pullfrog 0.1.61 → 0.1.63

package/dist/cli.mjs

@@ -107293,6 +107293,9 @@ function isProviderNoRoutableEndpoints(text) {
 function isOpenRouterKeyLimitExceeded(text) {
   return /Key limit exceeded \(total limit\)/i.test(text) || /openrouter\.ai\/[^\s"')]*\/keys\//i.test(text);
 }
+function isProviderMissingCredential(text) {
+  return /API key is missing\. Pass it using the/i.test(text) || /Missing Authentication header/i.test(text);
+}
 function isTransientUpstreamError(text) {
   return /API Error:\s*5\d\d/i.test(text) || /\bOverloaded\b/.test(text) || /"error_type"\s*:\s*"(?:provider_unavailable|timeout)"/i.test(text) || /Streaming response failed:\s*\[5\d\d\]/i.test(text);
 }
@@ -107355,7 +107358,7 @@ var import_semver = __toESM(require_semver2(), 1);
 // package.json
 var package_default = {
   name: "pullfrog",
-  version: "0.1.61",
+  version: "0.1.63",
   type: "module",
   bin: {
     pullfrog: "dist/cli.mjs",
@@ -108446,7 +108449,6 @@ function getUnsubmittedReview(toolState, expectsReviewOutput2 = toolState.hadPro
 }
 function expectsReviewOutput(ctx) {
   if (ctx.toolState.hadProgressComment) return true;
-  if (ctx.payload.progressComments) return false;
   return ctx.payload.event.silent !== true && ctx.payload.event.issue_number !== void 0;
 }
 function buildStopHookPrompt(failure2) {
@@ -108661,6 +108663,7 @@ async function runPostRunRetryLoop(params) {
       result = preResume;
       break;
     }
+    if (onlySummaryStale) result = { ...result, output: preResume.output || result.output };
     gateResumeCount++;
   }
   if (gateResumeCount > 0 && result.success && hasPostRunIssues(finalIssues)) {
@@ -116005,24 +116008,23 @@ async function installOpencodeCli(params) {
 var AUTO_SELECT_WARNING = "select a model explicitly in the Pullfrog console (https://pullfrog.com/console) to avoid this \u2014 if the picker is locked, this run had no Pullfrog Router funding: add a card or top up your credit.";
 function autoSelectModel() {
   const authorized2 = getAuthorizedModels();
-  if (authorized2.size > 0) {
-    const servable = (a2) => {
-      if (!authorized2.has(a2.resolve)) return false;
-      const envVars = getModelEnvVars(a2.resolve);
-      return envVars.length === 0 || envVars.some((name) => process.env[name]);
-    };
-    const match3 = modelAliases.find((a2) => !a2.hidden && !a2.fallback && a2.preferred && servable(a2)) ?? modelAliases.find((a2) => !a2.hidden && !a2.fallback && servable(a2));
-    if (match3) {
-      log2.info(
-        `\xBB model: ${match3.resolve} (auto-selected${match3.preferred ? " \u2014 preferred" : ""} curated match)`
-      );
-      log2.warning(`\xBB model auto-selected. ${AUTO_SELECT_WARNING}`);
-      return match3.resolve;
-    }
+  const selectable = modelAliases.filter((a2) => !a2.hidden && !a2.fallback && !a2.routing);
+  const servable = selectable.filter((a2) => {
+    const envVars = getModelEnvVars(a2.resolve);
+    return envVars.length === 0 || envVars.some((name) => process.env[name]);
+  });
+  const pick4 = (list) => list.find((a2) => a2.preferred) ?? list[0];
+  const match3 = pick4(servable.filter((a2) => authorized2.has(a2.resolve))) ?? pick4(servable);
+  if (match3) {
     log2.info(
-      `\xBB opencode has ${authorized2.size} models but none match curated aliases \u2014 letting OpenCode auto-select`
+      `\xBB model: ${match3.resolve} (auto-selected${match3.preferred ? " \u2014 preferred" : ""} curated match)`
     );
+    log2.warning(`\xBB model auto-selected. ${AUTO_SELECT_WARNING}`);
+    return match3.resolve;
   }
+  log2.info(
+    `\xBB opencode has ${authorized2.size} models but none match curated aliases and none hold a credential \u2014 letting OpenCode auto-select: ${[...authorized2].join(", ")}`
+  );
   log2.warning(`\xBB no model resolved. letting OpenCode auto-select. ${AUTO_SELECT_WARNING}`);
   return void 0;
 }
@@ -116235,7 +116237,7 @@ function isModelOutput(ctx, part) {
 async function dispatchEvent(ctx, event) {
   if (event.type === "message.part.updated") {
     ctx.lastEventAt = performance7.now();
-    if (isModelOutput(ctx, event.properties.part)) ctx.sawModelOutput = true;
+    if (isModelOutput(ctx, event.properties.part)) ctx.diagnostic.sawModelOutput = true;
     await onPartUpdated(ctx, event.properties.part);
     return;
   }
@@ -116381,7 +116383,8 @@ async function runPromptTurn(ctx, params) {
   const turn = ctx.currentTurn;
   const part = { type: "text", text: params.text };
   ctx.promptMessageID = void 0;
-  ctx.sawModelOutput = false;
+  ctx.diagnostic.sawModelOutput = false;
+  ctx.diagnostic.idleSec = void 0;
   let assistant;
   let returnedParts;
   let networkError = null;
@@ -116441,7 +116444,7 @@ async function runPromptTurn(ctx, params) {
       usage
     };
   }
-  if (!ctx.sawModelOutput && finalText.trim().length === 0 && !usage) {
+  if (!ctx.diagnostic.sawModelOutput && finalText.trim().length === 0 && !usage) {
     return {
       success: false,
       output: finalText,
@@ -116566,19 +116569,18 @@ function startInnerActivityWatchdog(params) {
   const id = setInterval(() => {
     if (fired) return;
     const idleMs = performance7.now() - params.ctx.lastEventAt;
-    const compiledMs = params.ctx.sawModelOutput ? params.timeoutMs : AGENT_FIRST_EVENT_TIMEOUT_MS;
+    const compiledMs = params.ctx.diagnostic.sawModelOutput ? params.timeoutMs : AGENT_FIRST_EVENT_TIMEOUT_MS;
     const budgetMs = everFired ? compiledMs : watchdogBudgetMs(
       compiledMs,
-      params.ctx.sawModelOutput ? "PULLFROG_E2E_ACTIVITY_TIMEOUT_MS" : "PULLFROG_E2E_FIRST_EVENT_TIMEOUT_MS"
+      params.ctx.diagnostic.sawModelOutput ? "PULLFROG_E2E_ACTIVITY_TIMEOUT_MS" : "PULLFROG_E2E_FIRST_EVENT_TIMEOUT_MS"
     );
     if (idleMs <= budgetMs) return;
     fired = true;
     everFired = true;
     const idleSec = Math.round(idleMs / 1e3);
     params.ctx.diagnostic.idleSec = idleSec;
-    params.ctx.diagnostic.sawModelOutput = params.ctx.sawModelOutput;
     log2.info(
-      params.ctx.sawModelOutput ? `\xBB no opencode events for ${idleSec}s \u2014 aborting in-flight prompt and notifying harness` : `\xBB no opencode events for ${idleSec}s \u2014 the provider never returned a first token; aborting in-flight prompt and notifying harness`
+      params.ctx.diagnostic.sawModelOutput ? `\xBB no opencode events for ${idleSec}s \u2014 aborting in-flight prompt and notifying harness` : `\xBB no opencode events for ${idleSec}s \u2014 the provider never returned a first token; aborting in-flight prompt and notifying harness`
     );
     params.abortTurn();
     try {
@@ -116722,7 +116724,6 @@ var opencode = agent({
         currentTurn: null,
         eventCount: 0,
         lastEventAt: performance7.now(),
-        sawModelOutput: false,
         promptMessageID: void 0,
         taskDispatchByCallID: /* @__PURE__ */ new Map(),
         loggedToolCallIDs: /* @__PURE__ */ new Set(),
@@ -116786,7 +116787,9 @@ var opencode = agent({
           );
         };
         const standDownIfRecovered = (turn) => {
-          if (watchdog.firedThisTurn() && turn.success) ctx.onTurnRecovered?.();
+          if (!watchdog.firedThisTurn() || !turn.success) return turn;
+          runnerCtx.diagnostic.idleSec = void 0;
+          ctx.onTurnRecovered?.();
           return turn;
         };
         const result = await attempt(text);
@@ -188634,8 +188637,8 @@ function validatePushDestination(repoState, branch, cwd) {
     throw new Error(
       `Push blocked: destination does not match expected repository.
 Expected: ${pushUrl}
-Actual: ${dest.url}
-Git configuration may have been tampered with.`
+Actual: remote '${dest.remoteName}' -> ${dest.url}
+Git configuration may have been tampered with, or a url.*.insteadOf rewrite is in effect.`
     );
   }
   return dest;
@@ -190757,6 +190760,9 @@ async function configureRepoGit(params) {
   removeIncludeIfEntries(repoDir);
   const originUrl = `https://github.com/${params.owner}/${params.name}.git`;
   $("git", ["remote", "set-url", "origin", originUrl], { cwd: repoDir });
+  $("git", ["config", "--local", "--replace-all", "remote.origin.pushurl", originUrl], {
+    cwd: repoDir
+  });
   repoState.pushUrl = originUrl;
   $("git", ["config", "--local", "credential.helper", ""], { cwd: repoDir });
   repoState.initialHead = captureInitialHead(repoDir);
@@ -191095,6 +191101,9 @@ async function checkoutPrBranch(pr, params) {
       $("git", ["remote", "set-url", remoteName, forkUrl], { log: false });
       log2.debug(`\xBB updated remote '${remoteName}' for fork ${pr.headRepoFullName}`);
     }
+    $("git", ["config", "--local", "--replace-all", `remote.${remoteName}.pushurl`, forkUrl], {
+      log: false
+    });
     $("git", ["config", `branch.${localBranch}.pushRemote`, remoteName], { log: false });
     $("git", ["config", `branch.${localBranch}.merge`, `refs/heads/${pr.headRef}`], { log: false });
     log2.debug(`\xBB configured branch '${localBranch}' to push to '${remoteName}/${pr.headRef}'`);
@@ -196268,6 +196277,43 @@ function resolveCwd(cwd) {
   if (isAbsolute2(cwd)) return cwd;
   return workspace ? resolve2(workspace, cwd) : cwd;
 }
+var DISPATCH_PAYLOAD_KEY = '"~pullfrog"';
+function sliceBalancedObject(text, open) {
+  let depth = 0;
+  let inString = false;
+  for (let i2 = open; i2 < text.length; i2++) {
+    const char = text[i2];
+    if (inString) {
+      if (char === "\\") i2++;
+      else if (char === '"') inString = false;
+      continue;
+    }
+    if (char === '"') inString = true;
+    else if (char === "{") depth++;
+    else if (char === "}" && --depth === 0) return text.slice(open, i2 + 1);
+  }
+  return void 0;
+}
+function findEmbeddedDispatchPayload(text) {
+  const limit = text.lastIndexOf(DISPATCH_PAYLOAD_KEY);
+  if (limit === -1) return void 0;
+  for (let open = text.indexOf("{"); open !== -1 && open < limit; open = text.indexOf("{", open + 1)) {
+    const candidate = sliceBalancedObject(text, open);
+    if (!candidate) continue;
+    try {
+      const parsed2 = JSON.parse(candidate);
+      if (JsonPayload.allows(parsed2)) return parsed2;
+    } catch {
+    }
+  }
+  return void 0;
+}
+function assertDispatchPayloadIntact(promptInput) {
+  if (!findEmbeddedDispatchPayload(promptInput)) return;
+  throw new Error(
+    "this workflow wraps `${{ inputs.prompt }}` in other text, so Pullfrog's dispatch payload can't be read and the run would lose its pull request context, its progress comment, and its standing instructions. in `.github/workflows/pullfrog.yml`, set `prompt:` to exactly `${{ inputs.prompt }}`, and move your own preamble into Standing instructions in the Pullfrog console."
+  );
+}
 function resolvePromptInput() {
   const promptInput = core7.getInput("prompt");
   const promptFile = core7.getInput("prompt_file");
@@ -196284,9 +196330,9 @@ function resolvePromptInput() {
   try {
     parsed2 = JSON.parse(promptInput);
   } catch {
-    return promptInput;
   }
   if (!parsed2 || typeof parsed2 !== "object" || !("~pullfrog" in parsed2)) {
+    assertDispatchPayloadIntact(promptInput);
     return promptInput;
   }
   const jsonPayload = JsonPayload.assert(parsed2);
@@ -196916,7 +196962,7 @@ async function handleAgentResult(ctx) {
   const mode = toolState.selectedMode;
   const isReviewMode = mode === "Review" || mode === "IncrementalReview";
   const payload = ctx.toolContext.payload;
-  const hasCommentTarget = toolState.hadProgressComment || !payload.progressComments && payload.event.issue_number !== void 0;
+  const hasCommentTarget = toolState.hadProgressComment || payload.event.issue_number !== void 0;
   if (!isReviewMode && !toolState.wasUpdated && hasCommentTarget && !ctx.silent) {
     const tracker = toolState.todoTracker;
     if (tracker) {
@@ -197350,6 +197396,19 @@ ${input.errorMessage}
 \`\`\``
   ].join("\n");
 }
+function formatProviderMissingCredential(input) {
+  return [
+    "**No credential reached the model provider.**",
+    "",
+    "The run started without a key for the provider it ended up using, so the request was refused before any model work happened. Nothing was billed, and no key of yours was rejected \u2014 add a provider key, or pick a model you already have one for.",
+    "",
+    `[Configure model \u2192](${getApiUrl()}/console/${input.owner}/${input.name})`,
+    "",
+    `\`\`\`
+${input.errorMessage}
+\`\`\``
+  ].join("\n");
+}
 function formatProviderModelNotFoundSummary(input) {
   return `The configured model is no longer available in OpenCode's catalog. Pick a different model in the Pullfrog console for \`${input.owner}/${input.name}\`, or contact support if this persists.
 
@@ -197395,6 +197454,16 @@ ${body}`, comment: body };
     });
     return { summary: `### \u274C Pullfrog failed
 
+${body}`, comment: body };
+  }
+  if (isProviderMissingCredential(input.errorMessage)) {
+    const body = formatProviderMissingCredential({
+      owner: input.repo.owner,
+      name: input.repo.name,
+      errorMessage: input.errorMessage
+    });
+    return { summary: `### \u274C Pullfrog failed
+
 ${body}`, comment: body };
   }
   const apiKeySource = hangBody ?? input.errorMessage;
@@ -197441,7 +197510,7 @@ ${body}`, comment: body };
 ${body}`, comment: body };
   }
   if (hangBody) {
-    const explained = input.agentDiagnostic?.lastProviderError !== void 0;
+    const explained = input.agentDiagnostic?.lastProviderError !== void 0 || input.agentDiagnostic?.sawModelOutput === false;
     return {
       summary: `### \u274C Pullfrog failed
 
@@ -199234,7 +199303,7 @@ async function runCli4(input) {
 }
 
 // cli.ts
-var VERSION10 = "0.1.61";
+var VERSION10 = "0.1.63";
 var bin = basename2(process.argv[1] || "");
 var PROG = bin === "pf" || bin === "pullfrog" ? bin : "pullfrog";
 var rawArgs = process.argv.slice(2);

package/dist/index.js

@@ -105126,6 +105126,9 @@ function isProviderNoRoutableEndpoints(text) {
 function isOpenRouterKeyLimitExceeded(text) {
   return /Key limit exceeded \(total limit\)/i.test(text) || /openrouter\.ai\/[^\s"')]*\/keys\//i.test(text);
 }
+function isProviderMissingCredential(text) {
+  return /API key is missing\. Pass it using the/i.test(text) || /Missing Authentication header/i.test(text);
+}
 function isTransientUpstreamError(text) {
   return /API Error:\s*5\d\d/i.test(text) || /\bOverloaded\b/.test(text) || /"error_type"\s*:\s*"(?:provider_unavailable|timeout)"/i.test(text) || /Streaming response failed:\s*\[5\d\d\]/i.test(text);
 }
@@ -105188,7 +105191,7 @@ var import_semver = __toESM(require_semver2(), 1);
 // package.json
 var package_default = {
   name: "pullfrog",
-  version: "0.1.61",
+  version: "0.1.63",
   type: "module",
   bin: {
     pullfrog: "dist/cli.mjs",
@@ -106279,7 +106282,6 @@ function getUnsubmittedReview(toolState, expectsReviewOutput2 = toolState.hadPro
 }
 function expectsReviewOutput(ctx) {
   if (ctx.toolState.hadProgressComment) return true;
-  if (ctx.payload.progressComments) return false;
   return ctx.payload.event.silent !== true && ctx.payload.event.issue_number !== void 0;
 }
 function buildStopHookPrompt(failure2) {
@@ -106494,6 +106496,7 @@ async function runPostRunRetryLoop(params) {
       result = preResume;
       break;
     }
+    if (onlySummaryStale) result = { ...result, output: preResume.output || result.output };
     gateResumeCount++;
   }
   if (gateResumeCount > 0 && result.success && hasPostRunIssues(finalIssues)) {
@@ -113885,24 +113888,23 @@ async function installOpencodeCli(params) {
 var AUTO_SELECT_WARNING = "select a model explicitly in the Pullfrog console (https://pullfrog.com/console) to avoid this \u2014 if the picker is locked, this run had no Pullfrog Router funding: add a card or top up your credit.";
 function autoSelectModel() {
   const authorized2 = getAuthorizedModels();
-  if (authorized2.size > 0) {
-    const servable = (a) => {
-      if (!authorized2.has(a.resolve)) return false;
-      const envVars = getModelEnvVars(a.resolve);
-      return envVars.length === 0 || envVars.some((name) => process.env[name]);
-    };
-    const match3 = modelAliases.find((a) => !a.hidden && !a.fallback && a.preferred && servable(a)) ?? modelAliases.find((a) => !a.hidden && !a.fallback && servable(a));
-    if (match3) {
-      log.info(
-        `\xBB model: ${match3.resolve} (auto-selected${match3.preferred ? " \u2014 preferred" : ""} curated match)`
-      );
-      log.warning(`\xBB model auto-selected. ${AUTO_SELECT_WARNING}`);
-      return match3.resolve;
-    }
+  const selectable = modelAliases.filter((a) => !a.hidden && !a.fallback && !a.routing);
+  const servable = selectable.filter((a) => {
+    const envVars = getModelEnvVars(a.resolve);
+    return envVars.length === 0 || envVars.some((name) => process.env[name]);
+  });
+  const pick4 = (list) => list.find((a) => a.preferred) ?? list[0];
+  const match3 = pick4(servable.filter((a) => authorized2.has(a.resolve))) ?? pick4(servable);
+  if (match3) {
     log.info(
-      `\xBB opencode has ${authorized2.size} models but none match curated aliases \u2014 letting OpenCode auto-select`
+      `\xBB model: ${match3.resolve} (auto-selected${match3.preferred ? " \u2014 preferred" : ""} curated match)`
     );
+    log.warning(`\xBB model auto-selected. ${AUTO_SELECT_WARNING}`);
+    return match3.resolve;
   }
+  log.info(
+    `\xBB opencode has ${authorized2.size} models but none match curated aliases and none hold a credential \u2014 letting OpenCode auto-select: ${[...authorized2].join(", ")}`
+  );
   log.warning(`\xBB no model resolved. letting OpenCode auto-select. ${AUTO_SELECT_WARNING}`);
   return void 0;
 }
@@ -114115,7 +114117,7 @@ function isModelOutput(ctx, part) {
 async function dispatchEvent(ctx, event) {
   if (event.type === "message.part.updated") {
     ctx.lastEventAt = performance7.now();
-    if (isModelOutput(ctx, event.properties.part)) ctx.sawModelOutput = true;
+    if (isModelOutput(ctx, event.properties.part)) ctx.diagnostic.sawModelOutput = true;
     await onPartUpdated(ctx, event.properties.part);
     return;
   }
@@ -114261,7 +114263,8 @@ async function runPromptTurn(ctx, params) {
   const turn = ctx.currentTurn;
   const part = { type: "text", text: params.text };
   ctx.promptMessageID = void 0;
-  ctx.sawModelOutput = false;
+  ctx.diagnostic.sawModelOutput = false;
+  ctx.diagnostic.idleSec = void 0;
   let assistant;
   let returnedParts;
   let networkError = null;
@@ -114321,7 +114324,7 @@ async function runPromptTurn(ctx, params) {
       usage
     };
   }
-  if (!ctx.sawModelOutput && finalText.trim().length === 0 && !usage) {
+  if (!ctx.diagnostic.sawModelOutput && finalText.trim().length === 0 && !usage) {
     return {
       success: false,
       output: finalText,
@@ -114446,19 +114449,18 @@ function startInnerActivityWatchdog(params) {
   const id = setInterval(() => {
     if (fired) return;
     const idleMs = performance7.now() - params.ctx.lastEventAt;
-    const compiledMs = params.ctx.sawModelOutput ? params.timeoutMs : AGENT_FIRST_EVENT_TIMEOUT_MS;
+    const compiledMs = params.ctx.diagnostic.sawModelOutput ? params.timeoutMs : AGENT_FIRST_EVENT_TIMEOUT_MS;
     const budgetMs = everFired ? compiledMs : watchdogBudgetMs(
       compiledMs,
-      params.ctx.sawModelOutput ? "PULLFROG_E2E_ACTIVITY_TIMEOUT_MS" : "PULLFROG_E2E_FIRST_EVENT_TIMEOUT_MS"
+      params.ctx.diagnostic.sawModelOutput ? "PULLFROG_E2E_ACTIVITY_TIMEOUT_MS" : "PULLFROG_E2E_FIRST_EVENT_TIMEOUT_MS"
     );
     if (idleMs <= budgetMs) return;
     fired = true;
     everFired = true;
     const idleSec = Math.round(idleMs / 1e3);
     params.ctx.diagnostic.idleSec = idleSec;
-    params.ctx.diagnostic.sawModelOutput = params.ctx.sawModelOutput;
     log.info(
-      params.ctx.sawModelOutput ? `\xBB no opencode events for ${idleSec}s \u2014 aborting in-flight prompt and notifying harness` : `\xBB no opencode events for ${idleSec}s \u2014 the provider never returned a first token; aborting in-flight prompt and notifying harness`
+      params.ctx.diagnostic.sawModelOutput ? `\xBB no opencode events for ${idleSec}s \u2014 aborting in-flight prompt and notifying harness` : `\xBB no opencode events for ${idleSec}s \u2014 the provider never returned a first token; aborting in-flight prompt and notifying harness`
     );
     params.abortTurn();
     try {
@@ -114602,7 +114604,6 @@ var opencode = agent({
         currentTurn: null,
         eventCount: 0,
         lastEventAt: performance7.now(),
-        sawModelOutput: false,
         promptMessageID: void 0,
         taskDispatchByCallID: /* @__PURE__ */ new Map(),
         loggedToolCallIDs: /* @__PURE__ */ new Set(),
@@ -114666,7 +114667,9 @@ var opencode = agent({
           );
         };
         const standDownIfRecovered = (turn) => {
-          if (watchdog.firedThisTurn() && turn.success) ctx.onTurnRecovered?.();
+          if (!watchdog.firedThisTurn() || !turn.success) return turn;
+          runnerCtx.diagnostic.idleSec = void 0;
+          ctx.onTurnRecovered?.();
           return turn;
         };
         const result = await attempt(text);
@@ -186514,8 +186517,8 @@ function validatePushDestination(repoState, branch, cwd) {
     throw new Error(
       `Push blocked: destination does not match expected repository.
 Expected: ${pushUrl}
-Actual: ${dest.url}
-Git configuration may have been tampered with.`
+Actual: remote '${dest.remoteName}' -> ${dest.url}
+Git configuration may have been tampered with, or a url.*.insteadOf rewrite is in effect.`
     );
   }
   return dest;
@@ -188637,6 +188640,9 @@ async function configureRepoGit(params) {
   removeIncludeIfEntries(repoDir);
   const originUrl = `https://github.com/${params.owner}/${params.name}.git`;
   $("git", ["remote", "set-url", "origin", originUrl], { cwd: repoDir });
+  $("git", ["config", "--local", "--replace-all", "remote.origin.pushurl", originUrl], {
+    cwd: repoDir
+  });
   repoState.pushUrl = originUrl;
   $("git", ["config", "--local", "credential.helper", ""], { cwd: repoDir });
   repoState.initialHead = captureInitialHead(repoDir);
@@ -188975,6 +188981,9 @@ async function checkoutPrBranch(pr, params) {
       $("git", ["remote", "set-url", remoteName, forkUrl], { log: false });
       log.debug(`\xBB updated remote '${remoteName}' for fork ${pr.headRepoFullName}`);
     }
+    $("git", ["config", "--local", "--replace-all", `remote.${remoteName}.pushurl`, forkUrl], {
+      log: false
+    });
     $("git", ["config", `branch.${localBranch}.pushRemote`, remoteName], { log: false });
     $("git", ["config", `branch.${localBranch}.merge`, `refs/heads/${pr.headRef}`], { log: false });
     log.debug(`\xBB configured branch '${localBranch}' to push to '${remoteName}/${pr.headRef}'`);
@@ -194148,6 +194157,43 @@ function resolveCwd(cwd) {
   if (isAbsolute2(cwd)) return cwd;
   return workspace ? resolve2(workspace, cwd) : cwd;
 }
+var DISPATCH_PAYLOAD_KEY = '"~pullfrog"';
+function sliceBalancedObject(text, open) {
+  let depth = 0;
+  let inString = false;
+  for (let i = open; i < text.length; i++) {
+    const char = text[i];
+    if (inString) {
+      if (char === "\\") i++;
+      else if (char === '"') inString = false;
+      continue;
+    }
+    if (char === '"') inString = true;
+    else if (char === "{") depth++;
+    else if (char === "}" && --depth === 0) return text.slice(open, i + 1);
+  }
+  return void 0;
+}
+function findEmbeddedDispatchPayload(text) {
+  const limit = text.lastIndexOf(DISPATCH_PAYLOAD_KEY);
+  if (limit === -1) return void 0;
+  for (let open = text.indexOf("{"); open !== -1 && open < limit; open = text.indexOf("{", open + 1)) {
+    const candidate = sliceBalancedObject(text, open);
+    if (!candidate) continue;
+    try {
+      const parsed2 = JSON.parse(candidate);
+      if (JsonPayload.allows(parsed2)) return parsed2;
+    } catch {
+    }
+  }
+  return void 0;
+}
+function assertDispatchPayloadIntact(promptInput) {
+  if (!findEmbeddedDispatchPayload(promptInput)) return;
+  throw new Error(
+    "this workflow wraps `${{ inputs.prompt }}` in other text, so Pullfrog's dispatch payload can't be read and the run would lose its pull request context, its progress comment, and its standing instructions. in `.github/workflows/pullfrog.yml`, set `prompt:` to exactly `${{ inputs.prompt }}`, and move your own preamble into Standing instructions in the Pullfrog console."
+  );
+}
 function resolvePromptInput() {
   const promptInput = core7.getInput("prompt");
   const promptFile = core7.getInput("prompt_file");
@@ -194164,9 +194210,9 @@ function resolvePromptInput() {
   try {
     parsed2 = JSON.parse(promptInput);
   } catch {
-    return promptInput;
   }
   if (!parsed2 || typeof parsed2 !== "object" || !("~pullfrog" in parsed2)) {
+    assertDispatchPayloadIntact(promptInput);
     return promptInput;
   }
   const jsonPayload = JsonPayload.assert(parsed2);
@@ -194796,7 +194842,7 @@ async function handleAgentResult(ctx) {
   const mode = toolState.selectedMode;
   const isReviewMode = mode === "Review" || mode === "IncrementalReview";
   const payload = ctx.toolContext.payload;
-  const hasCommentTarget = toolState.hadProgressComment || !payload.progressComments && payload.event.issue_number !== void 0;
+  const hasCommentTarget = toolState.hadProgressComment || payload.event.issue_number !== void 0;
   if (!isReviewMode && !toolState.wasUpdated && hasCommentTarget && !ctx.silent) {
     const tracker = toolState.todoTracker;
     if (tracker) {
@@ -195230,6 +195276,19 @@ ${input.errorMessage}
 \`\`\``
   ].join("\n");
 }
+function formatProviderMissingCredential(input) {
+  return [
+    "**No credential reached the model provider.**",
+    "",
+    "The run started without a key for the provider it ended up using, so the request was refused before any model work happened. Nothing was billed, and no key of yours was rejected \u2014 add a provider key, or pick a model you already have one for.",
+    "",
+    `[Configure model \u2192](${getApiUrl()}/console/${input.owner}/${input.name})`,
+    "",
+    `\`\`\`
+${input.errorMessage}
+\`\`\``
+  ].join("\n");
+}
 function formatProviderModelNotFoundSummary(input) {
   return `The configured model is no longer available in OpenCode's catalog. Pick a different model in the Pullfrog console for \`${input.owner}/${input.name}\`, or contact support if this persists.
 
@@ -195275,6 +195334,16 @@ ${body}`, comment: body };
     });
     return { summary: `### \u274C Pullfrog failed
 
+${body}`, comment: body };
+  }
+  if (isProviderMissingCredential(input.errorMessage)) {
+    const body = formatProviderMissingCredential({
+      owner: input.repo.owner,
+      name: input.repo.name,
+      errorMessage: input.errorMessage
+    });
+    return { summary: `### \u274C Pullfrog failed
+
 ${body}`, comment: body };
   }
   const apiKeySource = hangBody ?? input.errorMessage;
@@ -195321,7 +195390,7 @@ ${body}`, comment: body };
 ${body}`, comment: body };
   }
   if (hangBody) {
-    const explained = input.agentDiagnostic?.lastProviderError !== void 0;
+    const explained = input.agentDiagnostic?.lastProviderError !== void 0 || input.agentDiagnostic?.sawModelOutput === false;
     return {
       summary: `### \u274C Pullfrog failed
 

package/dist/utils/providerErrors.d.ts

@@ -50,6 +50,12 @@ export declare function isProviderNoRoutableEndpoints(text: string): boolean;
  * …/settings/credits`) carries no `/keys/` path and correctly stays out.
  */
 export declare function isOpenRouterKeyLimitExceeded(text: string): boolean;
+/**
+ * the provider was reached with NO credential at all — the AI SDK's shared `loadApiKey`
+ * refusal, so it is provider-agnostic. NOT `isApiKeyAuthError`, which is a key we hold
+ * being rejected: "rotate your key" names a credential that does not exist here.
+ */
+export declare function isProviderMissingCredential(text: string): boolean;
 /**
  * The upstream is having a moment: Anthropic's `API Error: 529 Overloaded`,
  * OpenRouter's `provider_unavailable` / `timeout`, OpenCode Zen's `Streaming

package/dist/utils/runErrorRenderer.d.ts

@@ -45,12 +45,12 @@
  *      `"activity timeout"` or `"agent still pending"` AND none of the
  *      above matched. The harness keeps structured diagnostic state on
  *      `toolState.agentDiagnostic`; `formatAgentHangBody` renders that into
- *      the job summary. The PR comment instead collapses to a one-line
- *      `**Run failed.** [View the logs →]` — the watchdog jargon, event
- *      counts, and benign stderr tail are operator-grade detail that only
- *      alarm the average user. The one exception is a hang masking billing
- *      exhaustion (#778), where `formatAgentHangBody` emits an actionable
- *      top-up CTA that the comment keeps verbatim.
+ *      the job summary. The PR comment keeps that same body whenever the hang
+ *      is EXPLAINED — a classified provider error (#778, #1183) or a provider
+ *      that never returned a first token — and otherwise collapses to a
+ *      one-line `**Run failed.** [View the logs →]`, because watchdog jargon,
+ *      event counts and a benign stderr tail are operator-grade detail that
+ *      only alarm the average user.
  *
  *   6. Default — the job summary gets a plain-English lead sentence plus the
  *      raw error in a fenced code block under the `### ❌ Pullfrog failed`
@@ -59,7 +59,7 @@
  *
  * Net: the actionable classifications (billing, API-key, model-not-found,
  * no-provider-available, context-overflow, transient-upstream) render identical
- * bodies on both surfaces; the non-actionable ones (hang,
+ * bodies on both surfaces; the non-actionable ones (unexplained hang,
  * generic) keep the forensics in the Actions job summary and show a calm
  * one-liner in the PR comment, whose footer already carries Pullfrog
  * branding + rerun links.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "pullfrog",
-  "version": "0.1.61",
+  "version": "0.1.63",
   "type": "module",
   "bin": {
     "pullfrog": "dist/cli.mjs",