pullfrog 0.1.67 → 0.1.69

package/dist/external.d.ts

@@ -50,7 +50,7 @@ export declare function findDanglingPromptToolRefs(params: {
     toolNames: string[];
 }): string[];
 export type { EffortPosition } from "./effort.ts";
-export { DEFAULT_EFFORT_POSITION, EFFORT_ALIASES, isEffortPosition, offeredRungs, parseEffortPosition, resolveRung, rungLabel, rungPosition, } from "./effort.ts";
+export { DEFAULT_EFFORT_POSITION, EFFORT_ALIASES, isEffortPosition, offeredRungs, parseEffortPosition, resolveRung, rungLabel, rungPosition, SUBSIDY_RUNG, } from "./effort.ts";
 export type { AutoTier, ModelAlias, ModelProvider, ProviderConfig } from "./models.ts";
 export { AUTO_EFFICIENT, AUTO_INTELLIGENT, DEFAULT_PROXY_MODEL, defaultAutoTier, getAutoSelectHintModel, getModelEffortLevels, getModelEnvVars, getModelManagedCredentials, getModelProvider, getProviderDisplayName, isAutoTier, isCardGatedModel, isOssAllowedModel, modelAliases, modelHasStoredAuth, OSS_MODEL_ALLOWLIST, OSS_RECOMMENDED_MODEL, ossFundedModelNames, parseModel, providers, resolveAutoTier, resolveCliModel, resolveDisplayAlias, resolveModelRung, resolveModelSlug, resolveOpenRouterModel, } from "./models.ts";
 export type ToolPermission = "disabled" | "enabled";
@@ -137,6 +137,15 @@ interface PullRequestReviewSubmittedEvent extends BasePayloadEvent {
     body: string | null;
     review_state: string;
     branch: string;
+    /**
+     * How far past the dispatching review this run may read: `all` on a
+     * Pullfrog-authored PR, `mentions` when only `@pullfrog`-mentioning threads
+     * are in scope. The server already computes this to decide whether to
+     * dispatch; forwarding it is what lets `get_review_comments` pick up the
+     * comments that land while the run is working. Optional so a payload from an
+     * older server build still parses against a newer action.
+     */
+    address_scope?: "all" | "mentions" | undefined;
 }
 interface PullRequestReviewCommentCreatedEvent extends BasePayloadEvent {
     trigger: "pull_request_review_comment_created";
@@ -257,6 +266,14 @@ export interface WriteablePayload {
     "~pullfrog": true;
     /** semantic version of the payload to ensure compatibility */
     version: string;
+    /**
+     * which kind of work this run is (`pr-created`, `issue-created`, …). the
+     * server's own run-type vocabulary, opaque here: the action only forwards it
+     * to `run-context`, which resolves the repo's per-trigger model override
+     * against it. absent ⇒ the repo default, which is what every run got before
+     * overrides existed.
+     */
+    type?: string | undefined;
     /** provider/model slug (e.g. "anthropic/claude-opus") */
     model?: string | undefined;
     /**

package/dist/index.js

@@ -107718,6 +107718,7 @@ import { performance as performance5 } from "node:perf_hooks";
 
 // effort.ts
 var DEFAULT_EFFORT_POSITION = 0.5;
+var SUBSIDY_RUNG = "high";
 var EFFORT_ALIASES = {
   low: 0,
   medium: 0.25,
@@ -108121,6 +108122,15 @@ var providers = {
         // the model does cost nothing.
         isFree: true
       },
+      // Zen meters Fable like any other model, so this route reaches it without
+      // the Anthropic access grant `anthropic/claude-fable` still needs.
+      "claude-fable": {
+        displayName: "Claude Fable",
+        resolve: "opencode/claude-fable-5-1",
+        effort: ["low", "medium", "high", "xhigh", "max"],
+        openRouterResolve: "openrouter/~anthropic/claude-fable-latest",
+        subagentModel: "claude-sonnet"
+      },
       "claude-opus": {
         displayName: "Claude Opus",
         resolve: "opencode/claude-opus-5",
@@ -108234,6 +108244,17 @@ var providers = {
         effort: ["minimal", "low", "medium", "high"],
         openRouterResolve: "openrouter/google/gemini-3.6-flash"
       },
+      // Zen serves K3, but rule 7 can only move a mirror when its upstream moves,
+      // so the K3 generation could never reach this block by bumping `kimi-k2`.
+      "kimi-k3": {
+        displayName: "Kimi K3",
+        resolve: "opencode/kimi-k3",
+        // Zen publishes a single rung for K3 where OpenRouter publishes three.
+        effort: ["max"],
+        openRouterEffort: ["low", "high", "max"],
+        openRouterResolve: "openrouter/moonshotai/kimi-k3",
+        subagentModel: "kimi-k2"
+      },
       "kimi-k2": {
         displayName: "Kimi K2",
         // k2.7-code is UNDEPLOYED on Zen — still listed in /zen/v1/models, but
@@ -108245,25 +108266,57 @@ var providers = {
         resolve: "opencode/kimi-k2.6",
         openRouterResolve: "openrouter/moonshotai/kimi-k2.7-code"
       },
+      // M3 is its own line beside M2, not a bump of it — same reason `kimi-k3`
+      // sits beside `kimi-k2` rather than replacing it.
+      "minimax-m3": {
+        displayName: "MiniMax M3",
+        resolve: "opencode/minimax-m3",
+        openRouterResolve: "openrouter/minimax/minimax-m3"
+      },
       // slug pins the m2 line for DB stability; resolve tracks the current m2.7.
       "minimax-m2.5": {
         displayName: "MiniMax M2",
         resolve: "opencode/minimax-m2.7",
         openRouterResolve: "openrouter/minimax/minimax-m2.7"
       },
+      // Z.ai and xAI reach Zen subscribers only here — before this, `opencode-go`
+      // was the catalog's only GLM route, and Grok had no Zen route at all.
+      glm: {
+        displayName: "GLM",
+        resolve: "opencode/glm-5.3",
+        effort: ["low", "high", "max"],
+        openRouterResolve: "openrouter/z-ai/glm-5.3"
+      },
+      grok: {
+        displayName: "Grok",
+        resolve: "opencode/grok-4.6",
+        effort: ["low", "medium", "high", "xhigh"],
+        openRouterResolve: "openrouter/x-ai/grok-4.6"
+      },
       "gpt-5-nano": {
         displayName: "GPT Nano",
         resolve: "opencode/gpt-5-nano",
         effort: ["minimal", "low", "medium", "high"],
         openRouterResolve: "openrouter/openai/gpt-5-nano"
       },
+      // Zen's live free MiMo, and the second free row in a menu that big-pickle
+      // was alone in since `mimo-v2-pro-free` lost its model.
+      mimo: {
+        displayName: "MiMo",
+        resolve: "opencode/mimo-v2.5-free",
+        // free to run, still gated on the provider's own OPENCODE_API_KEY —
+        // see the big-pickle note above (#1077).
+        isFree: true
+      },
       "mimo-v2-pro-free": {
         displayName: "MiMo V2 Pro",
         resolve: "opencode/mimo-v2-pro-free",
         // free to run, still gated on the provider's own OPENCODE_API_KEY —
         // see the big-pickle note above (#1077).
         isFree: true,
-        fallback: "opencode/big-pickle"
+        // the model id Zen dropped; land a stored MiMo pick back on MiMo rather
+        // than on the unrelated model it had to settle for while none was live.
+        fallback: "opencode/mimo"
       },
       "minimax-m2.5-free": {
         displayName: "MiniMax M2",
@@ -108279,10 +108332,11 @@ var providers = {
   // OpenCode Go is a separate $10/mo subscription from Zen, served on its own
   // base URL (`https://opencode.ai/zen/go/v1`) but authenticated with the SAME
   // `OPENCODE_API_KEY`. it carries the open-weight coding models plus a couple
-  // of frontier ones, and 14 of the ids below are served ONLY here — Zen's
-  // `/v1/models` does not list glm-5.3*, qwen3.7/3.8-*, mimo-*, longcat-2.0,
-  // hy3 or muse-spark. so for a Go subscriber this provider is not a duplicate
-  // route to Zen, it is the only route to most of what they pay for.
+  // of frontier ones, six of which are served ONLY here — Zen's `/v1/models`
+  // does not list qwen3.7/3.8-*, mimo-v2.5-pro, longcat-2.0 or hy3. (it listed
+  // no glm-5.3* either until 2026-09, which is why `opencode/glm` trailed on
+  // 5.2.) so for a Go subscriber this provider is not a duplicate route to Zen,
+  // it is the only route to a large part of what they pay for.
   // like `opencode` and `openrouter` this is a ROUTER, not a vendor: slugs and
   // display names mirror the upstream brand tier, and the picker groups them
   // under the upstream vendor.
@@ -108351,13 +108405,25 @@ var providers = {
         // `high` the Go route does not.
         effort: ["low", "medium", "xhigh"],
         openRouterEffort: ["minimal", "low", "medium", "high", "xhigh"],
-        openRouterResolve: "openrouter/qwen/qwen3.8-max"
+        // OpenRouter retired the rolling `qwen3.8-max` for a dated snapshot, so
+        // this side has to pin one; the Go route still carries the rolling id.
+        openRouterResolve: "openrouter/qwen/qwen3.8-max-0902"
       },
       "qwen-plus": {
         displayName: "Qwen Plus",
         resolve: "opencode-go/qwen3.7-plus",
         openRouterResolve: "openrouter/qwen/qwen3.7-plus"
       },
+      // the cheap rung Alibaba added under Plus (0.15/0.47 against 0.5/3), and
+      // the only model either OpenCode plan has added since this block was written.
+      "qwen-flash": {
+        displayName: "Qwen Flash",
+        resolve: "opencode-go/qwen3.8-flash",
+        effort: ["low", "medium", "xhigh"],
+        // the Go route publishes rungs where OpenRouter publishes none.
+        openRouterEffort: [],
+        openRouterResolve: "openrouter/qwen/qwen3.8-flash"
+      },
       // MiniMax — parity with opencode/* and openrouter/*; the m2 slug pins the
       // line for DB stability while the resolve tracks the current m2.7.
       "minimax-m3": {
@@ -109482,6 +109548,7 @@ async function installFromNpmTarball(params) {
 // utils/providerErrors.ts
 var PROVIDER_BILLING_EXHAUSTED_LABEL = "provider billing exhausted";
 var PROVIDER_NO_ENDPOINTS_LABEL = "provider no routable endpoints";
+var PROVIDER_USAGE_LIMIT_LABEL = "provider usage limit reached";
 var statusKey = `\\b(?:status[_ ]?code|http[_ ]?status|status)["']?\\s*[:=]\\s*["']?`;
 var ANTHROPIC_SPEND_CAP_PATTERN = /reached your specified API usage limits\.?(?:\s*You will regain access on ([^"\n]+?)\.)?/i;
 function findAnthropicSpendCap(text) {
@@ -109527,6 +109594,14 @@ var PROVIDER_ERROR_PATTERNS = [
   // the wallet-shaped patterns above reach, and its 400 sits nowhere near a
   // `status:` key either — so the whole message was dropped on the floor (#1208).
   { regex: ANTHROPIC_SPEND_CAP_PATTERN, label: PROVIDER_BILLING_EXHAUSTED_LABEL },
+  // OpenCode Zen / Codex-subscription cap: `AI_APICallError: The usage limit has
+  // been reached`. Its noun is "usage limit" with no "rate", no status code and
+  // no wallet wording, so every pattern here missed it and `lastProviderError`
+  // stayed unset — which suppresses nothing, so the run was reported as "The
+  // model produced no output at all … usually transient; re-running often
+  // succeeds" while the same log held nine of these. Measured on a live account
+  // whose ChatGPT subscription was capped.
+  { regex: /\bthe usage limit has been reached\b/i, label: PROVIDER_USAGE_LIMIT_LABEL },
   // the OpenRouter shapes `isRouterKeylimitExhaustedError` matches. on a Router
   // run those mean the PULLFROG wallet is empty and `renderRunError` returns a
   // `BillingError` before ever reaching this list; on a BYOK run the very same
@@ -109657,7 +109732,7 @@ function ossEffortFloor(ctx) {
   const alias = resolveRunAlias(ctx);
   const published = alias?.openRouterEffort ?? alias?.effort;
   if (!published) return 0;
-  return rungPosition({ rung: "high", published }) ?? 0;
+  return rungPosition({ rung: SUBSIDY_RUNG, published }) ?? 0;
 }
 function resolveRunEffort(ctx) {
   const configured = ctx.payload.effort !== void 0;
@@ -109689,7 +109764,7 @@ var import_semver = __toESM(require_semver2(), 1);
 // package.json
 var package_default = {
   name: "pullfrog",
-  version: "0.1.67",
+  version: "0.1.69",
   type: "module",
   bin: {
     pullfrog: "dist/cli.mjs",
@@ -110496,6 +110571,7 @@ For simple, well-defined tasks, skip the plan phase and go straight to build.`
    - record what was done (or why nothing was done)
 
 5. Quality check:
+   - re-call \`${t("get_review_comments")}\` with \`fresh: true\` before committing: reviewers keep commenting while you work, and any thread it now returns that you have not addressed is in scope for this run.
    - test changes, then review the diff before committing \u2014 verify only intended changes are present, no debug artifacts remain, no fix turned out to be bloat in context (revert any that did), and the changes are clean enough that a senior engineer would approve without hesitation
    - ${commitStep}
 
@@ -110505,7 +110581,7 @@ For simple, well-defined tasks, skip the plan phase and go straight to build.`
    - **once the fix is live on the remote**, for each thread you acted on:
      - reply ONCE via \`${t("reply_to_review_comment")}\`. The \`comment_id\` parameter takes the root comment's numeric \`id=\` (from the first \`comment author=...\` tag in the \`${t("get_review_comments")}\` output) \u2014 NOT the \`thread=\` value; that's a separate GraphQL ID used by resolve. The runtime dedupes identical bodies within a session.
      - **immediately** call \`${t("resolve_review_thread")}\` with that thread's \`thread=\` value as \`thread_id\`. Resolve every thread where you (a) made the requested code change in full \u2014 partial fixes leave the thread open \u2014 OR (b) replied with a substantive answer the user explicitly asked for. Do NOT resolve threads where you pushed back on the request and the disagreement is unresolved; leave those open for the human to mediate.
-   - call \`${t("report_progress")}\` with a brief summary`
+   - call \`${t("report_progress")}\` with a brief summary. If your last \`${t("get_review_comments")}\` turned up threads you did not address, name them there \u2014 a review arriving this late is suppressed as a duplicate and nothing else will pick it up.`
     },
     // Review and IncrementalReview route the minimum reviewfrog specialists
     // needed to cover unresolved, disposition-changing hypotheses. Most runs
@@ -192373,6 +192449,9 @@ function formatModelLabel(params) {
   if (params.fallbackFrom) {
     return `${base} (credentials for ${providerDisplayName(params.fallbackFrom)} were rejected by the provider)`;
   }
+  if (params.clamped?.reason === "trial") {
+    return `${base} (free trial)`;
+  }
   if (params.clamped) {
     const target = isAutoTier(params.clamped.from) ? "the intelligent tier" : `\`${resolveDisplayAlias(params.clamped.from)?.displayName ?? params.clamped.from}\``;
     return params.clamped.reason === "card" ? `${base} (${target} needs a [card on file](https://docs.pullfrog.com/models))` : `${base} (${target} needs a [provider key](https://docs.pullfrog.com/models) \u2014 no Router support yet)`;
@@ -192382,6 +192461,15 @@ function formatModelLabel(params) {
   }
   return base;
 }
+function buildTrialDisclosure(owner) {
+  const consoleUrl = owner ? `https://pullfrog.com/console/${owner}` : "https://pullfrog.com/console";
+  return [
+    "---",
+    "",
+    "> [!IMPORTANT]",
+    `> **This run used the free trial model.** \`DeepSeek Flash\` is fast and cheap \u2014 expect lighter work than a frontier model. [Connect a subscription or API key \u2192](${consoleUrl})`
+  ].join("\n");
+}
 function buildPullfrogFooter(params) {
   const parts = [];
   if (params.shaPinned) {
@@ -192414,10 +192502,13 @@ function buildPullfrogFooter(params) {
     );
   }
   const allParts = [...parts, "[\u{1D54F}](https://x.com/pullfrogai)"];
+  const disclosure = params.clamped?.reason === "trial" ? `${buildTrialDisclosure(params.owner)}
+
+` : "";
   return `
 
 ${PULLFROG_DIVIDER}
-<sup>${FROG_LOGO}&nbsp;&nbsp;\uFF5C ${allParts.join(" \uFF5C ")}</sup>`;
+${disclosure}<sup>${FROG_LOGO}&nbsp;&nbsp;\uFF5C ${allParts.join(" \uFF5C ")}</sup>`;
 }
 function stripExistingFooter(body) {
   const dividerIndex = body.indexOf(PULLFROG_DIVIDER);
@@ -192571,7 +192662,8 @@ function buildCommentFooter(ctx, customParts) {
     clamped: ctx.toolState.modelClamped,
     unselectedProxyDefault: ctx.toolState.unselectedProxyDefault,
     shaPinned: ctx.toolState.shaPinned,
-    oss: ctx.oss
+    oss: ctx.oss,
+    owner: ctx.repo.owner
   });
 }
 function buildImplementPlanLink(ctx, issueNumber, commentId) {
@@ -193570,7 +193662,8 @@ async function createAndSubmitWithFooter(ctx, params, opts) {
       clamped: ctx.toolState.modelClamped,
       unselectedProxyDefault: ctx.toolState.unselectedProxyDefault,
       shaPinned: ctx.toolState.shaPinned,
-      oss: ctx.oss
+      oss: ctx.oss,
+      owner: ctx.repo.owner
     });
     return await ctx.octokit.rest.pulls.submitReview({
       owner: params.owner,
@@ -196331,7 +196424,8 @@ function buildPrBodyWithFooter(ctx, body) {
     clamped: ctx.toolState.modelClamped,
     unselectedProxyDefault: ctx.toolState.unselectedProxyDefault,
     shaPinned: ctx.toolState.shaPinned,
-    oss: ctx.oss
+    oss: ctx.oss,
+    owner: ctx.repo.owner
   });
   const bodyWithoutFooter = stripExistingFooter(fixDoubleEscapedString(body));
   return `${bodyWithoutFooter}${footer}`;
@@ -196666,7 +196760,10 @@ function extractFromFilePatches(hunks, startLine, endLine, side) {
 }
 var GetReviewComments = type({
   pull_number: type.number.describe("The pull request number"),
-  review_id: type.number.describe("The review ID to get comments for")
+  review_id: type.number.describe("The review ID to get comments for"),
+  "fresh?": type.boolean.describe(
+    "Bypass the 60s thread cache. Use for the re-read before committing, so comments that landed while you worked are actually seen; leave unset otherwise."
+  )
 });
 function hasThumbsUpFrom(comment, username) {
   if (!comment.reactionGroups) return false;
@@ -196700,7 +196797,7 @@ function formatReviewThreads(threadBlocks, header) {
   }
   const lines = [];
   lines.push(
-    `# Review Threads (${threadBlocks.length}) for PR #${header.pullNumber} - Review ${header.reviewId} by ${header.reviewer}`
+    `# Open Threads (${threadBlocks.length}) on PR #${header.pullNumber} - dispatched by Review ${header.reviewId} from ${header.reviewer}`
   );
   lines.push("");
   if (threadBlocks.length > 0) {
@@ -196841,11 +196938,27 @@ async function getReviewThreads(input2) {
     if (!thread?.comments?.nodes) return false;
     return thread.comments.nodes.some((c) => c?.pullRequestReview?.databaseId === input2.reviewId);
   });
-  if (!input2.approvedBy) {
-    return threadsForReview;
+  if (input2.approvedBy) {
+    const username = input2.approvedBy;
+    return threadsForReview.filter((thread) => threadHasThumbsUpFrom(thread, username));
   }
-  const username = input2.approvedBy;
-  return threadsForReview.filter((thread) => threadHasThumbsUpFrom(thread, username));
+  if (!input2.addressScope) return threadsForReview;
+  return [...threadsForReview, ...concurrentThreads(allThreads, threadsForReview, input2)];
+}
+function concurrentThreads(allThreads, threadsForReview, input2) {
+  const alreadyIncluded = new Set(threadsForReview.map((thread) => thread.id));
+  return allThreads.filter((thread) => {
+    if (!thread?.comments?.nodes || alreadyIncluded.has(thread.id)) return false;
+    if (thread.isResolved) return false;
+    const comments = thread.comments.nodes.filter((c) => c !== null);
+    if (comments.length === 0) return false;
+    if (comments.some((c) => isPullfrog(c.author?.login))) return false;
+    return input2.addressScope === "all" || comments.some((c) => mentionsPullfrog(c.body));
+  });
+}
+function mentionsPullfrog(body) {
+  if (!body) return false;
+  return body.split(/\r?\n/).filter((line) => !line.trim().startsWith(">")).join("\n").toLowerCase().includes("@pullfrog");
 }
 function formatReviewData(input2) {
   const rawReviewBody = input2.review.body;
@@ -196942,6 +197055,7 @@ function GetReviewCommentsTool(ctx) {
     parameters: GetReviewComments,
     execute: execute(async (params) => {
       const approvedBy = ctx.payload.event.trigger === "fix_review" && ctx.payload.event.approved_only ? ctx.payload.triggerer : void 0;
+      if (params.fresh) invalidateReviewThreadCache(ctx.repo);
       const result = await getReviewData({
         octokit: ctx.octokit,
         owner: ctx.repo.owner,
@@ -196949,6 +197063,7 @@ function GetReviewCommentsTool(ctx) {
         pullNumber: params.pull_number,
         reviewId: params.review_id,
         approvedBy,
+        addressScope: ctx.payload.event.address_scope,
         tmpdir: ctx.tmpdir,
         githubToken: ctx.githubInstallationToken
       });
@@ -196979,7 +197094,7 @@ function GetReviewCommentsTool(ctx) {
         threadCount: threadBlocks.length,
         commentsPath,
         toc: formatted.toc,
-        instructions: `the file at commentsPath contains ${threadBlocks.length} review threads with full conversation history. comments marked with * are from the target review (${params.review_id}). the TOC shows each thread's file:line and the line number where it appears in the file. to read a specific thread, use: grep -A 50 "^## <file:line>" ${commentsPath} (replace <file:line> with the path from the TOC, e.g. "^## action/utils/foo.ts:42"). address each thread in order, working through one file at a time.`
+        instructions: `the file at commentsPath contains ${threadBlocks.length} review threads with full conversation history. comments marked with * are from the target review (${params.review_id}); any other thread is open feedback on this PR that is also yours to address, including comments that landed after this run started. the TOC shows each thread's file:line and the line number where it appears in the file. to read a specific thread, use: grep -A 50 "^## <file:line>" ${commentsPath} (replace <file:line> with the path from the TOC, e.g. "^## action/utils/foo.ts:42"). address each thread in order, working through one file at a time.`
       };
     })
   });
@@ -197638,10 +197753,12 @@ function isByokSetupError(text) {
 var SECRETS_UNAVAILABLE_MARKER = "couldn't load your Pullfrog secrets";
 var ROUTER_UNFUNDED_MARKER = "your Pullfrog Router balance is empty";
 var CREDENTIAL_REJECTED_MARKER = "was rejected by its provider";
-function buildKeyError(params) {
-  if (params.secretsUnavailable) return buildSecretsUnavailableError(params);
-  if (params.routerUnfunded) return buildRouterUnfundedError(params);
-  return buildMissingApiKeyError(params);
+var NoUsableCredentialError = class extends Error {
+};
+function throwKeyError(params) {
+  if (params.secretsUnavailable) throw new Error(buildSecretsUnavailableError(params));
+  if (params.routerUnfunded) throw new NoUsableCredentialError(buildRouterUnfundedError(params));
+  throw new NoUsableCredentialError(buildMissingApiKeyError(params));
 }
 function buildRouterUnfundedError(params) {
   const billingUrl = `${getApiUrl()}/console/${params.owner}#billing`;
@@ -197840,57 +197957,51 @@ function validateAgentApiKey(params) {
         validateVertexSetup({ owner: params.owner, name: params.name });
         return;
       }
-      validateBedrockSetup({ owner: params.owner, name: params.name });
-      return;
+      if (process.env[BEDROCK_MODEL_ID_ENV]?.trim() === params.model) {
+        validateBedrockSetup({ owner: params.owner, name: params.name });
+        return;
+      }
     }
     if (params.agent.name === "opencode") {
       if (params.authorized.has(params.model)) return;
       const reason = getModelsFailure();
       if (reason) throw new Error(reason);
       if (getModelEnvVars(params.model).some(hasEnvVar2)) return;
-      throw new Error(
-        buildKeyError({
-          owner: params.owner,
-          name: params.name,
-          model: params.model,
-          secretsUnavailable: params.secretsUnavailable,
-          routerUnfunded: params.routerUnfunded
-        })
-      );
-    }
-    if (hasSingleProviderAuth(params.agent.name)) return;
-    throw new Error(
-      buildKeyError({
+      throwKeyError({
         owner: params.owner,
         name: params.name,
         model: params.model,
         secretsUnavailable: params.secretsUnavailable,
         routerUnfunded: params.routerUnfunded
-      })
-    );
+      });
+    }
+    if (hasSingleProviderAuth(params.agent.name)) return;
+    throwKeyError({
+      owner: params.owner,
+      name: params.name,
+      model: params.model,
+      secretsUnavailable: params.secretsUnavailable,
+      routerUnfunded: params.routerUnfunded
+    });
   }
   if (params.agent.name === "opencode") {
     if ([...params.authorized].some(modelHasRuntimeAuth)) return;
     const reason = getModelsFailure();
     if (reason) throw new Error(reason);
-    throw new Error(
-      buildKeyError({
-        owner: params.owner,
-        name: params.name,
-        secretsUnavailable: params.secretsUnavailable,
-        routerUnfunded: params.routerUnfunded
-      })
-    );
-  }
-  if (hasSingleProviderAuth(params.agent.name)) return;
-  throw new Error(
-    buildKeyError({
+    throwKeyError({
       owner: params.owner,
       name: params.name,
       secretsUnavailable: params.secretsUnavailable,
       routerUnfunded: params.routerUnfunded
-    })
-  );
+    });
+  }
+  if (hasSingleProviderAuth(params.agent.name)) return;
+  throwKeyError({
+    owner: params.owner,
+    name: params.name,
+    secretsUnavailable: params.secretsUnavailable,
+    routerUnfunded: params.routerUnfunded
+  });
 }
 function isApiKeyAuthError(text) {
   if (!text) return false;
@@ -198015,9 +198126,9 @@ function formatApiKeyErrorSummary(params) {
     ].join("\n");
   }
   return [
-    `**Your LLM provider API key was rejected.** Rotate the key in your provider dashboard, then update the matching GitHub Actions secret.`,
+    `**Your LLM provider API key was rejected.** Rotate the key in your provider dashboard, then update the copy Pullfrog uses \u2014 wherever you saved it.`,
     "",
-    `[Update repo secret \u2192](${githubSecretsUrl}) \xB7 [Model settings \u2192](${settingsUrl}) \xB7 [Setup docs \u2192](https://docs.pullfrog.com/keys) \xB7 [Ask in Discord \u2192](https://discord.gg/8y96raFg8e)`
+    `[Pullfrog secrets \u2192](${getApiUrl()}/console/${params.owner}) \xB7 [Repo secrets \u2192](${githubSecretsUrl}) \xB7 [Model settings \u2192](${settingsUrl}) \xB7 [Setup docs \u2192](https://docs.pullfrog.com/keys) \xB7 [Ask in Discord \u2192](https://discord.gg/8y96raFg8e)`
   ].join("\n");
 }
 
@@ -199243,6 +199354,9 @@ var DebugInput = type.enumerated("disabled", "enabled");
 var JsonPayload = type({
   "~pullfrog": "true",
   version: "string",
+  // the server's run type, forwarded verbatim to run-context. optional so a
+  // payload from an older server build still parses against a newer action.
+  "type?": "string | undefined",
   "model?": "string | undefined",
   "modelExplicit?": "boolean | undefined",
   "effort?": "number | string | undefined",
@@ -199728,7 +199842,8 @@ ${ctx.error}` : ctx.error;
     clamped: ctx.toolState.modelClamped,
     unselectedProxyDefault: ctx.toolState.unselectedProxyDefault,
     shaPinned: ctx.toolState.shaPinned,
-    oss: ctx.toolState.oss
+    oss: ctx.toolState.oss,
+    owner: repoContext.owner
   });
   const body = `${formattedError}${footer}`;
   const comment = ctx.toolState.progressComment;
@@ -199811,7 +199926,7 @@ async function mintProxyKey(ctx) {
   }
 }
 async function buildProxyTokenHeaders(ctx) {
-  const fundingSource = ctx.oss ? "oss" : "router";
+  const fundingSource = ctx.fundingSource;
   if (ctx.oidcCredentials) {
     const creds = ctx.oidcCredentials;
     const oidcToken = await op(() => fetchIdTokenFromStash(creds), {
@@ -199843,7 +199958,7 @@ async function resolveProxyModel(ctx) {
   const key = await mintProxyKey({
     oidcCredentials: ctx.oidcCredentials,
     repo: ctx.repo,
-    oss: ctx.oss
+    fundingSource: ctx.oss ? "oss" : "router"
   });
   if (!key) return;
   process.env.OPENROUTER_API_KEY = key;
@@ -199915,6 +200030,26 @@ async function runProxyResolution(ctx) {
     throw error62;
   }
 }
+async function resolveTrialFallback(ctx) {
+  if (process.env.PULLFROG_MODEL?.trim()) return false;
+  if (!ctx.oidcCredentials && !isLocalApiUrl()) return false;
+  const key = await mintProxyKey({
+    oidcCredentials: ctx.oidcCredentials,
+    repo: ctx.repo,
+    fundingSource: "trial"
+  });
+  if (!key) return false;
+  process.env.OPENROUTER_API_KEY = key;
+  core9.setSecret(key);
+  ctx.payload.proxyModel = DEFAULT_PROXY_MODEL;
+  ctx.toolState.model = DEFAULT_PROXY_MODEL;
+  ctx.toolState.modelClamped = {
+    from: ctx.configuredModel ?? DEFAULT_PROXY_MODEL,
+    reason: "trial"
+  };
+  log.info(`\xBB proxy: trial \u2192 ${DEFAULT_PROXY_MODEL}`);
+  return true;
+}
 
 // utils/prSummary.ts
 import { mkdir as mkdir3, readFile as readFile4, writeFile as writeFile3 } from "node:fs/promises";
@@ -200092,8 +200227,9 @@ async function fetchRunContext(params) {
     if (params.oidcToken) {
       headers["X-GitHub-OIDC-Token"] = params.oidcToken;
     }
+    const query = params.runType ? `?type=${encodeURIComponent(params.runType)}` : "";
     const response = await apiFetch({
-      path: `/api/repo/${params.repoContext.owner}/${params.repoContext.name}/run-context`,
+      path: `/api/repo/${params.repoContext.owner}/${params.repoContext.name}/run-context${query}`,
       headers,
       signal: controller.signal
     });
@@ -200130,7 +200266,8 @@ async function fetchRunContext(params) {
       proxyModel: data.proxyModel,
       dbSecrets: data.dbSecrets,
       secretsUnavailable: data.secretsUnavailable,
-      routerUnfunded: data.routerUnfunded
+      routerUnfunded: data.routerUnfunded,
+      trialFallback: data.trialFallback
     };
   } catch {
     clearTimeout(timeoutId);
@@ -200171,7 +200308,7 @@ async function resolveRunContextData(params) {
       retries: [100, 500],
       bail: (error62) => !isTransientOctokitError(error62)
     })(),
-    fetchRunContext({ token: params.token, repoContext, oidcToken })
+    fetchRunContext({ token: params.token, repoContext, oidcToken, runType: params.runType })
   ]);
   return {
     repo: {
@@ -200189,7 +200326,8 @@ async function resolveRunContextData(params) {
     // a failed mint on a runner that should have been able to mint is the same
     // outcome as the server-side failure: the run never sees stored secrets.
     secretsUnavailable: runContext.secretsUnavailable || !!process.env.ACTIONS_ID_TOKEN_REQUEST_URL && oidcToken === void 0,
-    routerUnfunded: runContext.routerUnfunded
+    routerUnfunded: runContext.routerUnfunded,
+    trialFallback: runContext.trialFallback
   };
 }
 
@@ -201269,7 +201407,11 @@ async function main() {
     resolveGit();
     const jobToken = getJobToken();
     const initialOctokit = createOctokit(jobToken);
-    const runContext = await resolveRunContextData({ octokit: initialOctokit, token: jobToken });
+    const runContext = await resolveRunContextData({
+      octokit: initialOctokit,
+      token: jobToken,
+      runType: typeof resolvedPromptInput === "string" ? void 0 : resolvedPromptInput.type
+    });
     timer.checkpoint("runContextData");
     const payload = resolvePayload(resolvedPromptInput, runContext.repoSettings);
     const toolState = initToolState({
@@ -201450,7 +201592,7 @@ async function main() {
         }
         const resolvedModel = credentials.kind === "fellBack" ? credentials.replacement : configuredModel;
         vertexCredentials = materializeVertexCredentials({ model: resolvedModel });
-        const agent2 = resolveAgent({
+        let agent2 = resolveAgent({
           model: resolvedModel,
           proxyModel: payload.proxyModel,
           // the account opt-in and the canary arm are both admissions to codex, so
@@ -201462,15 +201604,32 @@ async function main() {
         const effectiveModel = payload.proxyModel ?? resolvedModel ?? payload.model;
         toolState.model = effectiveModel;
         if (!payload.proxyModel) {
-          validateAgentApiKey({
-            agent: agent2,
-            model: effectiveModel,
-            authorized: getAuthorizedModels(),
-            owner: runContext.repo.owner,
-            name: runContext.repo.name,
-            secretsUnavailable: runContext.secretsUnavailable,
-            routerUnfunded: runContext.routerUnfunded
-          });
+          try {
+            validateAgentApiKey({
+              agent: agent2,
+              model: effectiveModel,
+              authorized: getAuthorizedModels(),
+              owner: runContext.repo.owner,
+              name: runContext.repo.name,
+              secretsUnavailable: runContext.secretsUnavailable,
+              routerUnfunded: runContext.routerUnfunded
+            });
+          } catch (missingKey) {
+            const funded = runContext.trialFallback && missingKey instanceof NoUsableCredentialError ? await resolveTrialFallback({
+              payload,
+              configuredModel: effectiveModel,
+              oidcCredentials,
+              repo: runContext.repo,
+              toolState
+            }) : false;
+            if (!funded) throw missingKey;
+            agent2 = resolveAgent({
+              model: resolvedModel,
+              proxyModel: payload.proxyModel,
+              codexAgent: runContext.repoSettings.codexAgent || payload.codexArm === true
+            });
+            toolState.agent = agent2.name;
+          }
         }
         await setupGit({
           gitToken: tokenRef.gitToken,