pullfrog 0.1.100 → 0.1.102

package/dist/mcp/reviewComments.d.ts

@@ -1,6 +1,6 @@
 import type { Octokit } from "@octokit/rest";
 import type { ToolContext } from "./server.ts";
-export declare const REVIEW_THREADS_QUERY = "\nquery ($owner: String!, $name: String!, $prNumber: Int!, $cursor: String) {\n  repository(owner: $owner, name: $name) {\n    pullRequest(number: $prNumber) {\n      reviewThreads(first: 100, after: $cursor) {\n        pageInfo { hasNextPage endCursor }\n        nodes {\n          id\n          path\n          line\n          startLine\n          diffSide\n          isResolved\n          isOutdated\n          comments(first: 50) {\n            nodes {\n              fullDatabaseId\n              body\n              bodyHTML\n              createdAt\n              diffHunk\n              line\n              startLine\n              originalLine\n              originalStartLine\n              author { login }\n              pullRequestReview {\n                databaseId\n                author { login }\n              }\n              reactionGroups {\n                content\n                reactors(first: 10) {\n                  nodes {\n                    ... on Actor { login }\n                  }\n                }\n              }\n            }\n          }\n        }\n      }\n    }\n  }\n}\n";
+export declare const REVIEW_THREADS_QUERY = "\nquery ($owner: String!, $name: String!, $prNumber: Int!, $cursor: String) {\n  repository(owner: $owner, name: $name) {\n    pullRequest(number: $prNumber) {\n      reviewThreads(first: 100, after: $cursor) {\n        pageInfo { hasNextPage endCursor }\n        nodes {\n          id\n          path\n          line\n          startLine\n          diffSide\n          isResolved\n          isOutdated\n          comments(first: 50) {\n            nodes {\n              fullDatabaseId\n              body\n              bodyHTML\n              createdAt\n              diffHunk\n              line\n              startLine\n              originalLine\n              originalStartLine\n              author { login __typename }\n              pullRequestReview {\n                databaseId\n                author { login }\n              }\n              reactionGroups {\n                content\n                reactors(first: 10) {\n                  nodes {\n                    ... on Actor { login }\n                  }\n                }\n              }\n            }\n          }\n        }\n      }\n    }\n  }\n}\n";
 export type ReviewThreadComment = {
     fullDatabaseId: string | null;
     body: string;
@@ -13,6 +13,7 @@ export type ReviewThreadComment = {
     originalStartLine: number | null;
     author: {
         login: string;
+        __typename: string;
     } | null;
     pullRequestReview: {
         databaseId: number | null;
@@ -141,6 +142,8 @@ interface GetReviewDataInput {
      * to the dispatching review exactly as before.
      */
     addressScope?: "all" | "mentions" | undefined;
+    /** whether this run can push, which is what makes a comment's author matter */
+    canPush: boolean;
     tmpdir: string;
     githubToken: string;
 }

package/dist/mcp/shell.d.ts

@@ -9,6 +9,7 @@ export declare const ShellParams: import("arktype/internal/variants/object.ts").
 export type SandboxMethod = "unshare" | "sudo-unshare" | "userns-unshare" | "none";
 /** get the current sandbox method (for testing/diagnostics) */
 export declare function getSandboxMethod(): SandboxMethod;
+export declare function resolveRepoRoot(): string;
 /** chars of shell output kept inline in the agent reply. anything past this
  * blows the agent's context budget on commands that dump big logs (test
  * runners, build tools, grep on large trees), so the overflow is spilled

package/dist/models.d.ts

@@ -354,6 +354,10 @@ export declare function resolveModelRung(params: {
     useOpenRouter: boolean;
 }): string | undefined;
 export declare const DEFAULT_PROXY_MODEL: string;
+export declare const TRIAL_PROXY_MODEL: string;
+export declare const TRIAL_PROXY_DISPLAY_NAME: string;
+/** lifetime cap, in USD, on the model usage Pullfrog funds for an account's trial runs. */
+export declare const TRIAL_FUNDED_USD_LIMIT = 10;
 /**
  * the models Pullfrog is willing to fund on the OSS program. an accepted OSS
  * repo may pick any of these and run-context honors the pick; anything else

package/dist/toolState.d.ts

@@ -1,6 +1,7 @@
 import type { AgentCredential, AgentUsage } from "./agents/shared.ts";
 import type { PrepResult } from "./prep/types.ts";
 import type { AgentDiagnostic } from "./utils/agentHangReport.ts";
+import type { ModelClamp } from "./utils/buildPullfrogFooter.ts";
 import type { DiffCoverageState } from "./utils/diffCoverage.ts";
 import { type ProgressComment, type ProgressCommentType } from "./utils/progressComment.ts";
 import type { TodoTracker } from "./utils/todoTracking.ts";
@@ -134,16 +135,14 @@ export interface ToolState {
     xrepoLearningsFilePath?: string;
     xrepoLearningsSeed?: string;
     xrepoLearningsPersistAttempted?: boolean;
+    learningsLocked?: boolean;
     output?: string | undefined;
     usageEntries: AgentUsage[];
     model?: string | undefined;
     agent?: string | undefined;
     credential?: AgentCredential | undefined;
     unselectedProxyDefault?: boolean | undefined;
-    modelClamped?: {
-        from: string;
-        reason: "card" | "noRouterPath" | "oss" | "trial";
-    } | undefined;
+    modelClamped?: ModelClamp | undefined;
     oss?: boolean | undefined;
     todoTracker?: TodoTracker | undefined;
     agentDiagnostic?: AgentDiagnostic | undefined;

package/dist/utils/agentHangReport.d.ts

@@ -33,19 +33,15 @@ export type AgentDiagnostic = {
     sawModelOutput: boolean;
 };
 /**
- * Build a user-facing markdown body for an agent hang or failure.
+ * The body for a run the activity watchdog ended. Rendered into both the PR
+ * progress comment and the job summary; `null` when the harness left no
+ * diagnostic, so the caller falls back to its bare-error rendering.
  *
- * Rendered into both the PR progress comment and the GitHub Actions job
- * summary. Returns `null` when no diagnostic is available, which signals to
- * the caller to fall back to its bare-error rendering.
- *
- * `errorMessage` is the underlying timer / spawn reject string (e.g.
- * `activity timeout: no output for 301s`). The idle seconds are parsed out
- * of it for the hang explanation — total runtime would overstate the stall
- * for runs that streamed for a long time before going quiet.
+ * The headline says whose side went quiet, because a silent run is nearly
+ * always the provider's and "Pullfrog stalled" read as ours. The agent's last
+ * output goes in a collapsed section for whoever wants it.
  */
 export declare function formatAgentHangBody(input: {
     diagnostic: AgentDiagnostic | undefined;
-    isHang: boolean;
     errorMessage: string;
 }): string | null;

package/dist/utils/apiKeys.d.ts

@@ -1,9 +1,10 @@
+import { type FailureLink } from "./failureBody.ts";
 import type { CredentialCandidate } from "./subscriptionCredentials.ts";
 import type { ProbeVerdict } from "./subscriptionProbe.ts";
 /** shared sentence in the four `resolveSlug` routing-slug throws. */
-export declare const BYOK_SLUG_MARKER = "env var is required when the model is set to";
+export declare const BYOK_SLUG_MARKER = "must be set when the model is";
 /** shared sentence in the four `validate*Setup` throws. */
-export declare const BYOK_CONFIG_MARKER = "selected but required configuration is missing:";
+export declare const BYOK_CONFIG_MARKER = "is missing required settings:";
 /**
  * A BYOK provider setup is incomplete, at either of the two points that catch it:
  * `resolveSlug` refusing a routing slug whose backing env var is unset, and the
@@ -28,14 +29,35 @@ export declare function isByokSetupError(text: string): boolean;
  * `MODEL_ACCESS_MARKER`) because blaming the user for a transient fetch failure
  * on our side is the wrong CTA — their key is configured and still stored.
  */
-export declare const SECRETS_UNAVAILABLE_MARKER = "couldn't load your Pullfrog secrets";
+export declare const SECRETS_UNAVAILABLE_MARKER = "couldn't load your stored secrets";
 /**
  * marker for the "your Router wallet is empty AND you have no provider key"
  * body. its own marker rather than the missing-key one because
  * `formatApiKeyErrorSummary` rebuilds any body carrying `MISSING_KEY_MARKER`
  * that doesn't start with it, which would silently discard this copy.
  */
-export declare const ROUTER_UNFUNDED_MARKER = "your Pullfrog Router balance is empty";
+export declare const ROUTER_UNFUNDED_MARKER = "Your Pullfrog Router balance is empty";
+/**
+ * marker for the body a trial account gets once its funded credits are spent:
+ * at the late fallback, or when the funded key runs out mid-run. Without it the
+ * first is told to add an API key and the second that a Router wallet it never
+ * had went negative, and neither mentions the trial.
+ */
+export declare const TRIAL_SPENT_MARKER = "reached the limit of your free trial credits";
+export declare function buildTrialSpentError(params: {
+    owner: string;
+}): string;
+/** the repo's console page: its model, instructions and scripts. */
+export declare function repoConsoleUrl(repo: {
+    owner: string;
+    name: string;
+}): string;
+export declare function pickModelLink(repo: {
+    owner: string;
+    name: string;
+}): FailureLink;
+/** the account console's billing card: provider keys, subscriptions and Router credit. */
+export declare function providerLink(owner: string): FailureLink;
 /**
  * marker for a credential the provider explicitly REJECTED before the agent
  * started. needs a verbatim guard for the same reason as its three siblings,
@@ -76,6 +98,7 @@ export declare const CREDENTIAL_POOL_REFUSED_MARKER = "No configured credential
  */
 export declare class NoUsableCredentialError extends Error {
 }
+export declare function buildSecretsUnavailableError(): string;
 /**
  * Validate that the resolved model can actually be served by the chosen
  * agent. For routing slugs (Bedrock / Vertex) the auth shape is multi-var
@@ -160,6 +183,8 @@ export declare function isMalformedKeyError(text: string): boolean;
  * Anthropic entitlement denial for Claude Pro/Max subscription auth (#1072):
  * an org admin turned off Claude Code subscription access. no credential the
  * user controls fixes it, so it gets its own copy instead of the re-auth CTA.
+ * The probe sees the same denial as a 403, `OAuth authentication is currently
+ * not allowed for this organization`, which used to be answered "sign in again".
  */
 export declare function isClaudeSubscriptionDisabledError(text: string): boolean;
 /**
@@ -178,6 +203,15 @@ export declare function isClaudeSubscriptionDisabledError(text: string): boolean
  */
 export declare function isKimiPlanTierError(text: string): boolean;
 export declare function isClaudeSessionLimitError(text: string): boolean;
+/** the subscription that serves `model`'s provider, named by the env var that carries it. */
+export declare function subscriptionFor(model: string | undefined): {
+    label: string;
+    command: string;
+    provider: string;
+    env: string;
+} | undefined;
+/** a provider id's display name, e.g. `openai` → OpenAI. */
+export declare function providerDisplayName(id: string | null | undefined): string | undefined;
 /**
  * The provider rejected a credential we checked before the agent started, and
  * nothing else on the account can serve this run. Names the credential and the
@@ -201,8 +235,8 @@ export type RefusedCredential = {
 };
 /**
  * The credential pool probed every credential configured for the model and
- * none can serve it. One bullet per credential: the probe's own verdict, quoted,
- * plus the remedy its kind and status call for — never inferred from the prose.
+ * none can serve it. One sentence per credential, from its kind and status —
+ * never inferred from the prose — with the probe's own verdicts collapsed below.
  */
 export declare function buildCredentialPoolRefusedError(params: {
     model: string;
@@ -213,10 +247,16 @@ export declare function buildCredentialPoolRefusedError(params: {
 /**
  * Friendly Markdown summary for both the missing-key and invalid-key cases.
  * Used in the catch / result-failure paths in `main.ts` to overwrite the raw
- * agent error before it's posted to the PR progress comment.
+ * agent error before it's posted to the PR progress comment. `model` names the
+ * subscription in play — guessing it from the env once told a GPT run its Claude
+ * subscription was rejected — and `output`, the provider's own words, is
+ * collapsed under the copy.
  */
 export declare function formatApiKeyErrorSummary(params: {
     owner: string;
     name: string;
     raw: string;
+    model?: string | undefined;
+    credential?: string | undefined;
+    output?: string | undefined;
 }): string;

package/dist/utils/billingErrors.d.ts

@@ -41,7 +41,9 @@ export declare class BillingError extends Error {
  * GH Actions apply whatever retry policy the workflow has configured.
  */
 export declare class TransientError extends Error {
-    constructor(message: string);
+    /** the customer-facing follow-up to `message`, which is the headline. */
+    detail: string;
+    constructor(message: string, detail?: string);
 }
 /**
  * Why the org commercial gate refused a run (billing model v2), resolved by
@@ -68,7 +70,7 @@ export declare function commercialPaywallBody(params: {
 /**
  * commercial-gate copy for action runs, linked to the account billing card.
  *
- * if this fires on a `pullfrog/preview-*` repo it is an infrastructure bug, not
+ * if this fires on a `PullfrogDev/preview-*` repo it is an infrastructure bug, not
  * a billing state — those repos have no real billing state to refuse. the
  * original cause was the gate comparing the subscription's originating host
  * with strict equality, which no preview could satisfy against a cloned
@@ -114,6 +116,7 @@ export declare function formatBillingErrorSummary(error: BillingError, owner: st
 /**
  * Render a TransientError as user-facing markdown. Distinct framing from
  * BillingError so the user doesn't read an alarm and assume their card
- * failed, this branch is "our fault, retry shortly", not theirs.
+ * failed, this branch is "our fault, retry shortly", not theirs. Both parts are
+ * ours and customer-ready; the server's own wording goes to the log.
  */
-export declare function formatTransientErrorSummary(error: TransientError, owner: string): string;
+export declare function formatTransientErrorSummary(error: TransientError): string;

package/dist/utils/buildPullfrogFooter.d.ts

@@ -1,4 +1,18 @@
 export declare const PULLFROG_DIVIDER = "<!-- PULLFROG_DIVIDER_DO_NOT_REMOVE_PLZ -->";
+/**
+ * A run whose configured model was swapped for one Pullfrog could fund. `trial`
+ * carries the account's remaining trial credits, as run-context counted them
+ * when the run started, so the disclosure can say how much is left; undefined
+ * when the server predates the figure.
+ */
+export type ModelClamp = {
+    from: string;
+    reason: "card" | "noRouterPath" | "oss";
+} | {
+    from: string;
+    reason: "trial";
+    creditsLeftUsd: number | undefined;
+};
 export interface WorkflowRunFooterInfo {
     owner: string;
     repo: string;
@@ -27,10 +41,7 @@ export interface BuildPullfrogFooterParams {
      * provider-key nudge — so the downgrade is visible rather than silently
      * presenting Kimi as the pick.
      */
-    clamped?: {
-        from: string;
-        reason: "card" | "noRouterPath" | "oss" | "trial";
-    } | undefined;
+    clamped?: ModelClamp | undefined;
     /**
      * true when the run used the default proxy model only because no model was
      * selected (Router billing + "auto"). the footer appends a note nudging the
@@ -47,6 +58,8 @@ export interface BuildPullfrogFooterParams {
     /** repo owner, used to deep-link the trial disclosure at that account's own
      * console rather than the generic landing page. */
     owner?: string | undefined;
+    /** a failure comment: no 𝕏 link, model nudge or trial disclosure under an error. */
+    failed?: boolean | undefined;
 }
 /**
  * build a pullfrog footer with configurable parts

package/dist/utils/errorReport.d.ts

@@ -2,7 +2,6 @@ import { type ToolState } from "../toolState.ts";
 interface ReportErrorParams {
     toolState: ToolState;
     error: string;
-    title?: string;
     /**
      * When the run has no pre-existing progress comment to update (silent
      * IncrementalReview / pull_request_synchronize, mode-less polls), create

package/dist/utils/failureBody.d.ts

@@ -0,0 +1,27 @@
+export type FailureLink = {
+    label: string;
+    url: string;
+};
+/**
+ * The one shape every failure comment takes: a bold, sentence-case headline that
+ * names the cause, then at most a short paragraph or a list of two or more, then
+ * the error or the tool's own output, then at most two links. Built here rather
+ * than per message so those rules hold for every message at once.
+ *
+ * `error` is shown open, for when the error IS the explanation (an unrecognized
+ * failure). `details` is collapsed, for output that backs up a headline we
+ * already wrote. Free of imports: `billingErrors.ts` reaches client bundles
+ * through `action/internal`.
+ */
+export declare function renderFailure(params: {
+    headline: string;
+    detail?: string | undefined;
+    list?: [string, string, ...string[]] | undefined;
+    error?: string | undefined;
+    details?: {
+        summary: string;
+        text: string;
+    } | undefined;
+    links?: [] | [FailureLink] | [FailureLink, FailureLink] | undefined;
+}): string;
+export declare const DISCORD_LINK: FailureLink;

package/dist/utils/github.d.ts

@@ -75,7 +75,7 @@ export declare function fetchIdTokenFromStash(creds: OidcCredentials): Promise<s
  * own retry still re-mints. Mid-run refreshes take the stashed-credentials path
  * (`opts.oidc`) and deliberately bypass this.
  */
-export declare const mintIdToken: (() => Promise<string>) & yes.AttemptMethod<[], string> & yes.CacheMethods<undefined, undefined, () => Promise<string>>;
+export declare const mintIdToken: yes.Cached<() => Promise<string>>;
 /**
  * ensure a GitHub token is available in the environment.
  *

package/dist/utils/leapingComment.d.ts

@@ -9,3 +9,12 @@
  */
 export declare const LEAPING_INTO_ACTION_PREFIX = "Leaping into action";
 export declare function isLeapingIntoActionCommentBody(body: string): boolean;
+/** the spinner on a to-do list's in-progress item. */
+export declare const TODO_SPINNER_URL = "https://uploads.pullfrog.com/Progress%20Indicator.gif";
+/**
+ * A live to-do list: one item still carries the spinner. Every finished body — a
+ * final summary, a salvaged answer, an error report — renders with in-progress
+ * items completed, so the spinner is only ever on a list whose run is still going
+ * or died without writing again.
+ */
+export declare function isLiveChecklistCommentBody(body: string): boolean;

package/dist/utils/payload.d.ts

@@ -39,6 +39,11 @@ export declare const JsonPayload: import("arktype/internal/variants/object.ts").
     generateSummary?: boolean | undefined;
     codexArm?: boolean | undefined;
 }, {}>;
+/**
+ * a run steered by someone resolved as unable to push here. an absent permission
+ * is a run no outside author steers (CI fix, a review bot on Pullfrog's own PR).
+ */
+export declare function isOutsideAuthor(event: PayloadEvent): boolean;
 export declare const Inputs: import("arktype/internal/variants/object.ts").ObjectType<{
     prompt?: string | undefined;
     prompt_file?: string | undefined;

package/dist/utils/proxy.d.ts

@@ -61,6 +61,7 @@ export declare function runProxyResolution(ctx: {
 export declare function resolveTrialFallback(ctx: {
     payload: ResolvedPayload;
     configuredModel: string | undefined;
+    creditsLeftUsd: number | undefined;
     oidcCredentials: OidcCredentials | null;
     repo: {
         owner: string;

package/dist/utils/roleMirror.d.ts

@@ -42,8 +42,9 @@ import type { GitHubAppPermissions } from "./github.ts";
  *   wiki/autonomous-maintenance.md's "no injected instruction can cause a
  *   merge" still true. Legitimate pushes go through `push_branch`, which
  *   enforces the branch rules.
- * - `checks` is absent for the same class of reason: no human role grants it,
- *   and it would let the agent post its own passing `pullfrog-approval` status
+ * - `checks` is `read`, never `write`, for the same class of reason: every role
+ *   can read a PR's check runs, but no human role can write one, and write would
+ *   let the agent post its own passing `pullfrog-approval` status
  *   (see wiki/review-approval.md).
  * - Every qualifying role therefore receives the SAME set. The role decides
  *   whether a token is minted at all, not how wide it is — `admin`, `maintain`

package/dist/utils/runContext.d.ts

@@ -100,6 +100,9 @@ export interface RunContext {
      * run — the runner may mint a subsidized efficient-tier key if, and only if,
      * its own key search comes up dry. see the run-context route. */
     trialFallback?: boolean | undefined;
+    /** the trial account's remaining funded credits, in USD, when it is inside its
+     * trial at all. zero or below means the credits are used up. */
+    trialCreditsLeftUsd?: number | undefined;
 }
 /**
  * fetch run context from Pullfrog API

package/dist/utils/runContextData.d.ts

@@ -29,6 +29,8 @@ export interface RunContextData {
      * own key search comes up dry. a permission, not a routing decision — the
      * server cannot see workflow `env:` keys. see `RunContext.trialFallback`. */
     trialFallback?: boolean | undefined;
+    /** see `RunContext.trialCreditsLeftUsd`. */
+    trialCreditsLeftUsd?: number | undefined;
 }
 interface ResolveRunContextDataParams {
     octokit: OctokitWithPlugins;

package/dist/utils/runErrorRenderer.d.ts

@@ -1,99 +1,67 @@
 /**
- * Classify + render the error thrown out of the main run try-block into a
- * pair of user-facing markdown bodies — one for the GitHub Actions job
- * summary tab, one for the PR progress comment.
+ * Classify + render the error thrown out of the main run try-block into the
+ * markdown the user reads — the PR progress comment, and the same body under a
+ * `### ❌ Pullfrog failed` banner in the GitHub Actions job summary.
  *
- * Classifications, in dispatch order (first match wins; the api-key
- * branch additionally folds in the activity-timeout hang body as a
- * sub-source so a hang masking an api-key error still surfaces the api-key
- * CTA):
+ * Every body names its cause, so none collapses to a bare "Run failed.": an
+ * error nothing below recognizes is shown as-is under "An unrecognized error
+ * occurred." The shape is `renderFailure`'s, so the copy rules hold for all of
+ * them — see `failureBody.ts`.
  *
- *   1. `BillingError` — either the proxy-token mint already threw one (402
- *      handled inline) or the agent runtime surfaced an OpenRouter
- *      "key budget exhausted" string mid-run. Both render via
- *      `formatBillingErrorSummary` so the user sees actionable copy.
+ * Classifications, in dispatch order (first match wins):
  *
- *   1a. Pre-rendered bodies — a throw site that already built the markdown
+ *   1. Trial credits — a trial key that ran out mid-run is the account's free
+ *      credits running out, never the Router wallet the same wire text means
+ *      on a Router run.
+ *
+ *   1a. `BillingError` — the agent runtime surfaced an OpenRouter "key budget
+ *      exhausted" string mid-run on a Router run. Same copy as a proxy-token 402.
+ *
+ *   1b. Pre-rendered bodies — a throw site that already built the markdown
  *      (`MODEL_ACCESS_MARKER`, `SECRETS_UNAVAILABLE_MARKER`,
- *      `ROUTER_UNFUNDED_MARKER`, `CREDENTIAL_REJECTED_MARKER`,
- *      `CREDENTIAL_POOL_REFUSED_MARKER`) passes through verbatim on both surfaces.
+ *      `ROUTER_UNFUNDED_MARKER`, `TRIAL_SPENT_MARKER`,
+ *      `CREDENTIAL_REJECTED_MARKER`, `CREDENTIAL_POOL_REFUSED_MARKER`) passes
+ *      through verbatim.
  *
  *   2. BYOK provider billing-exhausted (#835) — DeepSeek "Insufficient
  *      Balance", Anthropic "credit balance is too low", OpenCode Zen
- *      `CreditsError`, Gemini "spending cap". Checked before api-key auth
- *      because billing-exhausted responses often carry 401 status codes
- *      that `isApiKeyAuthError` would otherwise mis-classify.
+ *      `CreditsError`, Gemini "spending cap", a ChatGPT workspace out of
+ *      credits. Checked before api-key auth because billing-exhausted responses
+ *      often carry 401 status codes that `isApiKeyAuthError` would otherwise
+ *      mis-classify.
  *
  *   2a. Provider usage limit (#1474) — a capped subscription window or a
  *      configured workspace limit; "wait or raise it", never "top up".
  *
  *   3. API-key auth error — `isApiKeyAuthError` sniffs the raw error string
  *      (or the activity-timeout hang body when present, since that's where
- *      the underlying provider error often lands); `formatApiKeyErrorSummary`
- *      renders provider + console-link copy.
- *
- *   4. ProviderModelNotFoundError — configured model id not in the OpenCode
- *      catalog (opencode ≥1.18 words it `Model not found: <id>`, #1470);
- *      renders a nudge to pick a different model.
- *
- *   4a. No-provider-available (#1077) — the model IS in the catalog but the
- *      provider declines to route it on this account's plan (OpenCode Zen's
- *      own refusal string). Same "pick another model" CTA, different reason.
+ *      the underlying provider error often lands).
  *
- *   4a'. Zen free-tier gate (#1377) — Zen 403s a free-tier request whose tool
- *      list is missing a built-in it expects. The harness keeps `bash` listed,
- *      but opencode's auto-compaction request carries no tools, so a long
- *      free-Zen run can still die mid-flight on the raw upstream string.
- *
- *   4b. Context-window overflow (#1116) — terminal `Prompt is too long` /
- *      `maximum context length is N tokens`. Actionable, so it renders on
- *      both surfaces rather than collapsing to the one-line comment.
- *
- *   4b'. Run time limit — the agent was still working when the run's own
- *      timeout fired. Actionable (raise the limit), so both surfaces.
+ *   4. Model not in OpenCode's catalog (opencode ≥1.18 words it `Model not
+ *      found: <id>`, #1470), a provider declining the model (#1077), Zen's
+ *      free-tier gate (#1377), context overflow (#1116), the run's time limit,
+ *      the repo's stop script, and an agent that never posted its review.
  *
  *   4c. Transient upstream failure (#1173) — Anthropic `529 Overloaded`,
  *      OpenRouter `provider_unavailable` / `timeout`, Zen `Streaming response
- *      failed: [5xx]`. Last of the classified branches so every more specific
- *      one wins first. Renders on both surfaces: the remedy is re-triggering,
- *      which the user can only know if we say so.
+ *      failed: [5xx]`, Codex's model at capacity. Last of the classified
+ *      branches so every more specific one wins first.
  *
- *   5. Activity-timeout hang — `errorMessage` starts with
- *      `"activity timeout"` or `"agent still pending"` AND none of the
- *      above matched. The harness keeps structured diagnostic state on
- *      `toolState.agentDiagnostic`; `formatAgentHangBody` renders that into
- *      the job summary. The PR comment keeps that same body whenever the hang
- *      is EXPLAINED — a classified provider error (#778, #1183) or a provider
- *      that never returned a first token — and otherwise collapses to a
- *      one-line `**Run failed.** [View the logs →]`, because watchdog jargon,
- *      event counts and a benign stderr tail are operator-grade detail that
- *      only alarm the average user.
+ *   5. Activity-timeout hang — `formatAgentHangBody` says whose side went
+ *      quiet, with the agent's last output collapsed under it.
  *
  *   6. Unclassified provider error (#1474) — `errorMessage` starts with
- *      `provider error: `. opencode prefixes every provider-side turn failure
- *      with the provider's text; claude-code (a zero-event exit) and codex (no
- *      turn error, no stderr) prefix only our classifier label. Either names
- *      something the user can act on, so both surfaces get a lead line plus the
- *      raw text in a fenced block.
+ *      `provider error: `: the provider's own text, shown under a lead line.
  *
- *   7. Default — the job summary gets a plain-English lead sentence plus the
- *      raw error in a fenced code block under the `### ❌ Pullfrog failed`
- *      banner; the PR comment collapses to the same one-line logs link as
- *      the hang case, since the raw internal string helps nobody on the PR.
- *
- * Net: the actionable classifications (billing, usage limit, API-key,
- * model-not-found, no-provider-available, context-overflow, run time limit,
- * transient-upstream, unclassified provider error) render identical bodies on
- * both surfaces; the non-actionable ones (unexplained hang, generic) keep the
- * forensics in the Actions job summary and show a calm one-liner in the PR
- * comment, whose footer already carries Pullfrog branding + rerun links.
+ *   7. Default — "An unrecognized error occurred." over the error itself.
  */
+import type { AgentCredential } from "../agents/shared.ts";
 import type { AgentDiagnostic } from "./agentHangReport.ts";
 export type RenderedRunError = {
     summary: string;
     comment: string;
 };
-export declare function renderRunError(input: {
+type RenderRunErrorInput = {
     errorMessage: string;
     repo: {
         owner: string;
@@ -104,4 +72,11 @@ export declare function renderRunError(input: {
      * the user's own provider credential. `payload.proxyModel` at both call
      * sites. */
     routerActive: boolean;
-}): RenderedRunError;
+    /** the model that ran: it names the provider, and the subscription when one is in play. */
+    model?: string | undefined;
+    credential?: AgentCredential | undefined;
+    /** the run was served by the account's free trial credits. */
+    trial?: boolean | undefined;
+};
+export declare function renderRunError(input: RenderRunErrorInput): RenderedRunError;
+export {};

package/dist/utils/secretCommands.d.ts

@@ -1,19 +1,10 @@
+export declare function maskSecret(value: string): void;
 /**
- * `@actions/core` workflow commands that carry a credential, gated on actually
- * running under a runner.
- *
- * Off a runner nothing consumes these commands and `@actions/core` writes the
- * raw value to stdout instead — `setSecret` always, `saveState` / `setOutput`
- * whenever `GITHUB_STATE` / `GITHUB_OUTPUT` are unset. That is a plaintext
- * credential on whatever terminal is running the action, which is how an OpenAI
- * key reached local Codex transcripts and was disabled (2026-09).
- *
- * Route every credential-bearing call through here instead of calling `core`
- * directly — `nub run check:secret-commands` enforces it. Non-credential output
- * (the agent's own `result` text) stays ungated, because the test harness reads
- * it back through `GITHUB_OUTPUT` on a host with no runner.
+ * Every value `maskSecret` registered, replaced in `text` as the runner would in
+ * a log: whole, then line by line. Parts under 8 characters are skipped, or the
+ * `{` and `}` lines of a JSON key would blank every brace in the comment.
  */
-export declare function maskSecret(value: string): void;
+export declare function redactSecrets(text: string): string;
 /** @see maskSecret — same gate, for state the `post:` hook reads back. */
 export declare function saveSecretState(name: string, value: string): void;
 /** @see maskSecret — same gate, for a step output carrying a credential. */

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "pullfrog",
-  "version": "0.1.100",
+  "version": "0.1.102",
   "cliContractVersion": "1",
   "type": "module",
   "bin": {
@@ -27,12 +27,12 @@
     "prepare": "cd .. && husky"
   },
   "devDependencies": {
-    "@actions/core": "^1.11.1",
+    "@actions/core": "^3.0.1",
     "@anthropic-ai/claude-code": "2.1.293",
     "@ark/fs": "0.56.0",
     "@ark/util": "0.56.0",
     "@clack/prompts": "^1.2.0",
-    "@modelcontextprotocol/sdk": "^1.26.0",
+    "@modelcontextprotocol/sdk": "^1.32.0",
     "@octokit/plugin-throttling": "^11.0.3",
     "@octokit/rest": "^22.0.0",
     "@octokit/webhooks-types": "^7.6.1",
@@ -40,7 +40,7 @@
     "@openai/codex-sdk": "0.159.2",
     "@opencode-ai/sdk": "1.18.29",
     "@standard-schema/spec": "1.1.0",
-    "@toon-format/toon": "^1.0.0",
+    "@toon-format/toon": "^2.3.1",
     "@types/node": "^24.7.2",
     "@types/semver": "^7.7.1",
     "@types/turndown": "^5.0.5",
@@ -53,7 +53,7 @@
     "esbuild": "^0.25.9",
     "execa": "^9.6.0",
     "fastmcp": "^3.34.0",
-    "file-type": "^21.3.0",
+    "file-type": "^21.3.2",
     "husky": "^9.0.0",
     "opencode-ai": "1.18.29",
     "package-manager-detector": "^1.6.0",
@@ -64,10 +64,10 @@
     "turndown": "^7.2.0",
     "typescript": "^5.9.3",
     "undici": "^7.22.0",
-    "vitest": "^4.0.17",
-    "yaml": "^2.8.2",
-    "yes": "0.2.4",
-    "zod": "4.3.6"
+    "vitest": "^4.1.12",
+    "yaml": "^2.8.3",
+    "yes": "0.2.7",
+    "zod": "4.6.6"
   },
   "repository": {
     "type": "git",