pullfrog 0.1.96 → 0.1.97

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
@@ -48,6 +48,7 @@
48
48
  * `pullfrog_bus_event` — picked to be unmistakably ours so a future opencode
49
49
  * release that introduces a coincidentally-named event type won't collide.
50
50
  */
51
+ import type { AgentRunContext } from "./shared.ts";
51
52
  export declare const PULLFROG_BUS_EVENT_TYPE: "pullfrog_bus_event";
52
53
  export declare const PULLFROG_OPENCODE_PLUGIN_FILENAME: "pullfrog-events.ts";
53
54
  export declare const PULLFROG_OPENCODE_GATE_PLUGIN_FILENAME: "pullfrog-subagent-gate.ts";
@@ -85,6 +86,7 @@ export declare const PULLFROG_OPENCODE_PLUGIN_SOURCE: string;
85
86
  * Also hard-blocks the native `bash` tool for EVERY session. bash stays in the
86
87
  * tool list because Zen's free tier rejects a request without it (2026-09-17);
87
88
  * `permission.bash: "ask"` is the fail-closed backstop should this plugin ever
88
- * not load. see wiki/security.md.
89
+ * not load. the refusal names the replacement, because a bare one left models
90
+ * retrying bash until the 1h cap (#1476). see wiki/security.md.
89
91
  */
90
- export declare function buildOpencodeSubagentGateSource(deniedTools: readonly string[]): string;
92
+ export declare function buildOpencodeSubagentGateSource(ctx: AgentRunContext): string;