From 1ed3df5164dd74fd68c03fdc34cf64bb75b50b09 Mon Sep 17 00:00:00 2001
From: Till Rohrmann <till@restate.dev>
Date: Mon, 2 Nov 2026 17:00:00 +0000
Subject: [PATCH] chore: add Pullfrog workflow file

The agent gets JDK 25, Gradle and the Rust toolchain, as in CI. Actions are pinned to exact versions and locked in actions.lock.

Only the provider keys the restatedev org provides are passed (ANTHROPIC_API_KEY, OPENAI_API_KEY).

Co-Authored-By: pullfrog[bot] <226033991+pullfrog[bot]@users.noreply.github.com>
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
---
 .github/workflows/actions.lock | 11 ++++++++
 .github/workflows/pullfrog.yml | 49 ++++++++++++++++++++++++++++++++++
 2 files changed, 60 insertions(+)
 create mode 100644 .github/workflows/pullfrog.yml

diff --git a/.github/workflows/actions.lock b/.github/workflows/actions.lock
index 7bd8931e..90981dcc 100644
--- a/.github/workflows/actions.lock
+++ b/.github/workflows/actions.lock
@@ -43,6 +43,12 @@ workflows:
         - 'actions/upload-artifact@v7.0.2'
     '.github/workflows/publish-test-results.yml':
         - 'enricomi/publish-unit-test-result-action@v2.25.0'
+    '.github/workflows/pullfrog.yml':
+        - 'actions-rust-lang/setup-rust-toolchain@v1.17.0'
+        - 'actions/checkout@v6.1.0'
+        - 'actions/setup-java@v5.7.0'
+        - 'gradle/actions@v6.4.1'
+        - 'pullfrog/pullfrog@v0.1.110'
     '.github/workflows/release-docs.yml':
         - 'actions-rust-lang/setup-rust-toolchain@v1.17.0'
         - 'actions/checkout@v6.1.0'
@@ -164,6 +170,11 @@ dependencies:
         commit: 'sha1-5f6978faf089d4d20b00c7766989d076bb2fc7f1'
         owner_id: 18365890
         repo_id: 197176365
+    'pullfrog/pullfrog@v0.1.110':
+        ref: 'v0.1.110'
+        commit: 'sha1-895164fc90f5c493e72693c919c6cf269af158eb'
+        owner_id: 223181266
+        repo_id: 1032749534
     'restatedev/e2e@v2.2':
         ref: 'v2.2'
         commit: 'sha1-edd926b59e51af418b95c143220c0a2a62b7fd7b'
diff --git a/.github/workflows/pullfrog.yml b/.github/workflows/pullfrog.yml
new file mode 100644
index 00000000..0acd3aa2
--- /dev/null
+++ b/.github/workflows/pullfrog.yml
@@ -0,0 +1,49 @@
+# PULLFROG ACTION — DO NOT EDIT EXCEPT WHERE INDICATED
+name: Pullfrog
+run-name: ${{ inputs.name || github.workflow }}
+on:
+  workflow_dispatch:
+    inputs:
+      prompt:
+        type: string
+        description: Agent prompt
+      name:
+        type: string
+        description: Run name
+
+permissions:
+  contents: read
+
+jobs:
+  pullfrog:
+    runs-on: warp-ubuntu-latest-x64-4x
+    permissions:
+      id-token: write
+      contents: read
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v6.1.0
+        with:
+          fetch-depth: 1
+          persist-credentials: false
+
+      # Restate: give the agent a build environment matching CI
+      - name: Set up JDK 25
+        uses: actions/setup-java@v5.7.0
+        with:
+          java-version: '25'
+          distribution: 'temurin'
+      - name: Setup Gradle
+        uses: gradle/actions/setup-gradle@v6.4.1
+      - name: Install Rust toolchain
+        uses: actions-rust-lang/setup-rust-toolchain@v1.17.0
+        with:
+          cache-workspaces: sdk-core/src/main/rust
+
+      - name: Run agent
+        uses: pullfrog/pullfrog@v0.1.110
+        with:
+          prompt: ${{ inputs.prompt }}
+        env:
+          ANTHROPIC_API_KEY: ${{ secrets.ANTHROPIC_API_KEY }}
+          OPENAI_API_KEY: ${{ secrets.OPENAI_API_KEY }}