this run without waiting for a reservation to claim it. */
+    plainPrompt: boolean;
     /** `payload.routing.tier` — the model router's tier, which run-context
      * applies to the Router proxy mint the same way it applies `runType`. */
     routedTier?: RouterTier | undefined;

package/dist/utils/runContextData.d.ts

@@ -37,6 +37,8 @@ interface ResolveRunContextDataParams {
      * because run-context is fetched first and needs it to pick this trigger's
      * model override. */
     runType?: string | undefined;
+    /** the prompt is plain text, never a Pullfrog dispatch payload. */
+    plainPrompt: boolean;
     /** the model router's tier from the payload, forwarded so run-context applies it to the proxy mint. */
     routedTier?: RouterTier | undefined;
 }

package/dist/utils/runStatusCheck.d.ts

@@ -32,6 +32,14 @@
  * See wiki/review-approval.md.
  */
 export declare const RUN_STATUS_CHECK_NAME = "pullfrog";
+/**
+ * GitHub's own Actions app. It publishes a check run per job, named after the
+ * job — and the generated workflow's job is also called `pullfrog`, so the
+ * collision is structural rather than incidental. Renaming our check is not
+ * available: it was tried on 2026-08-02 and blocked merges on four customer
+ * repos (see above), so the reuse lookup filters instead. See #1196.
+ */
+export declare const GITHUB_ACTIONS_APP_SLUG = "github-actions";
 /** the review-verdict check. opt-in, terminal-only, and deliberately separate from the above. */
 export declare const APPROVAL_CHECK_NAME = "pullfrog-approval";
 /**
@@ -147,6 +155,8 @@ export declare function finalizeRunStatusCheck(params: {
     conclusion: RunStatusCheckConclusion;
     detailsUrl: string | undefined;
     reviewUrl?: string | undefined;
+    /** the run's own final report, shown on success when nothing else carries it. */
+    note?: string | undefined;
 }): Promise<void>;
 /**
  * Post an already-terminal check-run in one call.
@@ -163,6 +173,7 @@ export declare function createTerminalRunStatusCheck(params: {
     conclusion: RunStatusCheckConclusion;
     detailsUrl: string | undefined;
     reviewUrl?: string | undefined;
+    note?: string | undefined;
 }): Promise<void>;
 /**
  * Whether this check still needs finalizing.

package/dist/utils/statusChecks.d.ts

@@ -11,7 +11,8 @@ import type { ToolContext } from "../mcp/server.ts";
  *   - `pullfrog-approval` stays opt-in (`Repo.approvalCheck`, default off) and terminal-only:
  *     it asserts a review verdict, which only exists once a run produces one. anchored
  *     to the exact reviewed sha so a mid-run push leaves the new head unapproved until
- *     a follow-up re-review reports.
+ *     a follow-up re-review reports. a re-review that submits no review carries the
+ *     prior verdict forward instead (see `carriedApproval`).
  *
  * best-effort throughout: a check-post failure (transient 5xx, closed PR, revoked
  * permission) must never flip the run's own outcome. the `workflow_run.completed` webhook

package/dist/utils/subprocess.d.ts

@@ -12,6 +12,7 @@ export declare class SpawnTimeoutError extends Error {
 export type SignalHandler = (signal: NodeJS.Signals) => void;
 export declare function trackChild(options: TrackChildOptions): void;
 export declare function untrackChild(child: ChildProcess): void;
+export declare function isTrackedChild(child: ChildProcess): boolean;
 export declare function setSignalHandler(handler: SignalHandler | null): void;
 export declare function killTrackedChildren(): void;
 /**

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "pullfrog",
-  "version": "0.1.95",
+  "version": "0.1.96",
   "cliContractVersion": "1",
   "type": "module",
   "bin": {
@@ -66,7 +66,7 @@
     "undici": "^7.22.0",
     "vitest": "^4.0.17",
     "yaml": "^2.8.2",
-    "yes": "0.1.0",
+    "yes": "0.2.3",
     "zod": "4.3.6"
   },
   "repository": {