pullfrog 0.1.70 → 0.1.72

package/dist/cli.mjs

@@ -110414,9 +110414,9 @@ var providers = {
       },
       "gemini-flash": {
         displayName: "Gemini Flash",
-        resolve: "google/gemini-3.6-flash",
-        effort: ["minimal", "low", "medium", "high"],
-        openRouterResolve: "openrouter/google/gemini-3.6-flash"
+        resolve: "google/gemini-3.8-flash",
+        effort: ["low", "medium", "high"],
+        openRouterResolve: "openrouter/google/gemini-3.8-flash"
       }
     }
   }),
@@ -110744,9 +110744,9 @@ var providers = {
       },
       "gemini-flash": {
         displayName: "Gemini Flash",
-        resolve: "opencode/gemini-3.6-flash",
-        effort: ["minimal", "low", "medium", "high"],
-        openRouterResolve: "openrouter/google/gemini-3.6-flash"
+        resolve: "opencode/gemini-3.8-flash",
+        effort: ["low", "medium", "high"],
+        openRouterResolve: "openrouter/google/gemini-3.8-flash"
       },
       // Zen serves K3, but rule 7 can only move a mirror when its upstream moves,
       // so the K3 generation could never reach this block by bumping `kimi-k2`.
@@ -111174,10 +111174,9 @@ var providers = {
       "gemini-flash": {
         displayName: "Gemini Flash",
         resolve: "openrouter/~google/gemini-flash-latest",
-        // no `minimal` here, unlike the google/ and opencode/ entries for the
-        // same model: OpenRouter's floating `~google/gemini-flash-latest` stopped
-        // publishing that rung. mirroring it is not cosmetic — claude-code
-        // hard-errors on an out-of-range `--effort` before it calls the API.
+        // a floating pointer, not a pinned id — it already serves 3.8, so this
+        // entry tracks its siblings' generation bumps for free. the ladder still
+        // mirrors exactly: claude-code hard-errors on an out-of-range `--effort`.
         effort: ["low", "medium", "high"],
         openRouterResolve: "openrouter/~google/gemini-flash-latest"
       },
@@ -111291,8 +111290,8 @@ var providers = {
       },
       "gemini-flash": {
         displayName: "Gemini Flash",
-        resolve: "vercel/google/gemini-3.6-flash",
-        effort: ["minimal", "low", "medium", "high"]
+        resolve: "vercel/google/gemini-3.8-flash",
+        effort: ["low", "medium", "high"]
       },
       "deepseek-pro": {
         displayName: "DeepSeek Pro",
@@ -111311,7 +111310,8 @@ var providers = {
       },
       "kimi-k3": {
         displayName: "Kimi K3",
-        resolve: "vercel/moonshotai/kimi-k3"
+        resolve: "vercel/moonshotai/kimi-k3",
+        effort: ["low", "high", "max"]
       }
     }
   })
@@ -111347,6 +111347,10 @@ function getModelManagedCredentials(slug2) {
   const providerConfig = providers[parsed2.provider];
   return providerConfig?.managedCredentials?.slice() ?? [];
 }
+var CLAUDE_CODE_ONLY_CREDENTIALS = ["ANTHROPIC_AUTH_TOKEN", "CLAUDE_CODE_OAUTH_TOKEN"];
+function getOpenCodeEnvVars(slug2) {
+  return getModelEnvVars(slug2).filter((v) => !CLAUDE_CODE_ONLY_CREDENTIALS.includes(v));
+}
 var modelAliases = Object.entries(providers).flatMap(
   ([providerKey, config3]) => Object.entries(config3.models).map(([modelId, def]) => ({
     slug: `${providerKey}/${modelId}`,
@@ -112281,7 +112285,7 @@ var import_semver = __toESM(require_semver2(), 1);
 // package.json
 var package_default = {
   name: "pullfrog",
-  version: "0.1.70",
+  version: "0.1.72",
   type: "module",
   bin: {
     pullfrog: "dist/cli.mjs",
@@ -114320,6 +114324,11 @@ function installManagedSettings(params) {
     return false;
   }
 }
+function autoSelectClaudeModel() {
+  return modelAliases.find(
+    (a2) => a2.provider === "anthropic" && a2.preferred && !a2.hidden && !a2.fallback && !a2.routing
+  )?.resolve;
+}
 var claude = agent({
   name: "claude",
   install: installClaudeCli,
@@ -114327,7 +114336,8 @@ var claude = agent({
     var _stack = [];
     try {
       const cliPath = await installClaudeCli();
-      const specifier = ctx.payload.proxyModel ?? ctx.resolvedModel;
+      const specifier = ctx.payload.proxyModel ?? ctx.resolvedModel ?? autoSelectClaudeModel();
+      if (specifier) ctx.toolState.model = specifier;
       const bedrockModelId = process.env[BEDROCK_MODEL_ID_ENV]?.trim();
       const isBedrockRoute = specifier !== void 0 && bedrockModelId !== void 0 && bedrockModelId === specifier;
       const vertexModelId = process.env[VERTEX_MODEL_ID_ENV]?.trim();
@@ -114347,7 +114357,10 @@ var claude = agent({
       });
       installBundledSkills({ home: homeEnv.HOME });
       const mcpConfigPath = writeMcpConfig(ctx);
-      const effort = resolveRunEffort(ctx);
+      const effort = resolveRunEffort({ ...ctx, resolvedModel: specifier });
+      if (!ctx.resolvedModel && !ctx.payload.proxyModel) {
+        log2.info(`\xBB effort: ${effort.rung ?? "n/a (model has no effort control)"}`);
+      }
       const stopHookPath = join5(ctx.tmpdir, "pullfrog-stop-hook.sh");
       writeFileSync4(stopHookPath, buildStopHookScript(), { mode: 493 });
       const pretoolGate = writePretoolGateAssets({ ctx, stopHookPath });
@@ -120995,7 +121008,7 @@ function autoSelectModel() {
   const authorized2 = getAuthorizedModels();
   const selectable = modelAliases.filter((a2) => !a2.hidden && !a2.fallback && !a2.routing);
   const servable = selectable.filter((a2) => {
-    const envVars = getModelEnvVars(a2.resolve);
+    const envVars = getOpenCodeEnvVars(a2.resolve);
     return envVars.length === 0 || envVars.some((name) => process.env[name]);
   });
   const pick4 = (list) => list.find((a2) => a2.preferred) ?? list[0];
@@ -194895,7 +194908,7 @@ function formatModelLabel(params) {
     return `${base} (credentials for ${providerDisplayName(params.fallbackFrom)} were rejected by the provider)`;
   }
   if (params.clamped?.reason === "trial") {
-    return `${base} (free trial)`;
+    return `${base} (model usage covered by Pullfrog)`;
   }
   if (params.clamped) {
     const target = isAutoTier(params.clamped.from) ? "the intelligent tier" : `\`${resolveDisplayAlias(params.clamped.from)?.displayName ?? params.clamped.from}\``;
@@ -194912,7 +194925,7 @@ function buildTrialDisclosure(owner) {
     "---",
     "",
     "> [!IMPORTANT]",
-    `> **This run used the free trial model.** \`DeepSeek Flash\` is fast and cheap \u2014 expect lighter work than a frontier model. [Connect a subscription or API key \u2192](${consoleUrl2})`
+    `> **Pullfrog covered this run's model usage.** \`DeepSeek Flash\` is fast and cheap \u2014 expect lighter work than a frontier model. This model allowance is temporary and separate from your Pullfrog plan. [Connect a model-provider subscription or API key \u2192](${consoleUrl2})`
   ].join("\n");
 }
 function buildPullfrogFooter(params) {
@@ -200234,7 +200247,7 @@ function buildMissingApiKeyError(params) {
   const envVars = params.model?.includes("/") ? getModelEnvVars(params.model) : [];
   const [primary, ...alternates] = envVars;
   const envVarList = primary ? `\`${primary}\`${alternates.length > 0 ? ` (or ${alternates.map((v) => `\`${v}\``).join(" / ")})` : ""}` : void 0;
-  const lead = envVarList ? `**${MISSING_KEY_MARKER}** \u2014 this repo is configured to use \`${params.model}\`, which needs ${envVarList}, but the runner has no key for it.` : `**${MISSING_KEY_MARKER}** \u2014 Pullfrog needs at least one LLM provider API key (e.g. \`ANTHROPIC_API_KEY\`, \`OPENAI_API_KEY\`, \`GEMINI_API_KEY\`) configured as a GitHub Actions secret.`;
+  const lead = envVarList ? `**${MISSING_KEY_MARKER}** \u2014 this run used \`${params.model}\`, which needs ${envVarList}, but the runner has no key for it.` : `**${MISSING_KEY_MARKER}** \u2014 Pullfrog needs at least one LLM provider API key (e.g. \`ANTHROPIC_API_KEY\`, \`OPENAI_API_KEY\`, \`GEMINI_API_KEY\`) configured as a GitHub Actions secret.`;
   return [
     lead,
     "",
@@ -200317,7 +200330,7 @@ function hasEnvVar2(name) {
   return typeof value2 === "string" && value2.length > 0;
 }
 function modelHasRuntimeAuth(model) {
-  const authVars = [...getModelEnvVars(model), ...getModelManagedCredentials(model)];
+  const authVars = [...getOpenCodeEnvVars(model), ...getModelManagedCredentials(model)];
   return authVars.length === 0 || authVars.some(hasEnvVar2);
 }
 function hasPositiveNumberEnvVar(name) {
@@ -200411,7 +200424,7 @@ function validateAgentApiKey(params) {
       if (params.authorized.has(params.model)) return;
       const reason = getModelsFailure();
       if (reason) throw new Error(reason);
-      if (getModelEnvVars(params.model).some(hasEnvVar2)) return;
+      if (getOpenCodeEnvVars(params.model).some(hasEnvVar2)) return;
       throwKeyError({
         owner: params.owner,
         name: params.name,
@@ -200677,7 +200690,7 @@ function resolveAgent(ctx) {
     }
   }
   if (!ctx.model) {
-    if (hasEnvVar3("ANTHROPIC_AUTH_TOKEN") && !hasEnvVar3("ANTHROPIC_API_KEY") && !hasEnvVar3("CLAUDE_CODE_OAUTH_TOKEN")) {
+    if (!hasEnvVar3("ANTHROPIC_API_KEY") && CLAUDE_CODE_ONLY_CREDENTIALS.some(hasEnvVar3)) {
       return agents.claude;
     }
     if (ctx.codexAgent && hasCodexAuth() && !hasClaudeCodeAuth()) return agents.codex;
@@ -204984,7 +204997,7 @@ function resolveTarget(repo) {
   return { owner: match3[1], repo: match3[2] };
 }
 function cliVersion() {
-  const parts = /^(\d+)\.(\d+)\.(\d+)$/.exec("0.1.70");
+  const parts = /^(\d+)\.(\d+)\.(\d+)$/.exec("0.1.72");
   if (!parts) return "0.0.0";
   return `${Number(parts[1])}.${Number(parts[2])}.${Number(parts[3])}`;
 }
@@ -205151,7 +205164,7 @@ async function runCli5(input2) {
 }
 
 // cli.ts
-var VERSION10 = "0.1.70";
+var VERSION10 = "0.1.72";
 var bin = basename2(process.argv[1] || "");
 var PROG = bin === "pf" || bin === "pullfrog" ? bin : "pullfrog";
 var rawArgs = process.argv.slice(2);

package/dist/index.js

@@ -107924,9 +107924,9 @@ var providers = {
       },
       "gemini-flash": {
         displayName: "Gemini Flash",
-        resolve: "google/gemini-3.6-flash",
-        effort: ["minimal", "low", "medium", "high"],
-        openRouterResolve: "openrouter/google/gemini-3.6-flash"
+        resolve: "google/gemini-3.8-flash",
+        effort: ["low", "medium", "high"],
+        openRouterResolve: "openrouter/google/gemini-3.8-flash"
       }
     }
   }),
@@ -108254,9 +108254,9 @@ var providers = {
       },
       "gemini-flash": {
         displayName: "Gemini Flash",
-        resolve: "opencode/gemini-3.6-flash",
-        effort: ["minimal", "low", "medium", "high"],
-        openRouterResolve: "openrouter/google/gemini-3.6-flash"
+        resolve: "opencode/gemini-3.8-flash",
+        effort: ["low", "medium", "high"],
+        openRouterResolve: "openrouter/google/gemini-3.8-flash"
       },
       // Zen serves K3, but rule 7 can only move a mirror when its upstream moves,
       // so the K3 generation could never reach this block by bumping `kimi-k2`.
@@ -108684,10 +108684,9 @@ var providers = {
       "gemini-flash": {
         displayName: "Gemini Flash",
         resolve: "openrouter/~google/gemini-flash-latest",
-        // no `minimal` here, unlike the google/ and opencode/ entries for the
-        // same model: OpenRouter's floating `~google/gemini-flash-latest` stopped
-        // publishing that rung. mirroring it is not cosmetic — claude-code
-        // hard-errors on an out-of-range `--effort` before it calls the API.
+        // a floating pointer, not a pinned id — it already serves 3.8, so this
+        // entry tracks its siblings' generation bumps for free. the ladder still
+        // mirrors exactly: claude-code hard-errors on an out-of-range `--effort`.
         effort: ["low", "medium", "high"],
         openRouterResolve: "openrouter/~google/gemini-flash-latest"
       },
@@ -108801,8 +108800,8 @@ var providers = {
       },
       "gemini-flash": {
         displayName: "Gemini Flash",
-        resolve: "vercel/google/gemini-3.6-flash",
-        effort: ["minimal", "low", "medium", "high"]
+        resolve: "vercel/google/gemini-3.8-flash",
+        effort: ["low", "medium", "high"]
       },
       "deepseek-pro": {
         displayName: "DeepSeek Pro",
@@ -108821,7 +108820,8 @@ var providers = {
       },
       "kimi-k3": {
         displayName: "Kimi K3",
-        resolve: "vercel/moonshotai/kimi-k3"
+        resolve: "vercel/moonshotai/kimi-k3",
+        effort: ["low", "high", "max"]
       }
     }
   })
@@ -108857,6 +108857,10 @@ function getModelManagedCredentials(slug2) {
   const providerConfig = providers[parsed2.provider];
   return providerConfig?.managedCredentials?.slice() ?? [];
 }
+var CLAUDE_CODE_ONLY_CREDENTIALS = ["ANTHROPIC_AUTH_TOKEN", "CLAUDE_CODE_OAUTH_TOKEN"];
+function getOpenCodeEnvVars(slug2) {
+  return getModelEnvVars(slug2).filter((v) => !CLAUDE_CODE_ONLY_CREDENTIALS.includes(v));
+}
 var modelAliases = Object.entries(providers).flatMap(
   ([providerKey, config3]) => Object.entries(config3.models).map(([modelId, def]) => ({
     slug: `${providerKey}/${modelId}`,
@@ -109791,7 +109795,7 @@ var import_semver = __toESM(require_semver2(), 1);
 // package.json
 var package_default = {
   name: "pullfrog",
-  version: "0.1.70",
+  version: "0.1.72",
   type: "module",
   bin: {
     pullfrog: "dist/cli.mjs",
@@ -111830,6 +111834,11 @@ function installManagedSettings(params) {
     return false;
   }
 }
+function autoSelectClaudeModel() {
+  return modelAliases.find(
+    (a) => a.provider === "anthropic" && a.preferred && !a.hidden && !a.fallback && !a.routing
+  )?.resolve;
+}
 var claude = agent({
   name: "claude",
   install: installClaudeCli,
@@ -111837,7 +111846,8 @@ var claude = agent({
     var _stack = [];
     try {
       const cliPath = await installClaudeCli();
-      const specifier = ctx.payload.proxyModel ?? ctx.resolvedModel;
+      const specifier = ctx.payload.proxyModel ?? ctx.resolvedModel ?? autoSelectClaudeModel();
+      if (specifier) ctx.toolState.model = specifier;
       const bedrockModelId = process.env[BEDROCK_MODEL_ID_ENV]?.trim();
       const isBedrockRoute = specifier !== void 0 && bedrockModelId !== void 0 && bedrockModelId === specifier;
       const vertexModelId = process.env[VERTEX_MODEL_ID_ENV]?.trim();
@@ -111857,7 +111867,10 @@ var claude = agent({
       });
       installBundledSkills({ home: homeEnv.HOME });
       const mcpConfigPath = writeMcpConfig(ctx);
-      const effort = resolveRunEffort(ctx);
+      const effort = resolveRunEffort({ ...ctx, resolvedModel: specifier });
+      if (!ctx.resolvedModel && !ctx.payload.proxyModel) {
+        log.info(`\xBB effort: ${effort.rung ?? "n/a (model has no effort control)"}`);
+      }
       const stopHookPath = join4(ctx.tmpdir, "pullfrog-stop-hook.sh");
       writeFileSync3(stopHookPath, buildStopHookScript(), { mode: 493 });
       const pretoolGate = writePretoolGateAssets({ ctx, stopHookPath });
@@ -118578,7 +118591,7 @@ function autoSelectModel() {
   const authorized2 = getAuthorizedModels();
   const selectable = modelAliases.filter((a) => !a.hidden && !a.fallback && !a.routing);
   const servable = selectable.filter((a) => {
-    const envVars = getModelEnvVars(a.resolve);
+    const envVars = getOpenCodeEnvVars(a.resolve);
     return envVars.length === 0 || envVars.some((name) => process.env[name]);
   });
   const pick4 = (list) => list.find((a) => a.preferred) ?? list[0];
@@ -192478,7 +192491,7 @@ function formatModelLabel(params) {
     return `${base} (credentials for ${providerDisplayName(params.fallbackFrom)} were rejected by the provider)`;
   }
   if (params.clamped?.reason === "trial") {
-    return `${base} (free trial)`;
+    return `${base} (model usage covered by Pullfrog)`;
   }
   if (params.clamped) {
     const target = isAutoTier(params.clamped.from) ? "the intelligent tier" : `\`${resolveDisplayAlias(params.clamped.from)?.displayName ?? params.clamped.from}\``;
@@ -192495,7 +192508,7 @@ function buildTrialDisclosure(owner) {
     "---",
     "",
     "> [!IMPORTANT]",
-    `> **This run used the free trial model.** \`DeepSeek Flash\` is fast and cheap \u2014 expect lighter work than a frontier model. [Connect a subscription or API key \u2192](${consoleUrl})`
+    `> **Pullfrog covered this run's model usage.** \`DeepSeek Flash\` is fast and cheap \u2014 expect lighter work than a frontier model. This model allowance is temporary and separate from your Pullfrog plan. [Connect a model-provider subscription or API key \u2192](${consoleUrl})`
   ].join("\n");
 }
 function buildPullfrogFooter(params) {
@@ -197817,7 +197830,7 @@ function buildMissingApiKeyError(params) {
   const envVars = params.model?.includes("/") ? getModelEnvVars(params.model) : [];
   const [primary, ...alternates] = envVars;
   const envVarList = primary ? `\`${primary}\`${alternates.length > 0 ? ` (or ${alternates.map((v) => `\`${v}\``).join(" / ")})` : ""}` : void 0;
-  const lead = envVarList ? `**${MISSING_KEY_MARKER}** \u2014 this repo is configured to use \`${params.model}\`, which needs ${envVarList}, but the runner has no key for it.` : `**${MISSING_KEY_MARKER}** \u2014 Pullfrog needs at least one LLM provider API key (e.g. \`ANTHROPIC_API_KEY\`, \`OPENAI_API_KEY\`, \`GEMINI_API_KEY\`) configured as a GitHub Actions secret.`;
+  const lead = envVarList ? `**${MISSING_KEY_MARKER}** \u2014 this run used \`${params.model}\`, which needs ${envVarList}, but the runner has no key for it.` : `**${MISSING_KEY_MARKER}** \u2014 Pullfrog needs at least one LLM provider API key (e.g. \`ANTHROPIC_API_KEY\`, \`OPENAI_API_KEY\`, \`GEMINI_API_KEY\`) configured as a GitHub Actions secret.`;
   return [
     lead,
     "",
@@ -197900,7 +197913,7 @@ function hasEnvVar2(name) {
   return typeof value2 === "string" && value2.length > 0;
 }
 function modelHasRuntimeAuth(model) {
-  const authVars = [...getModelEnvVars(model), ...getModelManagedCredentials(model)];
+  const authVars = [...getOpenCodeEnvVars(model), ...getModelManagedCredentials(model)];
   return authVars.length === 0 || authVars.some(hasEnvVar2);
 }
 function hasPositiveNumberEnvVar(name) {
@@ -197994,7 +198007,7 @@ function validateAgentApiKey(params) {
       if (params.authorized.has(params.model)) return;
       const reason = getModelsFailure();
       if (reason) throw new Error(reason);
-      if (getModelEnvVars(params.model).some(hasEnvVar2)) return;
+      if (getOpenCodeEnvVars(params.model).some(hasEnvVar2)) return;
       throwKeyError({
         owner: params.owner,
         name: params.name,
@@ -198260,7 +198273,7 @@ function resolveAgent(ctx) {
     }
   }
   if (!ctx.model) {
-    if (hasEnvVar3("ANTHROPIC_AUTH_TOKEN") && !hasEnvVar3("ANTHROPIC_API_KEY") && !hasEnvVar3("CLAUDE_CODE_OAUTH_TOKEN")) {
+    if (!hasEnvVar3("ANTHROPIC_API_KEY") && CLAUDE_CODE_ONLY_CREDENTIALS.some(hasEnvVar3)) {
       return agents.claude;
     }
     if (ctx.codexAgent && hasCodexAuth() && !hasClaudeCodeAuth()) return agents.codex;

package/dist/internal.js

@@ -220,9 +220,9 @@ var providers = {
       },
       "gemini-flash": {
         displayName: "Gemini Flash",
-        resolve: "google/gemini-3.6-flash",
-        effort: ["minimal", "low", "medium", "high"],
-        openRouterResolve: "openrouter/google/gemini-3.6-flash"
+        resolve: "google/gemini-3.8-flash",
+        effort: ["low", "medium", "high"],
+        openRouterResolve: "openrouter/google/gemini-3.8-flash"
       }
     }
   }),
@@ -550,9 +550,9 @@ var providers = {
       },
       "gemini-flash": {
         displayName: "Gemini Flash",
-        resolve: "opencode/gemini-3.6-flash",
-        effort: ["minimal", "low", "medium", "high"],
-        openRouterResolve: "openrouter/google/gemini-3.6-flash"
+        resolve: "opencode/gemini-3.8-flash",
+        effort: ["low", "medium", "high"],
+        openRouterResolve: "openrouter/google/gemini-3.8-flash"
       },
       // Zen serves K3, but rule 7 can only move a mirror when its upstream moves,
       // so the K3 generation could never reach this block by bumping `kimi-k2`.
@@ -980,10 +980,9 @@ var providers = {
       "gemini-flash": {
         displayName: "Gemini Flash",
         resolve: "openrouter/~google/gemini-flash-latest",
-        // no `minimal` here, unlike the google/ and opencode/ entries for the
-        // same model: OpenRouter's floating `~google/gemini-flash-latest` stopped
-        // publishing that rung. mirroring it is not cosmetic — claude-code
-        // hard-errors on an out-of-range `--effort` before it calls the API.
+        // a floating pointer, not a pinned id — it already serves 3.8, so this
+        // entry tracks its siblings' generation bumps for free. the ladder still
+        // mirrors exactly: claude-code hard-errors on an out-of-range `--effort`.
         effort: ["low", "medium", "high"],
         openRouterResolve: "openrouter/~google/gemini-flash-latest"
       },
@@ -1097,8 +1096,8 @@ var providers = {
       },
       "gemini-flash": {
         displayName: "Gemini Flash",
-        resolve: "vercel/google/gemini-3.6-flash",
-        effort: ["minimal", "low", "medium", "high"]
+        resolve: "vercel/google/gemini-3.8-flash",
+        effort: ["low", "medium", "high"]
       },
       "deepseek-pro": {
         displayName: "DeepSeek Pro",
@@ -1117,7 +1116,8 @@ var providers = {
       },
       "kimi-k3": {
         displayName: "Kimi K3",
-        resolve: "vercel/moonshotai/kimi-k3"
+        resolve: "vercel/moonshotai/kimi-k3",
+        effort: ["low", "high", "max"]
       }
     }
   })
@@ -1153,8 +1153,9 @@ function getModelManagedCredentials(slug) {
   const providerConfig = providers[parsed.provider];
   return providerConfig?.managedCredentials?.slice() ?? [];
 }
+var CLAUDE_CODE_ONLY_CREDENTIALS = ["ANTHROPIC_AUTH_TOKEN", "CLAUDE_CODE_OAUTH_TOKEN"];
 var HARNESS_ONLY_CREDENTIALS = {
-  anthropic: ["ANTHROPIC_AUTH_TOKEN"]
+  anthropic: CLAUDE_CODE_ONLY_CREDENTIALS
 };
 function modelHasStoredAuth(params) {
   const slug = resolveDisplayAlias(params.model)?.slug ?? params.model;
@@ -1730,7 +1731,7 @@ function formatModelLabel(params) {
     return `${base} (credentials for ${providerDisplayName(params.fallbackFrom)} were rejected by the provider)`;
   }
   if (params.clamped?.reason === "trial") {
-    return `${base} (free trial)`;
+    return `${base} (model usage covered by Pullfrog)`;
   }
   if (params.clamped) {
     const target = isAutoTier(params.clamped.from) ? "the intelligent tier" : `\`${resolveDisplayAlias(params.clamped.from)?.displayName ?? params.clamped.from}\``;
@@ -1747,7 +1748,7 @@ function buildTrialDisclosure(owner) {
     "---",
     "",
     "> [!IMPORTANT]",
-    `> **This run used the free trial model.** \`DeepSeek Flash\` is fast and cheap \u2014 expect lighter work than a frontier model. [Connect a subscription or API key \u2192](${consoleUrl})`
+    `> **Pullfrog covered this run's model usage.** \`DeepSeek Flash\` is fast and cheap \u2014 expect lighter work than a frontier model. This model allowance is temporary and separate from your Pullfrog plan. [Connect a model-provider subscription or API key \u2192](${consoleUrl})`
   ].join("\n");
 }
 function buildPullfrogFooter(params) {

package/dist/models.d.ts

@@ -145,6 +145,30 @@ export declare function getModelEnvVars(slug: string): string[];
  * a manual-paste option in `init` or the AgentSettings env-var button row.
  * see `provider.managedCredentials` and wiki/codex-auth.md. */
 export declare function getModelManagedCredentials(slug: string): string[];
+/**
+ * Anthropic credentials that ONLY claude-code can present. opencode's anthropic
+ * provider authenticates from `ANTHROPIC_API_KEY` and nothing else (see
+ * `packages/llm/src/providers/anthropic.ts` upstream), so holding one of these
+ * is not evidence opencode can serve a Claude model.
+ *
+ * `ANTHROPIC_AUTH_TOKEN` (the gateway variable) is kept out of
+ * `providers.anthropic.envVars` entirely. `CLAUDE_CODE_OAUTH_TOKEN` cannot be:
+ * the console offers it as a paste target and `credentialFallback` preflights
+ * it, both of which read `getModelEnvVars`. So it stays in `envVars` and is
+ * subtracted here instead, via `getOpenCodeEnvVars` at every opencode-facing
+ * gate. Leaving it un-subtracted let `autoSelectModel` pin
+ * `anthropic/claude-opus-5` on a subscription-only account and hand it to
+ * opencode, which died with `Model not found` before the first turn.
+ */
+export declare const CLAUDE_CODE_ONLY_CREDENTIALS: string[];
+/**
+ * `getModelEnvVars` minus the credentials only claude-code can present — the
+ * right question for every opencode-facing gate (auto-select, key validation).
+ * `getModelEnvVars` answers "which credentials can serve this model", which is
+ * the product's question; this answers "which can serve it UNDER OPENCODE",
+ * which is the only one those gates may act on.
+ */
+export declare function getOpenCodeEnvVars(slug: string): string[];
 /**
  * Whether one of `secretNames` can run `model` — the Router opt-out predicate,
  * shared so every caller decides the same way. Auto-tier sentinels and

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "pullfrog",
-  "version": "0.1.70",
+  "version": "0.1.72",
   "type": "module",
   "bin": {
     "pullfrog": "dist/cli.mjs",