pullfrog 0.1.67 → 0.1.68

package/dist/cli.mjs

@@ -110208,6 +110208,7 @@ import { performance as performance5 } from "node:perf_hooks";
 
 // effort.ts
 var DEFAULT_EFFORT_POSITION = 0.5;
+var SUBSIDY_RUNG = "high";
 var EFFORT_ALIASES = {
   low: 0,
   medium: 0.25,
@@ -110611,6 +110612,15 @@ var providers = {
         // the model does cost nothing.
         isFree: true
       },
+      // Zen meters Fable like any other model, so this route reaches it without
+      // the Anthropic access grant `anthropic/claude-fable` still needs.
+      "claude-fable": {
+        displayName: "Claude Fable",
+        resolve: "opencode/claude-fable-5-1",
+        effort: ["low", "medium", "high", "xhigh", "max"],
+        openRouterResolve: "openrouter/~anthropic/claude-fable-latest",
+        subagentModel: "claude-sonnet"
+      },
       "claude-opus": {
         displayName: "Claude Opus",
         resolve: "opencode/claude-opus-5",
@@ -110724,6 +110734,17 @@ var providers = {
         effort: ["minimal", "low", "medium", "high"],
         openRouterResolve: "openrouter/google/gemini-3.6-flash"
       },
+      // Zen serves K3, but rule 7 can only move a mirror when its upstream moves,
+      // so the K3 generation could never reach this block by bumping `kimi-k2`.
+      "kimi-k3": {
+        displayName: "Kimi K3",
+        resolve: "opencode/kimi-k3",
+        // Zen publishes a single rung for K3 where OpenRouter publishes three.
+        effort: ["max"],
+        openRouterEffort: ["low", "high", "max"],
+        openRouterResolve: "openrouter/moonshotai/kimi-k3",
+        subagentModel: "kimi-k2"
+      },
       "kimi-k2": {
         displayName: "Kimi K2",
         // k2.7-code is UNDEPLOYED on Zen — still listed in /zen/v1/models, but
@@ -110735,25 +110756,58 @@ var providers = {
         resolve: "opencode/kimi-k2.6",
         openRouterResolve: "openrouter/moonshotai/kimi-k2.7-code"
       },
+      // M3 is its own line beside M2, not a bump of it — same reason `kimi-k3`
+      // sits beside `kimi-k2` rather than replacing it.
+      "minimax-m3": {
+        displayName: "MiniMax M3",
+        resolve: "opencode/minimax-m3",
+        openRouterResolve: "openrouter/minimax/minimax-m3"
+      },
       // slug pins the m2 line for DB stability; resolve tracks the current m2.7.
       "minimax-m2.5": {
         displayName: "MiniMax M2",
         resolve: "opencode/minimax-m2.7",
         openRouterResolve: "openrouter/minimax/minimax-m2.7"
       },
+      // Z.ai and xAI reach Zen subscribers only here — before this, `opencode-go`
+      // was the catalog's only GLM route, and Grok had no Zen route at all.
+      glm: {
+        displayName: "GLM",
+        resolve: "opencode/glm-5.2",
+        effort: ["high", "max"],
+        openRouterEffort: ["high", "xhigh"],
+        openRouterResolve: "openrouter/z-ai/glm-5.2"
+      },
+      grok: {
+        displayName: "Grok",
+        resolve: "opencode/grok-4.6",
+        effort: ["low", "medium", "high", "xhigh"],
+        openRouterResolve: "openrouter/x-ai/grok-4.6"
+      },
       "gpt-5-nano": {
         displayName: "GPT Nano",
         resolve: "opencode/gpt-5-nano",
         effort: ["minimal", "low", "medium", "high"],
         openRouterResolve: "openrouter/openai/gpt-5-nano"
       },
+      // Zen's live free MiMo, and the second free row in a menu that big-pickle
+      // was alone in since `mimo-v2-pro-free` lost its model.
+      mimo: {
+        displayName: "MiMo",
+        resolve: "opencode/mimo-v2.5-free",
+        // free to run, still gated on the provider's own OPENCODE_API_KEY —
+        // see the big-pickle note above (#1077).
+        isFree: true
+      },
       "mimo-v2-pro-free": {
         displayName: "MiMo V2 Pro",
         resolve: "opencode/mimo-v2-pro-free",
         // free to run, still gated on the provider's own OPENCODE_API_KEY —
         // see the big-pickle note above (#1077).
         isFree: true,
-        fallback: "opencode/big-pickle"
+        // the model id Zen dropped; land a stored MiMo pick back on MiMo rather
+        // than on the unrelated model it had to settle for while none was live.
+        fallback: "opencode/mimo"
       },
       "minimax-m2.5-free": {
         displayName: "MiniMax M2",
@@ -110848,6 +110902,16 @@ var providers = {
         resolve: "opencode-go/qwen3.7-plus",
         openRouterResolve: "openrouter/qwen/qwen3.7-plus"
       },
+      // the cheap rung Alibaba added under Plus (0.15/0.47 against 0.5/3), and
+      // the only model either OpenCode plan has added since this block was written.
+      "qwen-flash": {
+        displayName: "Qwen Flash",
+        resolve: "opencode-go/qwen3.8-flash",
+        effort: ["low", "medium", "xhigh"],
+        // the Go route publishes rungs where OpenRouter publishes none.
+        openRouterEffort: [],
+        openRouterResolve: "openrouter/qwen/qwen3.8-flash"
+      },
       // MiniMax — parity with opencode/* and openrouter/*; the m2 slug pins the
       // line for DB stability while the resolve tracks the current m2.7.
       "minimax-m3": {
@@ -111972,6 +112036,7 @@ async function installFromNpmTarball(params) {
 // utils/providerErrors.ts
 var PROVIDER_BILLING_EXHAUSTED_LABEL = "provider billing exhausted";
 var PROVIDER_NO_ENDPOINTS_LABEL = "provider no routable endpoints";
+var PROVIDER_USAGE_LIMIT_LABEL = "provider usage limit reached";
 var statusKey = `\\b(?:status[_ ]?code|http[_ ]?status|status)["']?\\s*[:=]\\s*["']?`;
 var ANTHROPIC_SPEND_CAP_PATTERN = /reached your specified API usage limits\.?(?:\s*You will regain access on ([^"\n]+?)\.)?/i;
 function findAnthropicSpendCap(text) {
@@ -112017,6 +112082,14 @@ var PROVIDER_ERROR_PATTERNS = [
   // the wallet-shaped patterns above reach, and its 400 sits nowhere near a
   // `status:` key either — so the whole message was dropped on the floor (#1208).
   { regex: ANTHROPIC_SPEND_CAP_PATTERN, label: PROVIDER_BILLING_EXHAUSTED_LABEL },
+  // OpenCode Zen / Codex-subscription cap: `AI_APICallError: The usage limit has
+  // been reached`. Its noun is "usage limit" with no "rate", no status code and
+  // no wallet wording, so every pattern here missed it and `lastProviderError`
+  // stayed unset — which suppresses nothing, so the run was reported as "The
+  // model produced no output at all … usually transient; re-running often
+  // succeeds" while the same log held nine of these. Measured on a live account
+  // whose ChatGPT subscription was capped.
+  { regex: /\bthe usage limit has been reached\b/i, label: PROVIDER_USAGE_LIMIT_LABEL },
   // the OpenRouter shapes `isRouterKeylimitExhaustedError` matches. on a Router
   // run those mean the PULLFROG wallet is empty and `renderRunError` returns a
   // `BillingError` before ever reaching this list; on a BYOK run the very same
@@ -112147,7 +112220,7 @@ function ossEffortFloor(ctx) {
   const alias = resolveRunAlias(ctx);
   const published = alias?.openRouterEffort ?? alias?.effort;
   if (!published) return 0;
-  return rungPosition({ rung: "high", published }) ?? 0;
+  return rungPosition({ rung: SUBSIDY_RUNG, published }) ?? 0;
 }
 function resolveRunEffort(ctx) {
   const configured = ctx.payload.effort !== void 0;
@@ -112179,7 +112252,7 @@ var import_semver = __toESM(require_semver2(), 1);
 // package.json
 var package_default = {
   name: "pullfrog",
-  version: "0.1.67",
+  version: "0.1.68",
   type: "module",
   bin: {
     pullfrog: "dist/cli.mjs",
@@ -194790,6 +194863,9 @@ function formatModelLabel(params) {
   if (params.fallbackFrom) {
     return `${base} (credentials for ${providerDisplayName(params.fallbackFrom)} were rejected by the provider)`;
   }
+  if (params.clamped?.reason === "trial") {
+    return `${base} (free trial)`;
+  }
   if (params.clamped) {
     const target = isAutoTier(params.clamped.from) ? "the intelligent tier" : `\`${resolveDisplayAlias(params.clamped.from)?.displayName ?? params.clamped.from}\``;
     return params.clamped.reason === "card" ? `${base} (${target} needs a [card on file](https://docs.pullfrog.com/models))` : `${base} (${target} needs a [provider key](https://docs.pullfrog.com/models) \u2014 no Router support yet)`;
@@ -194799,6 +194875,15 @@ function formatModelLabel(params) {
   }
   return base;
 }
+function buildTrialDisclosure(owner) {
+  const consoleUrl2 = owner ? `https://pullfrog.com/console/${owner}` : "https://pullfrog.com/console";
+  return [
+    "---",
+    "",
+    "> [!IMPORTANT]",
+    `> **This run used the free trial model.** \`DeepSeek Flash\` is fast and cheap \u2014 expect lighter work than a frontier model. [Connect a subscription or API key \u2192](${consoleUrl2})`
+  ].join("\n");
+}
 function buildPullfrogFooter(params) {
   const parts = [];
   if (params.shaPinned) {
@@ -194831,10 +194916,13 @@ function buildPullfrogFooter(params) {
     );
   }
   const allParts = [...parts, "[\u{1D54F}](https://x.com/pullfrogai)"];
+  const disclosure = params.clamped?.reason === "trial" ? `${buildTrialDisclosure(params.owner)}
+
+` : "";
   return `
 
 ${PULLFROG_DIVIDER}
-<sup>${FROG_LOGO}&nbsp;&nbsp;\uFF5C ${allParts.join(" \uFF5C ")}</sup>`;
+${disclosure}<sup>${FROG_LOGO}&nbsp;&nbsp;\uFF5C ${allParts.join(" \uFF5C ")}</sup>`;
 }
 function stripExistingFooter(body) {
   const dividerIndex = body.indexOf(PULLFROG_DIVIDER);
@@ -194988,7 +195076,8 @@ function buildCommentFooter(ctx, customParts) {
     clamped: ctx.toolState.modelClamped,
     unselectedProxyDefault: ctx.toolState.unselectedProxyDefault,
     shaPinned: ctx.toolState.shaPinned,
-    oss: ctx.oss
+    oss: ctx.oss,
+    owner: ctx.repo.owner
   });
 }
 function buildImplementPlanLink(ctx, issueNumber, commentId) {
@@ -195987,7 +196076,8 @@ async function createAndSubmitWithFooter(ctx, params, opts) {
       clamped: ctx.toolState.modelClamped,
       unselectedProxyDefault: ctx.toolState.unselectedProxyDefault,
       shaPinned: ctx.toolState.shaPinned,
-      oss: ctx.oss
+      oss: ctx.oss,
+      owner: ctx.repo.owner
     });
     return await ctx.octokit.rest.pulls.submitReview({
       owner: params.owner,
@@ -198748,7 +198838,8 @@ function buildPrBodyWithFooter(ctx, body) {
     clamped: ctx.toolState.modelClamped,
     unselectedProxyDefault: ctx.toolState.unselectedProxyDefault,
     shaPinned: ctx.toolState.shaPinned,
-    oss: ctx.oss
+    oss: ctx.oss,
+    owner: ctx.repo.owner
   });
   const bodyWithoutFooter = stripExistingFooter(fixDoubleEscapedString(body));
   return `${bodyWithoutFooter}${footer}`;
@@ -200055,10 +200146,12 @@ function isByokSetupError(text) {
 var SECRETS_UNAVAILABLE_MARKER = "couldn't load your Pullfrog secrets";
 var ROUTER_UNFUNDED_MARKER = "your Pullfrog Router balance is empty";
 var CREDENTIAL_REJECTED_MARKER = "was rejected by its provider";
-function buildKeyError(params) {
-  if (params.secretsUnavailable) return buildSecretsUnavailableError(params);
-  if (params.routerUnfunded) return buildRouterUnfundedError(params);
-  return buildMissingApiKeyError(params);
+var NoUsableCredentialError = class extends Error {
+};
+function throwKeyError(params) {
+  if (params.secretsUnavailable) throw new Error(buildSecretsUnavailableError(params));
+  if (params.routerUnfunded) throw new NoUsableCredentialError(buildRouterUnfundedError(params));
+  throw new NoUsableCredentialError(buildMissingApiKeyError(params));
 }
 function buildRouterUnfundedError(params) {
   const billingUrl = `${getApiUrl()}/console/${params.owner}#billing`;
@@ -200257,57 +200350,51 @@ function validateAgentApiKey(params) {
         validateVertexSetup({ owner: params.owner, name: params.name });
         return;
       }
-      validateBedrockSetup({ owner: params.owner, name: params.name });
-      return;
+      if (process.env[BEDROCK_MODEL_ID_ENV]?.trim() === params.model) {
+        validateBedrockSetup({ owner: params.owner, name: params.name });
+        return;
+      }
     }
     if (params.agent.name === "opencode") {
       if (params.authorized.has(params.model)) return;
       const reason = getModelsFailure();
       if (reason) throw new Error(reason);
       if (getModelEnvVars(params.model).some(hasEnvVar2)) return;
-      throw new Error(
-        buildKeyError({
-          owner: params.owner,
-          name: params.name,
-          model: params.model,
-          secretsUnavailable: params.secretsUnavailable,
-          routerUnfunded: params.routerUnfunded
-        })
-      );
-    }
-    if (hasSingleProviderAuth(params.agent.name)) return;
-    throw new Error(
-      buildKeyError({
+      throwKeyError({
         owner: params.owner,
         name: params.name,
         model: params.model,
         secretsUnavailable: params.secretsUnavailable,
         routerUnfunded: params.routerUnfunded
-      })
-    );
+      });
+    }
+    if (hasSingleProviderAuth(params.agent.name)) return;
+    throwKeyError({
+      owner: params.owner,
+      name: params.name,
+      model: params.model,
+      secretsUnavailable: params.secretsUnavailable,
+      routerUnfunded: params.routerUnfunded
+    });
   }
   if (params.agent.name === "opencode") {
     if ([...params.authorized].some(modelHasRuntimeAuth)) return;
     const reason = getModelsFailure();
     if (reason) throw new Error(reason);
-    throw new Error(
-      buildKeyError({
-        owner: params.owner,
-        name: params.name,
-        secretsUnavailable: params.secretsUnavailable,
-        routerUnfunded: params.routerUnfunded
-      })
-    );
-  }
-  if (hasSingleProviderAuth(params.agent.name)) return;
-  throw new Error(
-    buildKeyError({
+    throwKeyError({
       owner: params.owner,
       name: params.name,
       secretsUnavailable: params.secretsUnavailable,
       routerUnfunded: params.routerUnfunded
-    })
-  );
+    });
+  }
+  if (hasSingleProviderAuth(params.agent.name)) return;
+  throwKeyError({
+    owner: params.owner,
+    name: params.name,
+    secretsUnavailable: params.secretsUnavailable,
+    routerUnfunded: params.routerUnfunded
+  });
 }
 function isApiKeyAuthError(text) {
   if (!text) return false;
@@ -200432,9 +200519,9 @@ function formatApiKeyErrorSummary(params) {
     ].join("\n");
   }
   return [
-    `**Your LLM provider API key was rejected.** Rotate the key in your provider dashboard, then update the matching GitHub Actions secret.`,
+    `**Your LLM provider API key was rejected.** Rotate the key in your provider dashboard, then update the copy Pullfrog uses \u2014 wherever you saved it.`,
     "",
-    `[Update repo secret \u2192](${githubSecretsUrl}) \xB7 [Model settings \u2192](${settingsUrl}) \xB7 [Setup docs \u2192](https://docs.pullfrog.com/keys) \xB7 [Ask in Discord \u2192](https://discord.gg/8y96raFg8e)`
+    `[Pullfrog secrets \u2192](${getApiUrl()}/console/${params.owner}) \xB7 [Repo secrets \u2192](${githubSecretsUrl}) \xB7 [Model settings \u2192](${settingsUrl}) \xB7 [Setup docs \u2192](https://docs.pullfrog.com/keys) \xB7 [Ask in Discord \u2192](https://discord.gg/8y96raFg8e)`
   ].join("\n");
 }
 
@@ -201660,6 +201747,9 @@ var DebugInput = type.enumerated("disabled", "enabled");
 var JsonPayload = type({
   "~pullfrog": "true",
   version: "string",
+  // the server's run type, forwarded verbatim to run-context. optional so a
+  // payload from an older server build still parses against a newer action.
+  "type?": "string | undefined",
   "model?": "string | undefined",
   "modelExplicit?": "boolean | undefined",
   "effort?": "number | string | undefined",
@@ -202145,7 +202235,8 @@ ${ctx.error}` : ctx.error;
     clamped: ctx.toolState.modelClamped,
     unselectedProxyDefault: ctx.toolState.unselectedProxyDefault,
     shaPinned: ctx.toolState.shaPinned,
-    oss: ctx.toolState.oss
+    oss: ctx.toolState.oss,
+    owner: repoContext.owner
   });
   const body = `${formattedError}${footer}`;
   const comment = ctx.toolState.progressComment;
@@ -202228,7 +202319,7 @@ async function mintProxyKey(ctx) {
   }
 }
 async function buildProxyTokenHeaders(ctx) {
-  const fundingSource = ctx.oss ? "oss" : "router";
+  const fundingSource = ctx.fundingSource;
   if (ctx.oidcCredentials) {
     const creds = ctx.oidcCredentials;
     const oidcToken = await op(() => fetchIdTokenFromStash(creds), {
@@ -202260,7 +202351,7 @@ async function resolveProxyModel(ctx) {
   const key = await mintProxyKey({
     oidcCredentials: ctx.oidcCredentials,
     repo: ctx.repo,
-    oss: ctx.oss
+    fundingSource: ctx.oss ? "oss" : "router"
   });
   if (!key) return;
   process.env.OPENROUTER_API_KEY = key;
@@ -202332,6 +202423,26 @@ async function runProxyResolution(ctx) {
     throw error62;
   }
 }
+async function resolveTrialFallback(ctx) {
+  if (process.env.PULLFROG_MODEL?.trim()) return false;
+  if (!ctx.oidcCredentials && !isLocalApiUrl()) return false;
+  const key = await mintProxyKey({
+    oidcCredentials: ctx.oidcCredentials,
+    repo: ctx.repo,
+    fundingSource: "trial"
+  });
+  if (!key) return false;
+  process.env.OPENROUTER_API_KEY = key;
+  core9.setSecret(key);
+  ctx.payload.proxyModel = DEFAULT_PROXY_MODEL;
+  ctx.toolState.model = DEFAULT_PROXY_MODEL;
+  ctx.toolState.modelClamped = {
+    from: ctx.configuredModel ?? DEFAULT_PROXY_MODEL,
+    reason: "trial"
+  };
+  log2.info(`\xBB proxy: trial \u2192 ${DEFAULT_PROXY_MODEL}`);
+  return true;
+}
 
 // utils/prSummary.ts
 import { mkdir as mkdir3, readFile as readFile4, writeFile as writeFile3 } from "node:fs/promises";
@@ -202509,8 +202620,9 @@ async function fetchRunContext(params) {
     if (params.oidcToken) {
       headers["X-GitHub-OIDC-Token"] = params.oidcToken;
     }
+    const query = params.runType ? `?type=${encodeURIComponent(params.runType)}` : "";
     const response = await apiFetch({
-      path: `/api/repo/${params.repoContext.owner}/${params.repoContext.name}/run-context`,
+      path: `/api/repo/${params.repoContext.owner}/${params.repoContext.name}/run-context${query}`,
       headers,
       signal: controller.signal
     });
@@ -202547,7 +202659,8 @@ async function fetchRunContext(params) {
       proxyModel: data.proxyModel,
       dbSecrets: data.dbSecrets,
       secretsUnavailable: data.secretsUnavailable,
-      routerUnfunded: data.routerUnfunded
+      routerUnfunded: data.routerUnfunded,
+      trialFallback: data.trialFallback
     };
   } catch {
     clearTimeout(timeoutId);
@@ -202588,7 +202701,7 @@ async function resolveRunContextData(params) {
       retries: [100, 500],
       bail: (error62) => !isTransientOctokitError(error62)
     })(),
-    fetchRunContext({ token: params.token, repoContext, oidcToken })
+    fetchRunContext({ token: params.token, repoContext, oidcToken, runType: params.runType })
   ]);
   return {
     repo: {
@@ -202606,7 +202719,8 @@ async function resolveRunContextData(params) {
     // a failed mint on a runner that should have been able to mint is the same
     // outcome as the server-side failure: the run never sees stored secrets.
     secretsUnavailable: runContext.secretsUnavailable || !!process.env.ACTIONS_ID_TOKEN_REQUEST_URL && oidcToken === void 0,
-    routerUnfunded: runContext.routerUnfunded
+    routerUnfunded: runContext.routerUnfunded,
+    trialFallback: runContext.trialFallback
   };
 }
 
@@ -203686,7 +203800,11 @@ async function main() {
     resolveGit();
     const jobToken = getJobToken();
     const initialOctokit = createOctokit(jobToken);
-    const runContext = await resolveRunContextData({ octokit: initialOctokit, token: jobToken });
+    const runContext = await resolveRunContextData({
+      octokit: initialOctokit,
+      token: jobToken,
+      runType: typeof resolvedPromptInput === "string" ? void 0 : resolvedPromptInput.type
+    });
     timer.checkpoint("runContextData");
     const payload = resolvePayload(resolvedPromptInput, runContext.repoSettings);
     const toolState = initToolState({
@@ -203867,7 +203985,7 @@ async function main() {
         }
         const resolvedModel = credentials.kind === "fellBack" ? credentials.replacement : configuredModel;
         vertexCredentials = materializeVertexCredentials({ model: resolvedModel });
-        const agent2 = resolveAgent({
+        let agent2 = resolveAgent({
           model: resolvedModel,
           proxyModel: payload.proxyModel,
           // the account opt-in and the canary arm are both admissions to codex, so
@@ -203879,15 +203997,32 @@ async function main() {
         const effectiveModel = payload.proxyModel ?? resolvedModel ?? payload.model;
         toolState.model = effectiveModel;
         if (!payload.proxyModel) {
-          validateAgentApiKey({
-            agent: agent2,
-            model: effectiveModel,
-            authorized: getAuthorizedModels(),
-            owner: runContext.repo.owner,
-            name: runContext.repo.name,
-            secretsUnavailable: runContext.secretsUnavailable,
-            routerUnfunded: runContext.routerUnfunded
-          });
+          try {
+            validateAgentApiKey({
+              agent: agent2,
+              model: effectiveModel,
+              authorized: getAuthorizedModels(),
+              owner: runContext.repo.owner,
+              name: runContext.repo.name,
+              secretsUnavailable: runContext.secretsUnavailable,
+              routerUnfunded: runContext.routerUnfunded
+            });
+          } catch (missingKey) {
+            const funded = runContext.trialFallback && missingKey instanceof NoUsableCredentialError ? await resolveTrialFallback({
+              payload,
+              configuredModel: effectiveModel,
+              oidcCredentials,
+              repo: runContext.repo,
+              toolState
+            }) : false;
+            if (!funded) throw missingKey;
+            agent2 = resolveAgent({
+              model: resolvedModel,
+              proxyModel: payload.proxyModel,
+              codexAgent: runContext.repoSettings.codexAgent || payload.codexArm === true
+            });
+            toolState.agent = agent2.name;
+          }
         }
         await setupGit({
           gitToken: tokenRef.gitToken,
@@ -204797,7 +204932,7 @@ function resolveTarget(repo) {
   return { owner: match3[1], repo: match3[2] };
 }
 function cliVersion() {
-  const parts = /^(\d+)\.(\d+)\.(\d+)$/.exec("0.1.67");
+  const parts = /^(\d+)\.(\d+)\.(\d+)$/.exec("0.1.68");
   if (!parts) return "0.0.0";
   return `${Number(parts[1])}.${Number(parts[2])}.${Number(parts[3])}`;
 }
@@ -204964,7 +205099,7 @@ async function runCli5(input2) {
 }
 
 // cli.ts
-var VERSION10 = "0.1.67";
+var VERSION10 = "0.1.68";
 var bin = basename2(process.argv[1] || "");
 var PROG = bin === "pf" || bin === "pullfrog" ? bin : "pullfrog";
 var rawArgs = process.argv.slice(2);

package/dist/effort.d.ts

@@ -32,6 +32,16 @@ export type EffortPosition = number;
  * ran at before this setting existed.
  */
 export declare const DEFAULT_EFFORT_POSITION: EffortPosition;
+/**
+ * the rung a Pullfrog-subsidised OSS run is pinned to, whatever the repo or a
+ * per-kind-of-work row has stored — see `ossEffortFloor`, which spends it, and
+ * the console's Model card, which stops offering the control because of it.
+ *
+ * shared rather than written twice: the runtime pins the run and the console
+ * says so, and a console that names a different rung than the one that runs is
+ * the same class of bug as the Router opt-out the two surfaces disagreed on.
+ */
+export declare const SUBSIDY_RUNG = "high";
 /**
  * names we accept on user-facing surfaces (`--effort=`, the action input),
  * mapped to fixed points on the axis. these are a typing convenience, NOT an

package/dist/external.d.ts

@@ -50,7 +50,7 @@ export declare function findDanglingPromptToolRefs(params: {
     toolNames: string[];
 }): string[];
 export type { EffortPosition } from "./effort.ts";
-export { DEFAULT_EFFORT_POSITION, EFFORT_ALIASES, isEffortPosition, offeredRungs, parseEffortPosition, resolveRung, rungLabel, rungPosition, } from "./effort.ts";
+export { DEFAULT_EFFORT_POSITION, EFFORT_ALIASES, isEffortPosition, offeredRungs, parseEffortPosition, resolveRung, rungLabel, rungPosition, SUBSIDY_RUNG, } from "./effort.ts";
 export type { AutoTier, ModelAlias, ModelProvider, ProviderConfig } from "./models.ts";
 export { AUTO_EFFICIENT, AUTO_INTELLIGENT, DEFAULT_PROXY_MODEL, defaultAutoTier, getAutoSelectHintModel, getModelEffortLevels, getModelEnvVars, getModelManagedCredentials, getModelProvider, getProviderDisplayName, isAutoTier, isCardGatedModel, isOssAllowedModel, modelAliases, modelHasStoredAuth, OSS_MODEL_ALLOWLIST, OSS_RECOMMENDED_MODEL, ossFundedModelNames, parseModel, providers, resolveAutoTier, resolveCliModel, resolveDisplayAlias, resolveModelRung, resolveModelSlug, resolveOpenRouterModel, } from "./models.ts";
 export type ToolPermission = "disabled" | "enabled";
@@ -257,6 +257,14 @@ export interface WriteablePayload {
     "~pullfrog": true;
     /** semantic version of the payload to ensure compatibility */
     version: string;
+    /**
+     * which kind of work this run is (`pr-created`, `issue-created`, …). the
+     * server's own run-type vocabulary, opaque here: the action only forwards it
+     * to `run-context`, which resolves the repo's per-trigger model override
+     * against it. absent ⇒ the repo default, which is what every run got before
+     * overrides existed.
+     */
+    type?: string | undefined;
     /** provider/model slug (e.g. "anthropic/claude-opus") */
     model?: string | undefined;
     /**