bump action version to 0.0.198.

prepare the action package for the next publish with the ESM export/build updates already merged.

Made-with: Cursor

.github/workflows/publish.yml

@@ -34,6 +34,9 @@ jobs:
       - name: Install dependencies
         run: pnpm install --frozen-lockfile
 
+      - name: Build
+        run: pnpm build
+
       - name: Get package version
         id: version
         run: |
@@ -99,8 +102,6 @@ jobs:
       - name: Publish to npm
         if: steps.check_tag.outputs.exists == 'false'
         run: npm publish --provenance --access public
-        env:
-          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
 
       - name: Summary
         if: always()

.github/workflows/test-token.yml

@@ -0,0 +1,35 @@
+name: Test get-installation-token
+
+on:
+  push:
+    branches: [main]
+  workflow_dispatch:
+
+permissions:
+  id-token: write
+  contents: read
+
+jobs:
+  test-token:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Get installation token
+        id: token
+        uses: pullfrog/pullfrog/get-installation-token@main
+
+      - name: Verify token with Node.js
+        env:
+          GITHUB_TOKEN: ${{ steps.token.outputs.token }}
+        run: |
+          node -e '
+            const res = await fetch("https://api.github.com/installation/repositories?per_page=1", {
+              headers: {
+                Authorization: "token " + process.env.GITHUB_TOKEN,
+                Accept: "application/vnd.github+json",
+              },
+            });
+            if (!res.ok) throw new Error("GET installation/repositories failed: " + res.status + " " + (await res.text()));
+            const data = await res.json();
+            console.log("authenticated — installation has access to", data.total_count, "repo(s)");
+            console.log("first repo:", data.repositories[0].full_name);
+          '

.husky/pre-commit

@@ -1,8 +0,0 @@
-# sync action lockfile when action/package.json changes
-if git diff --cached --name-only | grep -q "^action/package.json$"; then
-    echo "🔒 syncing action/pnpm-lock.yaml..."
-    # note: pnpm -C action install will *not* treat "action" as a monorepo root if run from repo root;
-    # to install with action/ as the workspace root (and search upwards), cd into action first:
-    (cd action && pnpm install --no-frozen-lockfile)
-    git add action/pnpm-lock.yaml
-fi

commands/init.ts

@@ -384,7 +384,9 @@ async function ensureInstallation(ctx: {
       isOrg: initial.isOrg,
     });
     activeSpin!.stop(`pullfrog is installed on selected repos, but ${repoRef} is not included.`);
-    p.log.info(`add it under "Repository access" on the installation config page.\n  ${pc.dim(configUrl)}`);
+    p.log.info(
+      `add it under "Repository access" on the installation config page.\n  ${pc.dim(configUrl)}`
+    );
     const openIt = await p.confirm({ message: "open browser?", active: "yes", inactive: "no" });
     handleCancel(openIt);
     if (openIt) openBrowser(configUrl);
@@ -742,7 +744,9 @@ async function promptTestRun(ctx: { token: string; owner: string; repo: string }
 
   activeSpin!.stop("dispatched test run");
   if (result.data.url) {
-    process.stdout.write(`${pc.gray(p.S_BAR)}    ${link(pc.dim(result.data.url), result.data.url)}\n`);
+    process.stdout.write(
+      `${pc.gray(p.S_BAR)}    ${link(pc.dim(result.data.url), result.data.url)}\n`
+    );
     openBrowser(result.data.url);
   }
 }
@@ -867,7 +871,9 @@ async function main() {
     if (!merged) skipTestRun = true;
   } else {
     const short = result.data.hash?.slice(0, 7);
-    spin.stop(short ? `committed pullfrog.yml to repo ${pc.dim(short)}` : "committed pullfrog.yml to repo");
+    spin.stop(
+      short ? `committed pullfrog.yml to repo ${pc.dim(short)}` : "committed pullfrog.yml to repo"
+    );
   }
 
   if (!skipTestRun && !secrets.hasRuns) {

esbuild.config.js

@@ -1,10 +1,13 @@
 // @ts-check
 
 import { build } from "esbuild";
-import { readFileSync, writeFileSync } from "fs";
+import { mkdirSync, readFileSync, rmSync, writeFileSync } from "fs";
 
 const pkg = JSON.parse(readFileSync("package.json", "utf-8"));
 
+rmSync("./dist", { recursive: true, force: true });
+mkdirSync("./dist", { recursive: true });
+
 // Plugin to strip shebangs from output files
 /**
  * @type {import("esbuild").Plugin}
@@ -73,6 +76,21 @@ await build({
   },
 });
 
+// Build ESM library entrypoints for programmatic imports
+await build({
+  ...sharedConfig,
+  entryPoints: ["./index.ts"],
+  outfile: "./dist/index.js",
+  target: "node20",
+});
+
+await build({
+  ...sharedConfig,
+  entryPoints: ["./internal/index.ts"],
+  outfile: "./dist/internal.js",
+  target: "node20",
+});
+
 // prepend shebang after strip (esbuild banner can't guarantee line 1 placement)
 const cliPath = "./dist/cli.mjs";
 const cliContent = readFileSync(cliPath, "utf8");

mcp/selectMode.ts

@@ -1,6 +1,6 @@
 import { type } from "arktype";
 import { formatMcpToolRef } from "../external.ts";
-import { PR_SUMMARY_FORMAT, type Mode } from "../modes.ts";
+import { type Mode, PR_SUMMARY_FORMAT } from "../modes.ts";
 import { apiFetch } from "../utils/apiFetch.ts";
 import { log } from "../utils/log.ts";
 import type { ToolContext } from "./server.ts";

package.json

@@ -1,6 +1,6 @@
 {
   "name": "pullfrog",
-  "version": "0.0.195",
+  "version": "0.0.198",
   "type": "module",
   "bin": {
     "pullfrog": "dist/cli.mjs",
@@ -13,14 +13,14 @@
   "scripts": {
     "test": "vitest",
     "typecheck": "tsc --noEmit",
-    "build": "node esbuild.config.js",
+    "build": "node esbuild.config.js && tsc -p tsconfig.exports.json",
     "check:entrypoints": "node scripts/check-entrypoint-imports.ts",
     "play": "node play.ts",
     "runtest": "node test/run.ts",
     "scratch": "node scratch.ts",
     "upDeps": "pnpm up --latest",
     "lock": "pnpm install --no-frozen-lockfile",
-    "prepare": "cd .. && husky action/.husky"
+    "prepare": "cd .. && husky"
   },
   "devDependencies": {
     "@actions/core": "^1.11.1",
@@ -74,22 +74,19 @@
     "url": "https://github.com/pullfrog/pullfrog/issues"
   },
   "homepage": "https://github.com/pullfrog/pullfrog#readme",
-  "zshy": {
-    "exports": "./index.ts"
-  },
   "main": "./dist/index.js",
   "module": "./dist/index.js",
   "types": "./dist/index.d.ts",
   "exports": {
     ".": {
       "@pullfrog/source": "./index.ts",
-      "types": "./dist/index.d.cts",
+      "types": "./dist/index.d.ts",
       "import": "./dist/index.js",
-      "require": "./dist/index.cjs"
+      "default": "./dist/index.js"
     },
     "./internal": {
       "@pullfrog/source": "./internal/index.ts",
-      "types": "./dist/internal.d.cts",
+      "types": "./dist/internal/index.d.ts",
       "import": "./dist/internal.js",
       "default": "./dist/internal.js"
     },

runCli.ts

@@ -44,7 +44,7 @@ function runNpx(context: RuntimeContext, packageSpec: string, cliArgs: string[])
       ? join(context.nodeBinDir, "npx.cmd")
       : join(context.nodeBinDir, "npx");
   execFileSync(npxPath, ["--yes", packageSpec, ...cliArgs], {
-    cwd: context.actionRoot,
+    cwd: process.env.GITHUB_WORKSPACE || context.actionRoot,
     stdio: "inherit",
     env: context.env,
   });

tsconfig.exports.json

@@ -0,0 +1,10 @@
+{
+  "extends": "./tsconfig.json",
+  "compilerOptions": {
+    "noEmit": false,
+    "emitDeclarationOnly": true,
+    "declarationMap": false,
+    "outDir": "./dist"
+  },
+  "include": ["index.ts", "internal/index.ts"]
+}