pullfrog 0.1.67 → 0.1.68

package/dist/internal.js

@@ -2,6 +2,7 @@ import { createRequire as __createRequire } from 'module'; import { fileURLToPat
 
 // effort.ts
 var DEFAULT_EFFORT_POSITION = 0.5;
+var SUBSIDY_RUNG = "high";
 var EFFORT_ALIASES = {
   low: 0,
   medium: 0.25,
@@ -417,6 +418,15 @@ var providers = {
         // the model does cost nothing.
         isFree: true
       },
+      // Zen meters Fable like any other model, so this route reaches it without
+      // the Anthropic access grant `anthropic/claude-fable` still needs.
+      "claude-fable": {
+        displayName: "Claude Fable",
+        resolve: "opencode/claude-fable-5-1",
+        effort: ["low", "medium", "high", "xhigh", "max"],
+        openRouterResolve: "openrouter/~anthropic/claude-fable-latest",
+        subagentModel: "claude-sonnet"
+      },
       "claude-opus": {
         displayName: "Claude Opus",
         resolve: "opencode/claude-opus-5",
@@ -530,6 +540,17 @@ var providers = {
         effort: ["minimal", "low", "medium", "high"],
         openRouterResolve: "openrouter/google/gemini-3.6-flash"
       },
+      // Zen serves K3, but rule 7 can only move a mirror when its upstream moves,
+      // so the K3 generation could never reach this block by bumping `kimi-k2`.
+      "kimi-k3": {
+        displayName: "Kimi K3",
+        resolve: "opencode/kimi-k3",
+        // Zen publishes a single rung for K3 where OpenRouter publishes three.
+        effort: ["max"],
+        openRouterEffort: ["low", "high", "max"],
+        openRouterResolve: "openrouter/moonshotai/kimi-k3",
+        subagentModel: "kimi-k2"
+      },
       "kimi-k2": {
         displayName: "Kimi K2",
         // k2.7-code is UNDEPLOYED on Zen — still listed in /zen/v1/models, but
@@ -541,25 +562,58 @@ var providers = {
         resolve: "opencode/kimi-k2.6",
         openRouterResolve: "openrouter/moonshotai/kimi-k2.7-code"
       },
+      // M3 is its own line beside M2, not a bump of it — same reason `kimi-k3`
+      // sits beside `kimi-k2` rather than replacing it.
+      "minimax-m3": {
+        displayName: "MiniMax M3",
+        resolve: "opencode/minimax-m3",
+        openRouterResolve: "openrouter/minimax/minimax-m3"
+      },
       // slug pins the m2 line for DB stability; resolve tracks the current m2.7.
       "minimax-m2.5": {
         displayName: "MiniMax M2",
         resolve: "opencode/minimax-m2.7",
         openRouterResolve: "openrouter/minimax/minimax-m2.7"
       },
+      // Z.ai and xAI reach Zen subscribers only here — before this, `opencode-go`
+      // was the catalog's only GLM route, and Grok had no Zen route at all.
+      glm: {
+        displayName: "GLM",
+        resolve: "opencode/glm-5.2",
+        effort: ["high", "max"],
+        openRouterEffort: ["high", "xhigh"],
+        openRouterResolve: "openrouter/z-ai/glm-5.2"
+      },
+      grok: {
+        displayName: "Grok",
+        resolve: "opencode/grok-4.6",
+        effort: ["low", "medium", "high", "xhigh"],
+        openRouterResolve: "openrouter/x-ai/grok-4.6"
+      },
       "gpt-5-nano": {
         displayName: "GPT Nano",
         resolve: "opencode/gpt-5-nano",
         effort: ["minimal", "low", "medium", "high"],
         openRouterResolve: "openrouter/openai/gpt-5-nano"
       },
+      // Zen's live free MiMo, and the second free row in a menu that big-pickle
+      // was alone in since `mimo-v2-pro-free` lost its model.
+      mimo: {
+        displayName: "MiMo",
+        resolve: "opencode/mimo-v2.5-free",
+        // free to run, still gated on the provider's own OPENCODE_API_KEY —
+        // see the big-pickle note above (#1077).
+        isFree: true
+      },
       "mimo-v2-pro-free": {
         displayName: "MiMo V2 Pro",
         resolve: "opencode/mimo-v2-pro-free",
         // free to run, still gated on the provider's own OPENCODE_API_KEY —
         // see the big-pickle note above (#1077).
         isFree: true,
-        fallback: "opencode/big-pickle"
+        // the model id Zen dropped; land a stored MiMo pick back on MiMo rather
+        // than on the unrelated model it had to settle for while none was live.
+        fallback: "opencode/mimo"
       },
       "minimax-m2.5-free": {
         displayName: "MiniMax M2",
@@ -654,6 +708,16 @@ var providers = {
         resolve: "opencode-go/qwen3.7-plus",
         openRouterResolve: "openrouter/qwen/qwen3.7-plus"
       },
+      // the cheap rung Alibaba added under Plus (0.15/0.47 against 0.5/3), and
+      // the only model either OpenCode plan has added since this block was written.
+      "qwen-flash": {
+        displayName: "Qwen Flash",
+        resolve: "opencode-go/qwen3.8-flash",
+        effort: ["low", "medium", "xhigh"],
+        // the Go route publishes rungs where OpenRouter publishes none.
+        openRouterEffort: [],
+        openRouterResolve: "openrouter/qwen/qwen3.8-flash"
+      },
       // MiniMax — parity with opencode/* and openrouter/*; the m2 slug pins the
       // line for DB stability while the resolve tracks the current m2.7.
       "minimax-m3": {
@@ -1635,6 +1699,9 @@ function formatModelLabel(params) {
   if (params.fallbackFrom) {
     return `${base} (credentials for ${providerDisplayName(params.fallbackFrom)} were rejected by the provider)`;
   }
+  if (params.clamped?.reason === "trial") {
+    return `${base} (free trial)`;
+  }
   if (params.clamped) {
     const target = isAutoTier(params.clamped.from) ? "the intelligent tier" : `\`${resolveDisplayAlias(params.clamped.from)?.displayName ?? params.clamped.from}\``;
     return params.clamped.reason === "card" ? `${base} (${target} needs a [card on file](https://docs.pullfrog.com/models))` : `${base} (${target} needs a [provider key](https://docs.pullfrog.com/models) \u2014 no Router support yet)`;
@@ -1644,6 +1711,15 @@ function formatModelLabel(params) {
   }
   return base;
 }
+function buildTrialDisclosure(owner) {
+  const consoleUrl = owner ? `https://pullfrog.com/console/${owner}` : "https://pullfrog.com/console";
+  return [
+    "---",
+    "",
+    "> [!IMPORTANT]",
+    `> **This run used the free trial model.** \`DeepSeek Flash\` is fast and cheap \u2014 expect lighter work than a frontier model. [Connect a subscription or API key \u2192](${consoleUrl})`
+  ].join("\n");
+}
 function buildPullfrogFooter(params) {
   const parts = [];
   if (params.shaPinned) {
@@ -1676,10 +1752,13 @@ function buildPullfrogFooter(params) {
     );
   }
   const allParts = [...parts, "[\u{1D54F}](https://x.com/pullfrogai)"];
+  const disclosure = params.clamped?.reason === "trial" ? `${buildTrialDisclosure(params.owner)}
+
+` : "";
   return `
 
 ${PULLFROG_DIVIDER}
-<sup>${FROG_LOGO}&nbsp;&nbsp;\uFF5C ${allParts.join(" \uFF5C ")}</sup>`;
+${disclosure}<sup>${FROG_LOGO}&nbsp;&nbsp;\uFF5C ${allParts.join(" \uFF5C ")}</sup>`;
 }
 function stripExistingFooter(body) {
   const dividerIndex = body.indexOf(PULLFROG_DIVIDER);
@@ -2230,6 +2309,7 @@ export {
   OSS_RECOMMENDED_MODEL,
   PULLFROG_DIVIDER,
   RUN_STATUS_CHECK_NAME,
+  SUBSIDY_RUNG,
   TIMEOUT_DISABLED,
   buildPullfrogFooter,
   commercialPaywallBody,

package/dist/toolState.d.ts

@@ -144,7 +144,7 @@ export interface ToolState {
     unselectedProxyDefault?: boolean | undefined;
     modelClamped?: {
         from: string;
-        reason: "card" | "noRouterPath" | "oss";
+        reason: "card" | "noRouterPath" | "oss" | "trial";
     } | undefined;
     shaPinned?: boolean | undefined;
     oss?: boolean | undefined;

package/dist/utils/apiKeys.d.ts

@@ -49,6 +49,25 @@ export declare const ROUTER_UNFUNDED_MARKER = "your Pullfrog Router balance is e
  * hand that agent the ability to suppress every other error body.
  */
 export declare const CREDENTIAL_REJECTED_MARKER = "was rejected by its provider";
+/**
+ * Three ways to arrive at "the runner has no key", each with a different CTA:
+ * we couldn't read the key you stored, your Router wallet ran dry and you have
+ * no key of your own, or you genuinely have no key. Every throw site picks by
+ * these flags.
+ */
+/**
+ * Nothing in the environment can pay for this run — as distinct from a
+ * credential that IS configured but incompletely (the Bedrock/Vertex/Azure/
+ * OpenAI-compatible setup validators), an agent that could not start
+ * (`getModelsFailure`), or Pullfrog failing to hand its own secrets over.
+ *
+ * The trial fallback keys on this class, and that is the whole reason it
+ * exists: every other failure in `validateAgentApiKey` means the user HAS
+ * brought a key, so falling back would swap their model for a cheap one and
+ * swallow the message telling them what to fix.
+ */
+export declare class NoUsableCredentialError extends Error {
+}
 /**
  * Validate that the resolved model can actually be served by the chosen
  * agent. For routing slugs (Bedrock / Vertex) the auth shape is multi-var

package/dist/utils/billingErrors.d.ts

@@ -9,8 +9,7 @@
  * Actions job summary and the PR progress comment.
  *
  * Lives outside `main.ts` so adding a new error `code` branch is a one-file
- * edit that does not retrigger the full LLM CI matrix (`action/main.ts` is
- * in `action/test/coverage.ts::ALWAYS_RUN_ALL`).
+ * edit rather than an orchestrator edit (see wiki/main.md).
  */
 /**
  * Billing-layer error surfaced from `/api/proxy-token` as a 402. User-actionable,

package/dist/utils/buildPullfrogFooter.d.ts

@@ -36,7 +36,7 @@ export interface BuildPullfrogFooterParams {
      */
     clamped?: {
         from: string;
-        reason: "card" | "noRouterPath" | "oss";
+        reason: "card" | "noRouterPath" | "oss" | "trial";
     } | undefined;
     /**
      * true when the run used the default proxy model only because no model was
@@ -57,6 +57,9 @@ export interface BuildPullfrogFooterParams {
      * with the phrase linking to the OSS application page.
      */
     oss?: boolean | undefined;
+    /** repo owner, used to deep-link the trial disclosure at that account's own
+     * console rather than the generic landing page. */
+    owner?: string | undefined;
 }
 /**
  * build a pullfrog footer with configurable parts

package/dist/utils/payload.d.ts

@@ -4,6 +4,7 @@ export declare const JsonPayload: import("arktype/internal/variants/object.ts").
     "~pullfrog": true;
     version: string;
     prompt: string;
+    type?: string | undefined;
     model?: string | undefined;
     modelExplicit?: boolean | undefined;
     effort?: string | number | undefined;

package/dist/utils/providerErrors.d.ts

@@ -2,6 +2,14 @@
 export declare const PROVIDER_BILLING_EXHAUSTED_LABEL = "provider billing exhausted";
 /** Stable label for "OpenRouter can route this model nowhere you permit". */
 export declare const PROVIDER_NO_ENDPOINTS_LABEL = "provider no routable endpoints";
+/**
+ * A SUBSCRIPTION usage window that has run out, which is deliberately NOT
+ * `PROVIDER_BILLING_EXHAUSTED_LABEL`: that label routes to a body whose CTA is
+ * "Top up your provider balance", and a capped ChatGPT or Zen plan has no
+ * balance to top up — it resets on its own. This label carries the cause into
+ * the headline and lets the generic body stand.
+ */
+export declare const PROVIDER_USAGE_LIMIT_LABEL = "provider usage limit reached";
 export declare function findAnthropicSpendCap(text: string): {
     regainAt: string | null;
 } | null;

package/dist/utils/proxy.d.ts

@@ -44,3 +44,27 @@ export declare function runProxyResolution(ctx: {
     };
     toolState: ToolState;
 }): Promise<void>;
+/**
+ * Late fallback for a run inside the no-card trial whose own key search came up
+ * dry. Mints a Pullfrog-funded key on the efficient tier so a new account's
+ * first run produces a review rather than a credentials error.
+ *
+ * Deliberately runs AFTER `validateAgentApiKey` rather than beside the ordinary
+ * proxy resolution: the server grants permission but cannot see workflow `env:`
+ * keys, so only the runner knows whether anything else could have paid. Minting
+ * eagerly would silently downgrade every account whose key lives in GitHub
+ * Actions secrets.
+ *
+ * Returns false when the mint is unavailable (no OIDC, server declined), leaving
+ * the caller to raise the original missing-key error unchanged.
+ */
+export declare function resolveTrialFallback(ctx: {
+    payload: ResolvedPayload;
+    configuredModel: string | undefined;
+    oidcCredentials: OidcCredentials | null;
+    repo: {
+        owner: string;
+        name: string;
+    };
+    toolState: ToolState;
+}): Promise<boolean>;

package/dist/utils/runContext.d.ts

@@ -87,6 +87,10 @@ export interface RunContext {
      * funding state. see wiki/billing.md.
      */
     routerUnfunded?: boolean | undefined;
+    /** the account is inside its no-card trial and nothing else could fund this
+     * run — the runner may mint a subsidized efficient-tier key if, and only if,
+     * its own key search comes up dry. see the run-context route. */
+    trialFallback?: boolean | undefined;
 }
 /**
  * fetch run context from Pullfrog API
@@ -97,4 +101,7 @@ export declare function fetchRunContext(params: {
     token: string;
     repoContext: RepoContext;
     oidcToken?: string | undefined;
+    /** `payload.type` — lets the server apply this repo's per-trigger model
+     * override, which it cannot derive from owner/repo alone. */
+    runType?: string | undefined;
 }): Promise<RunContext>;

package/dist/utils/runContextData.d.ts

@@ -20,10 +20,19 @@ export interface RunContextData {
     /** the Router was declined because the wallet is empty. see
      * `RunContext.routerUnfunded`. */
     routerUnfunded?: boolean | undefined;
+    /** the account is inside its no-card trial and nothing else could fund this
+     * run, so the runner MAY mint a subsidized key on the efficient tier if its
+     * own key search comes up dry. a permission, not a routing decision — the
+     * server cannot see workflow `env:` keys. see `RunContext.trialFallback`. */
+    trialFallback?: boolean | undefined;
 }
 interface ResolveRunContextDataParams {
     octokit: OctokitWithPlugins;
     token: string;
+    /** the dispatch payload's run type, read before the payload is resolved
+     * because run-context is fetched first and needs it to pick this trigger's
+     * model override. */
+    runType?: string | undefined;
 }
 /**
  * true when the action is pinned to a full commit SHA (vs the moving `@v0`

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "pullfrog",
-  "version": "0.1.67",
+  "version": "0.1.68",
   "type": "module",
   "bin": {
     "pullfrog": "dist/cli.mjs",