pullfrog 0.1.66 → 0.1.68

package/dist/index.js

@@ -107718,6 +107718,7 @@ import { performance as performance5 } from "node:perf_hooks";
 
 // effort.ts
 var DEFAULT_EFFORT_POSITION = 0.5;
+var SUBSIDY_RUNG = "high";
 var EFFORT_ALIASES = {
   low: 0,
   medium: 0.25,
@@ -108042,6 +108043,69 @@ var providers = {
       }
     }
   }),
+  // the same models as `moonshotai` above, billed against a Kimi membership
+  // instead of a Moonshot API balance — a separate endpoint, separate model
+  // ids and a separate key, which is why it is a provider rather than a second
+  // `envVars` entry. no provider injection is needed: models.dev carries
+  // `kimi-for-coding` (api `https://api.kimi.com/coding/v1`, npm
+  // `@ai-sdk/anthropic`) and opencode's env loop enables it from a bare
+  // `KIMI_API_KEY`, verified against our pinned opencode-ai@1.18.5 — all four
+  // ids list in `opencode models` and a run reaches Kimi's own auth check.
+  //
+  // NO `openRouterResolve` ON PURPOSE. OpenRouter cannot serve a Kimi
+  // membership, so a Router path here would silently bill the wallet for
+  // Moonshot pay-as-you-go under a slug picked for the opposite reason. The
+  // absence is load-bearing: `isCardGatedModel` reads it as "not Router-
+  // resolvable", `decideModelAccess` answers an explicit pick with the
+  // `router` copy ("add your own provider key"), and run-context clamps a
+  // keyless Router pick to the default subsidy model with `noRouterPath`.
+  "kimi-for-coding": provider({
+    // "Kimi Code" is the product name on kimi.com/code and in the console the
+    // key is minted from. The provider KEY has to stay `kimi-for-coding` — it
+    // is models.dev's id, so it is what `enabled_providers` and every
+    // `resolve` prefix must spell.
+    displayName: "Kimi Code",
+    envVars: ["KIMI_API_KEY"],
+    models: {
+      // the tier each model needs is in `description` because Kimi answers an
+      // out-of-tier request with 401 — indistinguishable from a bad key by
+      // status alone, and only `isKimiPlanTierError` tells them apart after the
+      // fact. saying it in the picker is the half that stops the run happening.
+      "kimi-k3": {
+        displayName: "Kimi K3",
+        description: "1M context, but only on Allegretto and above \xB7 Moderato caps it at 256K",
+        resolve: "kimi-for-coding/k3",
+        effort: ["low", "high", "max"],
+        subagentModel: "kimi-k2"
+      },
+      // `preferred` sits on the 256K variant rather than the 1M flagship, which
+      // inverts the usual "top tier wins" rule for a reason specific to Kimi:
+      // below Allegretto the two are the SAME 256K ceiling and `k3` charges
+      // roughly double the quota for it, so on the median tier the flagship is
+      // strictly dominated rather than merely pricier. This flag seeds the
+      // onboarding pick (`getRecommendedSlug`) and wins key-only auto-select
+      // (`autoSelectModel`), which are exactly the two moments nobody has
+      // chosen yet.
+      "kimi-k3-256k": {
+        displayName: "Kimi K3 256K",
+        description: "Same model at 256K for ~half the quota \xB7 Moderato or above",
+        resolve: "kimi-for-coding/k3-256k",
+        effort: ["low", "high", "max"],
+        preferred: true,
+        subagentModel: "kimi-k2"
+      },
+      "kimi-k2": {
+        displayName: "Kimi K2",
+        description: "Included in every Kimi membership tier",
+        resolve: "kimi-for-coding/kimi-for-coding"
+      },
+      "kimi-k2-highspeed": {
+        displayName: "Kimi K2 HighSpeed",
+        description: "~6x output speed for ~3x quota \xB7 needs Allegretto or above",
+        resolve: "kimi-for-coding/kimi-for-coding-highspeed"
+      }
+    }
+  }),
   opencode: provider({
     displayName: "OpenCode Zen",
     envVars: ["OPENCODE_API_KEY"],
@@ -108058,6 +108122,15 @@ var providers = {
         // the model does cost nothing.
         isFree: true
       },
+      // Zen meters Fable like any other model, so this route reaches it without
+      // the Anthropic access grant `anthropic/claude-fable` still needs.
+      "claude-fable": {
+        displayName: "Claude Fable",
+        resolve: "opencode/claude-fable-5-1",
+        effort: ["low", "medium", "high", "xhigh", "max"],
+        openRouterResolve: "openrouter/~anthropic/claude-fable-latest",
+        subagentModel: "claude-sonnet"
+      },
       "claude-opus": {
         displayName: "Claude Opus",
         resolve: "opencode/claude-opus-5",
@@ -108171,6 +108244,17 @@ var providers = {
         effort: ["minimal", "low", "medium", "high"],
         openRouterResolve: "openrouter/google/gemini-3.6-flash"
       },
+      // Zen serves K3, but rule 7 can only move a mirror when its upstream moves,
+      // so the K3 generation could never reach this block by bumping `kimi-k2`.
+      "kimi-k3": {
+        displayName: "Kimi K3",
+        resolve: "opencode/kimi-k3",
+        // Zen publishes a single rung for K3 where OpenRouter publishes three.
+        effort: ["max"],
+        openRouterEffort: ["low", "high", "max"],
+        openRouterResolve: "openrouter/moonshotai/kimi-k3",
+        subagentModel: "kimi-k2"
+      },
       "kimi-k2": {
         displayName: "Kimi K2",
         // k2.7-code is UNDEPLOYED on Zen — still listed in /zen/v1/models, but
@@ -108182,25 +108266,58 @@ var providers = {
         resolve: "opencode/kimi-k2.6",
         openRouterResolve: "openrouter/moonshotai/kimi-k2.7-code"
       },
+      // M3 is its own line beside M2, not a bump of it — same reason `kimi-k3`
+      // sits beside `kimi-k2` rather than replacing it.
+      "minimax-m3": {
+        displayName: "MiniMax M3",
+        resolve: "opencode/minimax-m3",
+        openRouterResolve: "openrouter/minimax/minimax-m3"
+      },
       // slug pins the m2 line for DB stability; resolve tracks the current m2.7.
       "minimax-m2.5": {
         displayName: "MiniMax M2",
         resolve: "opencode/minimax-m2.7",
         openRouterResolve: "openrouter/minimax/minimax-m2.7"
       },
+      // Z.ai and xAI reach Zen subscribers only here — before this, `opencode-go`
+      // was the catalog's only GLM route, and Grok had no Zen route at all.
+      glm: {
+        displayName: "GLM",
+        resolve: "opencode/glm-5.2",
+        effort: ["high", "max"],
+        openRouterEffort: ["high", "xhigh"],
+        openRouterResolve: "openrouter/z-ai/glm-5.2"
+      },
+      grok: {
+        displayName: "Grok",
+        resolve: "opencode/grok-4.6",
+        effort: ["low", "medium", "high", "xhigh"],
+        openRouterResolve: "openrouter/x-ai/grok-4.6"
+      },
       "gpt-5-nano": {
         displayName: "GPT Nano",
         resolve: "opencode/gpt-5-nano",
         effort: ["minimal", "low", "medium", "high"],
         openRouterResolve: "openrouter/openai/gpt-5-nano"
       },
+      // Zen's live free MiMo, and the second free row in a menu that big-pickle
+      // was alone in since `mimo-v2-pro-free` lost its model.
+      mimo: {
+        displayName: "MiMo",
+        resolve: "opencode/mimo-v2.5-free",
+        // free to run, still gated on the provider's own OPENCODE_API_KEY —
+        // see the big-pickle note above (#1077).
+        isFree: true
+      },
       "mimo-v2-pro-free": {
         displayName: "MiMo V2 Pro",
         resolve: "opencode/mimo-v2-pro-free",
         // free to run, still gated on the provider's own OPENCODE_API_KEY —
         // see the big-pickle note above (#1077).
         isFree: true,
-        fallback: "opencode/big-pickle"
+        // the model id Zen dropped; land a stored MiMo pick back on MiMo rather
+        // than on the unrelated model it had to settle for while none was live.
+        fallback: "opencode/mimo"
       },
       "minimax-m2.5-free": {
         displayName: "MiniMax M2",
@@ -108295,6 +108412,16 @@ var providers = {
         resolve: "opencode-go/qwen3.7-plus",
         openRouterResolve: "openrouter/qwen/qwen3.7-plus"
       },
+      // the cheap rung Alibaba added under Plus (0.15/0.47 against 0.5/3), and
+      // the only model either OpenCode plan has added since this block was written.
+      "qwen-flash": {
+        displayName: "Qwen Flash",
+        resolve: "opencode-go/qwen3.8-flash",
+        effort: ["low", "medium", "xhigh"],
+        // the Go route publishes rungs where OpenRouter publishes none.
+        openRouterEffort: [],
+        openRouterResolve: "openrouter/qwen/qwen3.8-flash"
+      },
       // MiniMax — parity with opencode/* and openrouter/*; the m2 slug pins the
       // line for DB stability while the resolve tracks the current m2.7.
       "minimax-m3": {
@@ -108594,6 +108721,80 @@ var providers = {
         openRouterResolve: "openrouter/minimax/minimax-m3"
       }
     }
+  }),
+  vercel: provider({
+    // Vercel AI Gateway — one key serves every model it fronts. model IDs use
+    // the models.dev `vercel` catalog's own naming (dotted versions, e.g.
+    // `anthropic/claude-opus-5`, `zai/glm-5.3`), and effort ladders mirror that
+    // catalog's entries, not the upstream vendor's. deliberately no
+    // `openRouterResolve`: a gateway pick is BYOK-only — silently rerouting it
+    // over the Router proxy would bill the wallet for traffic the user pointed
+    // at their own gateway.
+    displayName: "Vercel AI Gateway",
+    envVars: ["AI_GATEWAY_API_KEY"],
+    models: {
+      "claude-opus": {
+        displayName: "Claude Opus",
+        resolve: "vercel/anthropic/claude-opus-5",
+        effort: ["low", "medium", "high", "xhigh", "max"],
+        preferred: true,
+        subagentModel: "claude-sonnet"
+      },
+      "claude-sonnet": {
+        displayName: "Claude Sonnet",
+        resolve: "vercel/anthropic/claude-sonnet-5",
+        effort: ["low", "medium", "high", "xhigh"]
+      },
+      "claude-haiku": {
+        displayName: "Claude Haiku",
+        resolve: "vercel/anthropic/claude-haiku-4.5"
+      },
+      "gpt-sol": {
+        displayName: "GPT Sol",
+        resolve: "vercel/openai/gpt-5.6-sol",
+        effort: ["none", "low", "medium", "high", "xhigh", "max"],
+        subagentModel: "gpt-terra"
+      },
+      "gpt-terra": {
+        displayName: "GPT Terra",
+        resolve: "vercel/openai/gpt-5.6-terra",
+        effort: ["none", "low", "medium", "high", "xhigh", "max"]
+      },
+      "gpt-luna": {
+        displayName: "GPT Luna",
+        resolve: "vercel/openai/gpt-5.6-luna",
+        effort: ["none", "low", "medium", "high", "xhigh", "max"]
+      },
+      "gemini-pro": {
+        displayName: "Gemini Pro",
+        resolve: "vercel/google/gemini-3.1-pro-preview",
+        effort: ["low", "medium", "high"]
+      },
+      "gemini-flash": {
+        displayName: "Gemini Flash",
+        resolve: "vercel/google/gemini-3.6-flash",
+        effort: ["minimal", "low", "medium", "high"]
+      },
+      "deepseek-pro": {
+        displayName: "DeepSeek Pro",
+        resolve: "vercel/deepseek/deepseek-v4-pro-0813",
+        effort: ["high", "xhigh"]
+      },
+      "deepseek-flash": {
+        displayName: "DeepSeek Flash",
+        resolve: "vercel/deepseek/deepseek-v4-flash",
+        effort: ["high", "xhigh"]
+      },
+      glm: {
+        displayName: "GLM",
+        resolve: "vercel/zai/glm-5.3",
+        effort: ["low", "high", "max"]
+      },
+      "kimi-k3": {
+        displayName: "Kimi K3",
+        resolve: "vercel/moonshotai/kimi-k3"
+      }
+    }
   })
 };
 function parseModel(slug2) {
@@ -109345,6 +109546,7 @@ async function installFromNpmTarball(params) {
 // utils/providerErrors.ts
 var PROVIDER_BILLING_EXHAUSTED_LABEL = "provider billing exhausted";
 var PROVIDER_NO_ENDPOINTS_LABEL = "provider no routable endpoints";
+var PROVIDER_USAGE_LIMIT_LABEL = "provider usage limit reached";
 var statusKey = `\\b(?:status[_ ]?code|http[_ ]?status|status)["']?\\s*[:=]\\s*["']?`;
 var ANTHROPIC_SPEND_CAP_PATTERN = /reached your specified API usage limits\.?(?:\s*You will regain access on ([^"\n]+?)\.)?/i;
 function findAnthropicSpendCap(text) {
@@ -109390,6 +109592,14 @@ var PROVIDER_ERROR_PATTERNS = [
   // the wallet-shaped patterns above reach, and its 400 sits nowhere near a
   // `status:` key either — so the whole message was dropped on the floor (#1208).
   { regex: ANTHROPIC_SPEND_CAP_PATTERN, label: PROVIDER_BILLING_EXHAUSTED_LABEL },
+  // OpenCode Zen / Codex-subscription cap: `AI_APICallError: The usage limit has
+  // been reached`. Its noun is "usage limit" with no "rate", no status code and
+  // no wallet wording, so every pattern here missed it and `lastProviderError`
+  // stayed unset — which suppresses nothing, so the run was reported as "The
+  // model produced no output at all … usually transient; re-running often
+  // succeeds" while the same log held nine of these. Measured on a live account
+  // whose ChatGPT subscription was capped.
+  { regex: /\bthe usage limit has been reached\b/i, label: PROVIDER_USAGE_LIMIT_LABEL },
   // the OpenRouter shapes `isRouterKeylimitExhaustedError` matches. on a Router
   // run those mean the PULLFROG wallet is empty and `renderRunError` returns a
   // `BillingError` before ever reaching this list; on a BYOK run the very same
@@ -109520,7 +109730,7 @@ function ossEffortFloor(ctx) {
   const alias = resolveRunAlias(ctx);
   const published = alias?.openRouterEffort ?? alias?.effort;
   if (!published) return 0;
-  return rungPosition({ rung: "high", published }) ?? 0;
+  return rungPosition({ rung: SUBSIDY_RUNG, published }) ?? 0;
 }
 function resolveRunEffort(ctx) {
   const configured = ctx.payload.effort !== void 0;
@@ -109552,7 +109762,7 @@ var import_semver = __toESM(require_semver2(), 1);
 // package.json
 var package_default = {
   name: "pullfrog",
-  version: "0.1.66",
+  version: "0.1.68",
   type: "module",
   bin: {
     pullfrog: "dist/cli.mjs",
@@ -192236,6 +192446,9 @@ function formatModelLabel(params) {
   if (params.fallbackFrom) {
     return `${base} (credentials for ${providerDisplayName(params.fallbackFrom)} were rejected by the provider)`;
   }
+  if (params.clamped?.reason === "trial") {
+    return `${base} (free trial)`;
+  }
   if (params.clamped) {
     const target = isAutoTier(params.clamped.from) ? "the intelligent tier" : `\`${resolveDisplayAlias(params.clamped.from)?.displayName ?? params.clamped.from}\``;
     return params.clamped.reason === "card" ? `${base} (${target} needs a [card on file](https://docs.pullfrog.com/models))` : `${base} (${target} needs a [provider key](https://docs.pullfrog.com/models) \u2014 no Router support yet)`;
@@ -192245,6 +192458,15 @@ function formatModelLabel(params) {
   }
   return base;
 }
+function buildTrialDisclosure(owner) {
+  const consoleUrl = owner ? `https://pullfrog.com/console/${owner}` : "https://pullfrog.com/console";
+  return [
+    "---",
+    "",
+    "> [!IMPORTANT]",
+    `> **This run used the free trial model.** \`DeepSeek Flash\` is fast and cheap \u2014 expect lighter work than a frontier model. [Connect a subscription or API key \u2192](${consoleUrl})`
+  ].join("\n");
+}
 function buildPullfrogFooter(params) {
   const parts = [];
   if (params.shaPinned) {
@@ -192277,10 +192499,13 @@ function buildPullfrogFooter(params) {
     );
   }
   const allParts = [...parts, "[\u{1D54F}](https://x.com/pullfrogai)"];
+  const disclosure = params.clamped?.reason === "trial" ? `${buildTrialDisclosure(params.owner)}
+
+` : "";
   return `
 
 ${PULLFROG_DIVIDER}
-<sup>${FROG_LOGO}&nbsp;&nbsp;\uFF5C ${allParts.join(" \uFF5C ")}</sup>`;
+${disclosure}<sup>${FROG_LOGO}&nbsp;&nbsp;\uFF5C ${allParts.join(" \uFF5C ")}</sup>`;
 }
 function stripExistingFooter(body) {
   const dividerIndex = body.indexOf(PULLFROG_DIVIDER);
@@ -192434,7 +192659,8 @@ function buildCommentFooter(ctx, customParts) {
     clamped: ctx.toolState.modelClamped,
     unselectedProxyDefault: ctx.toolState.unselectedProxyDefault,
     shaPinned: ctx.toolState.shaPinned,
-    oss: ctx.oss
+    oss: ctx.oss,
+    owner: ctx.repo.owner
   });
 }
 function buildImplementPlanLink(ctx, issueNumber, commentId) {
@@ -193433,7 +193659,8 @@ async function createAndSubmitWithFooter(ctx, params, opts) {
       clamped: ctx.toolState.modelClamped,
       unselectedProxyDefault: ctx.toolState.unselectedProxyDefault,
       shaPinned: ctx.toolState.shaPinned,
-      oss: ctx.oss
+      oss: ctx.oss,
+      owner: ctx.repo.owner
     });
     return await ctx.octokit.rest.pulls.submitReview({
       owner: params.owner,
@@ -196194,7 +196421,8 @@ function buildPrBodyWithFooter(ctx, body) {
     clamped: ctx.toolState.modelClamped,
     unselectedProxyDefault: ctx.toolState.unselectedProxyDefault,
     shaPinned: ctx.toolState.shaPinned,
-    oss: ctx.oss
+    oss: ctx.oss,
+    owner: ctx.repo.owner
   });
   const bodyWithoutFooter = stripExistingFooter(fixDoubleEscapedString(body));
   return `${bodyWithoutFooter}${footer}`;
@@ -197501,10 +197729,12 @@ function isByokSetupError(text) {
 var SECRETS_UNAVAILABLE_MARKER = "couldn't load your Pullfrog secrets";
 var ROUTER_UNFUNDED_MARKER = "your Pullfrog Router balance is empty";
 var CREDENTIAL_REJECTED_MARKER = "was rejected by its provider";
-function buildKeyError(params) {
-  if (params.secretsUnavailable) return buildSecretsUnavailableError(params);
-  if (params.routerUnfunded) return buildRouterUnfundedError(params);
-  return buildMissingApiKeyError(params);
+var NoUsableCredentialError = class extends Error {
+};
+function throwKeyError(params) {
+  if (params.secretsUnavailable) throw new Error(buildSecretsUnavailableError(params));
+  if (params.routerUnfunded) throw new NoUsableCredentialError(buildRouterUnfundedError(params));
+  throw new NoUsableCredentialError(buildMissingApiKeyError(params));
 }
 function buildRouterUnfundedError(params) {
   const billingUrl = `${getApiUrl()}/console/${params.owner}#billing`;
@@ -197703,61 +197933,55 @@ function validateAgentApiKey(params) {
         validateVertexSetup({ owner: params.owner, name: params.name });
         return;
       }
-      validateBedrockSetup({ owner: params.owner, name: params.name });
-      return;
+      if (process.env[BEDROCK_MODEL_ID_ENV]?.trim() === params.model) {
+        validateBedrockSetup({ owner: params.owner, name: params.name });
+        return;
+      }
     }
     if (params.agent.name === "opencode") {
       if (params.authorized.has(params.model)) return;
       const reason = getModelsFailure();
       if (reason) throw new Error(reason);
       if (getModelEnvVars(params.model).some(hasEnvVar2)) return;
-      throw new Error(
-        buildKeyError({
-          owner: params.owner,
-          name: params.name,
-          model: params.model,
-          secretsUnavailable: params.secretsUnavailable,
-          routerUnfunded: params.routerUnfunded
-        })
-      );
-    }
-    if (hasSingleProviderAuth(params.agent.name)) return;
-    throw new Error(
-      buildKeyError({
+      throwKeyError({
         owner: params.owner,
         name: params.name,
         model: params.model,
         secretsUnavailable: params.secretsUnavailable,
         routerUnfunded: params.routerUnfunded
-      })
-    );
+      });
+    }
+    if (hasSingleProviderAuth(params.agent.name)) return;
+    throwKeyError({
+      owner: params.owner,
+      name: params.name,
+      model: params.model,
+      secretsUnavailable: params.secretsUnavailable,
+      routerUnfunded: params.routerUnfunded
+    });
   }
   if (params.agent.name === "opencode") {
     if ([...params.authorized].some(modelHasRuntimeAuth)) return;
     const reason = getModelsFailure();
     if (reason) throw new Error(reason);
-    throw new Error(
-      buildKeyError({
-        owner: params.owner,
-        name: params.name,
-        secretsUnavailable: params.secretsUnavailable,
-        routerUnfunded: params.routerUnfunded
-      })
-    );
-  }
-  if (hasSingleProviderAuth(params.agent.name)) return;
-  throw new Error(
-    buildKeyError({
+    throwKeyError({
       owner: params.owner,
       name: params.name,
       secretsUnavailable: params.secretsUnavailable,
       routerUnfunded: params.routerUnfunded
-    })
-  );
+    });
+  }
+  if (hasSingleProviderAuth(params.agent.name)) return;
+  throwKeyError({
+    owner: params.owner,
+    name: params.name,
+    secretsUnavailable: params.secretsUnavailable,
+    routerUnfunded: params.routerUnfunded
+  });
 }
 function isApiKeyAuthError(text) {
   if (!text) return false;
-  return text.includes(MISSING_KEY_MARKER) || /Invalid API key/i.test(text) || /Incorrect API key provided/i.test(text) || /\bUser not found\b/i.test(text) || /\bInvalid authentication\b/i.test(text) || /authentication_error/i.test(text) || /Invalid bearer token/i.test(text) || /api_error_status\s*=\s*401/i.test(text) || /API Error:\s*401/i.test(text) || /Failed to authenticate\. API Error:/i.test(text) || /Your api key:.*is invalid/i.test(text) || isMalformedKeyError(text) || isClaudeSubscriptionDisabledError(text) || isClaudeSessionLimitError(text) || isOAuthCredentialExpiredError(text);
+  return text.includes(MISSING_KEY_MARKER) || /Invalid API key/i.test(text) || /Incorrect API key provided/i.test(text) || /\bUser not found\b/i.test(text) || /\bInvalid authentication\b/i.test(text) || /authentication_error/i.test(text) || /Invalid bearer token/i.test(text) || /api_error_status\s*=\s*401/i.test(text) || /API Error:\s*401/i.test(text) || /Failed to authenticate\. API Error:/i.test(text) || /Your api key:.*is invalid/i.test(text) || isMalformedKeyError(text) || isClaudeSubscriptionDisabledError(text) || isKimiPlanTierError(text) || isClaudeSessionLimitError(text) || isOAuthCredentialExpiredError(text);
 }
 function isOAuthCredentialExpiredError(text) {
   return (
@@ -197778,6 +198002,9 @@ function isMalformedKeyError(text) {
 function isClaudeSubscriptionDisabledError(text) {
   return /disabled Claude subscription access/i.test(text);
 }
+function isKimiPlanTierError(text) {
+  return /Your current (?:subscription does not have access to|plan supports only)\b/i.test(text);
+}
 var CLAUDE_SESSION_LIMIT_PATTERN = /hit your (?:session|weekly|five-hour|Opus|Sonnet|Haiku)\s+limit(?:\s*·\s*resets\s+([^"\n]+))?/i;
 function isClaudeSessionLimitError(text) {
   return CLAUDE_SESSION_LIMIT_PATTERN.test(text);
@@ -197851,6 +198078,13 @@ function formatApiKeyErrorSummary(params) {
       `[Add repo secret \u2192](${githubSecretsUrl}) \xB7 [Model settings \u2192](${settingsUrl}) \xB7 [Setup docs \u2192](https://docs.pullfrog.com/keys) \xB7 [Ask in Discord \u2192](https://discord.gg/8y96raFg8e)`
     ].join("\n");
   }
+  if (isKimiPlanTierError(params.raw)) {
+    return [
+      "**Your Kimi membership doesn't include the model this run asked for.** Kimi K3 needs a Moderato plan or above, and K3's 1M context and Kimi K2 HighSpeed need Allegretto or above. Upgrade the membership, or switch this repo to **Kimi K2**, which every tier includes.",
+      "",
+      `[Kimi plans \u2192](https://www.kimi.com/membership/pricing) \xB7 [Model settings \u2192](${settingsUrl}) \xB7 [Setup docs \u2192](https://docs.pullfrog.com/kimi-code) \xB7 [Ask in Discord \u2192](https://discord.gg/8y96raFg8e)`
+    ].join("\n");
+  }
   if (isOAuthCredentialExpiredError(params.raw)) {
     return [
       `**Your provider OAuth credential has expired or been revoked.** Re-authenticate the provider connection (e.g. \`pullfrog auth claude\` / \`pullfrog auth codex\` / \`pullfrog auth grok\`), then re-trigger the run.`,
@@ -197868,9 +198102,9 @@ function formatApiKeyErrorSummary(params) {
     ].join("\n");
   }
   return [
-    `**Your LLM provider API key was rejected.** Rotate the key in your provider dashboard, then update the matching GitHub Actions secret.`,
+    `**Your LLM provider API key was rejected.** Rotate the key in your provider dashboard, then update the copy Pullfrog uses \u2014 wherever you saved it.`,
     "",
-    `[Update repo secret \u2192](${githubSecretsUrl}) \xB7 [Model settings \u2192](${settingsUrl}) \xB7 [Setup docs \u2192](https://docs.pullfrog.com/keys) \xB7 [Ask in Discord \u2192](https://discord.gg/8y96raFg8e)`
+    `[Pullfrog secrets \u2192](${getApiUrl()}/console/${params.owner}) \xB7 [Repo secrets \u2192](${githubSecretsUrl}) \xB7 [Model settings \u2192](${settingsUrl}) \xB7 [Setup docs \u2192](https://docs.pullfrog.com/keys) \xB7 [Ask in Discord \u2192](https://discord.gg/8y96raFg8e)`
   ].join("\n");
 }
 
@@ -199096,6 +199330,9 @@ var DebugInput = type.enumerated("disabled", "enabled");
 var JsonPayload = type({
   "~pullfrog": "true",
   version: "string",
+  // the server's run type, forwarded verbatim to run-context. optional so a
+  // payload from an older server build still parses against a newer action.
+  "type?": "string | undefined",
   "model?": "string | undefined",
   "modelExplicit?": "boolean | undefined",
   "effort?": "number | string | undefined",
@@ -199581,7 +199818,8 @@ ${ctx.error}` : ctx.error;
     clamped: ctx.toolState.modelClamped,
     unselectedProxyDefault: ctx.toolState.unselectedProxyDefault,
     shaPinned: ctx.toolState.shaPinned,
-    oss: ctx.toolState.oss
+    oss: ctx.toolState.oss,
+    owner: repoContext.owner
   });
   const body = `${formattedError}${footer}`;
   const comment = ctx.toolState.progressComment;
@@ -199664,7 +199902,7 @@ async function mintProxyKey(ctx) {
   }
 }
 async function buildProxyTokenHeaders(ctx) {
-  const fundingSource = ctx.oss ? "oss" : "router";
+  const fundingSource = ctx.fundingSource;
   if (ctx.oidcCredentials) {
     const creds = ctx.oidcCredentials;
     const oidcToken = await op(() => fetchIdTokenFromStash(creds), {
@@ -199696,7 +199934,7 @@ async function resolveProxyModel(ctx) {
   const key = await mintProxyKey({
     oidcCredentials: ctx.oidcCredentials,
     repo: ctx.repo,
-    oss: ctx.oss
+    fundingSource: ctx.oss ? "oss" : "router"
   });
   if (!key) return;
   process.env.OPENROUTER_API_KEY = key;
@@ -199768,6 +200006,26 @@ async function runProxyResolution(ctx) {
     throw error62;
   }
 }
+async function resolveTrialFallback(ctx) {
+  if (process.env.PULLFROG_MODEL?.trim()) return false;
+  if (!ctx.oidcCredentials && !isLocalApiUrl()) return false;
+  const key = await mintProxyKey({
+    oidcCredentials: ctx.oidcCredentials,
+    repo: ctx.repo,
+    fundingSource: "trial"
+  });
+  if (!key) return false;
+  process.env.OPENROUTER_API_KEY = key;
+  core9.setSecret(key);
+  ctx.payload.proxyModel = DEFAULT_PROXY_MODEL;
+  ctx.toolState.model = DEFAULT_PROXY_MODEL;
+  ctx.toolState.modelClamped = {
+    from: ctx.configuredModel ?? DEFAULT_PROXY_MODEL,
+    reason: "trial"
+  };
+  log.info(`\xBB proxy: trial \u2192 ${DEFAULT_PROXY_MODEL}`);
+  return true;
+}
 
 // utils/prSummary.ts
 import { mkdir as mkdir3, readFile as readFile4, writeFile as writeFile3 } from "node:fs/promises";
@@ -199945,8 +200203,9 @@ async function fetchRunContext(params) {
     if (params.oidcToken) {
       headers["X-GitHub-OIDC-Token"] = params.oidcToken;
     }
+    const query = params.runType ? `?type=${encodeURIComponent(params.runType)}` : "";
     const response = await apiFetch({
-      path: `/api/repo/${params.repoContext.owner}/${params.repoContext.name}/run-context`,
+      path: `/api/repo/${params.repoContext.owner}/${params.repoContext.name}/run-context${query}`,
       headers,
       signal: controller.signal
     });
@@ -199983,7 +200242,8 @@ async function fetchRunContext(params) {
       proxyModel: data.proxyModel,
       dbSecrets: data.dbSecrets,
       secretsUnavailable: data.secretsUnavailable,
-      routerUnfunded: data.routerUnfunded
+      routerUnfunded: data.routerUnfunded,
+      trialFallback: data.trialFallback
     };
   } catch {
     clearTimeout(timeoutId);
@@ -200024,7 +200284,7 @@ async function resolveRunContextData(params) {
       retries: [100, 500],
       bail: (error62) => !isTransientOctokitError(error62)
     })(),
-    fetchRunContext({ token: params.token, repoContext, oidcToken })
+    fetchRunContext({ token: params.token, repoContext, oidcToken, runType: params.runType })
   ]);
   return {
     repo: {
@@ -200042,7 +200302,8 @@ async function resolveRunContextData(params) {
     // a failed mint on a runner that should have been able to mint is the same
     // outcome as the server-side failure: the run never sees stored secrets.
     secretsUnavailable: runContext.secretsUnavailable || !!process.env.ACTIONS_ID_TOKEN_REQUEST_URL && oidcToken === void 0,
-    routerUnfunded: runContext.routerUnfunded
+    routerUnfunded: runContext.routerUnfunded,
+    trialFallback: runContext.trialFallback
   };
 }
 
@@ -201122,7 +201383,11 @@ async function main() {
     resolveGit();
     const jobToken = getJobToken();
     const initialOctokit = createOctokit(jobToken);
-    const runContext = await resolveRunContextData({ octokit: initialOctokit, token: jobToken });
+    const runContext = await resolveRunContextData({
+      octokit: initialOctokit,
+      token: jobToken,
+      runType: typeof resolvedPromptInput === "string" ? void 0 : resolvedPromptInput.type
+    });
     timer.checkpoint("runContextData");
     const payload = resolvePayload(resolvedPromptInput, runContext.repoSettings);
     const toolState = initToolState({
@@ -201303,7 +201568,7 @@ async function main() {
         }
         const resolvedModel = credentials.kind === "fellBack" ? credentials.replacement : configuredModel;
         vertexCredentials = materializeVertexCredentials({ model: resolvedModel });
-        const agent2 = resolveAgent({
+        let agent2 = resolveAgent({
           model: resolvedModel,
           proxyModel: payload.proxyModel,
           // the account opt-in and the canary arm are both admissions to codex, so
@@ -201315,15 +201580,32 @@ async function main() {
         const effectiveModel = payload.proxyModel ?? resolvedModel ?? payload.model;
         toolState.model = effectiveModel;
         if (!payload.proxyModel) {
-          validateAgentApiKey({
-            agent: agent2,
-            model: effectiveModel,
-            authorized: getAuthorizedModels(),
-            owner: runContext.repo.owner,
-            name: runContext.repo.name,
-            secretsUnavailable: runContext.secretsUnavailable,
-            routerUnfunded: runContext.routerUnfunded
-          });
+          try {
+            validateAgentApiKey({
+              agent: agent2,
+              model: effectiveModel,
+              authorized: getAuthorizedModels(),
+              owner: runContext.repo.owner,
+              name: runContext.repo.name,
+              secretsUnavailable: runContext.secretsUnavailable,
+              routerUnfunded: runContext.routerUnfunded
+            });
+          } catch (missingKey) {
+            const funded = runContext.trialFallback && missingKey instanceof NoUsableCredentialError ? await resolveTrialFallback({
+              payload,
+              configuredModel: effectiveModel,
+              oidcCredentials,
+              repo: runContext.repo,
+              toolState
+            }) : false;
+            if (!funded) throw missingKey;
+            agent2 = resolveAgent({
+              model: resolvedModel,
+              proxyModel: payload.proxyModel,
+              codexAgent: runContext.repoSettings.codexAgent || payload.codexArm === true
+            });
+            toolState.agent = agent2.name;
+          }
         }
         await setupGit({
           gitToken: tokenRef.gitToken,