pullfrog 0.1.76 → 0.1.78

package/dist/agents/opencodeShared.d.ts

@@ -76,23 +76,57 @@ export declare function providerGatewayOverride(model: string | undefined): Reco
  * openai-compatible's do; `validateAzureSetup` guarantees they parse.
  */
 export declare function azureProvider(model: string | undefined): Record<string, AzureProviderEntry>;
+export type OpenRouterDataCollection = "allow" | "deny";
 /**
- * Build the `provider.openrouter.models[id].options` map that pins every Kimi
- * K2 OpenRouter alias away from the Enforcer-less providers via OpenRouter's
- * `provider: {ignore:[...]}` routing directive. Sourced from the model registry
- * so a Kimi alias/route change in `action/models.ts` flows through automatically.
+ * OpenRouter's request-level `provider.data_collection` decides whether hosts
+ * that retain or train on prompts may serve a run. The account-wide privacy
+ * setting is only a ceiling a request can tighten, so the policy rides on the
+ * run instead: OSS-funded runs `allow` (public code on headless runs — and the
+ * cheapest V4.1 Flash host, DeepSeek's own, is a training host), Router runs
+ * `deny` (a customer's private code never reaches one; every catalog target
+ * was still served under `deny` on 2026-09-11), and a BYOK OpenRouter key gets
+ * no preference — the customer's own account decides. see wiki/muse-spark.md.
+ */
+export declare function openRouterDataCollection(ctx: {
+    payload: {
+        proxyModel?: string | undefined;
+    };
+    toolState: {
+        oss?: boolean | undefined;
+    };
+}): OpenRouterDataCollection | undefined;
+/**
+ * The `provider.openrouter` config block: the run's data policy as `extraBody`
+ * (the SDK merges it into every request), plus the per-model `options` that
+ * carry OpenRouter's `provider` routing object where a model needs its own —
+ * Kimi K2 pinned away from the Enforcer-less providers, and the Muse Spark
+ * contributor tier opened to data collection whatever the run's policy, since
+ * Meta training on the traffic is what that tier is. Sourced from the model
+ * registry so an alias/route change in `action/models.ts` flows through.
  *
  * Wiring: the per-model `options` object merges into the request options
  * (opencode `session/llm/request.ts` `mergeOptions(base, model.options)`),
  * gets wrapped under `providerOptions.openrouter` (`provider/transform.ts`
  * `sdkKey("@openrouter/ai-sdk-provider") === "openrouter"`), and the OpenRouter
- * AI-SDK provider spreads everything under `providerOptions.openrouter` straight
- * into the request body (`@openrouter/ai-sdk-provider` `doStream`/`doGenerate`),
- * so `provider` lands as the top-level routing object OpenRouter expects.
+ * AI-SDK provider spreads everything under `providerOptions.openrouter` into the
+ * request body LAST — after `extraBody` — so a per-model `provider` object
+ * replaces the run-level one wholesale. that is why the Kimi entry restates
+ * the run's `data_collection` beside its `ignore` list.
  */
-export declare function kimiOpenRouterProviderOverrides(): Record<string, {
-    options: object;
-}>;
+export declare function openRouterProvider(policy: OpenRouterDataCollection | undefined): {
+    options?: {
+        extraBody: {
+            provider: {
+                data_collection: OpenRouterDataCollection;
+            };
+        };
+    };
+    models: Record<string, {
+        options: {
+            provider: object;
+        };
+    }>;
+};
 /**
  * Read-only `reviewfrog` subagent for lens-based review. Non-mutative +
  * non-recursive — enforced by the system prompt in reviewer.ts.

package/dist/cli.mjs

@@ -123000,7 +123000,7 @@ var import_picocolors = __toESM(require_picocolors(), 1);
 // package.json
 var package_default = {
   name: "pullfrog",
-  version: "0.1.76",
+  version: "0.1.78",
   cliContractVersion: "1",
   type: "module",
   bin: {
@@ -125122,26 +125122,34 @@ var providers = {
     models: {
       grok: {
         displayName: "Grok",
-        resolve: "xai/grok-4.5",
-        effort: ["low", "medium", "high"],
-        openRouterResolve: "openrouter/x-ai/grok-4.5",
+        resolve: "xai/grok-4.6",
+        effort: ["low", "medium", "high", "xhigh"],
+        openRouterResolve: "openrouter/x-ai/grok-4.6",
         preferred: true
       },
+      // the Smart ladder's cheap rung: 1.25/2.5 against 4.6's 2/6, and a 0.2
+      // cache read against 0.5 — the only live xAI model a rung can save on.
+      "grok-4.3": {
+        displayName: "Grok 4.3",
+        resolve: "xai/grok-4.3",
+        effort: ["none", "low", "medium", "high"],
+        openRouterResolve: "openrouter/x-ai/grok-4.3"
+      },
       // legacy aliases — xAI retired the entire fast/code-fast line on
       // 2026-05-15 (https://docs.x.ai/developers/migration/may-15-deprecation)
       // and now redirects every deprecated text-model slug to grok-4.3 at
       // standard pricing. fall back to the live `xai/grok` so the alias
-      // chain resolves to grok-4.5 for both direct-key and OpenRouter users.
+      // chain resolves to grok-4.6 for both direct-key and OpenRouter users.
       "grok-fast": {
         displayName: "Grok Fast",
         resolve: "xai/grok-4-1-fast",
-        openRouterResolve: "openrouter/x-ai/grok-4.5",
+        openRouterResolve: "openrouter/x-ai/grok-4.6",
         fallback: "xai/grok"
       },
       "grok-code-fast": {
         displayName: "Grok Code Fast",
         resolve: "xai/grok-code-fast-1",
-        openRouterResolve: "openrouter/x-ai/grok-4.5",
+        openRouterResolve: "openrouter/x-ai/grok-4.6",
         fallback: "xai/grok"
       }
     }
@@ -125160,6 +125168,12 @@ var providers = {
       // $0.0405. there is no `~deepseek/*-pro-latest` pointer to track, so this
       // one has to be a dated pin; the `models-catalog` drift test is what
       // catches the next release.
+      // from 2026-09-14 DeepSeek serves every direct `deepseek-v4-pro` call with
+      // V4.1-Flash at Flash rates until V4.1-Pro ships. it is still the only Pro
+      // id the vendor lists, and the OpenRouter 0813 pin is third-party-hosted
+      // and unaffected — so no `fallback` to Flash, which would drag the Router
+      // route down with it. the OSS program dropped Pro from its menu instead;
+      // see `OSS_MODEL_ALLOWLIST`.
       "deepseek-pro": {
         displayName: "DeepSeek Pro",
         resolve: "deepseek/deepseek-v4-pro",
@@ -125168,30 +125182,24 @@ var providers = {
         openRouterResolve: "openrouter/deepseek/deepseek-v4-pro-0813",
         preferred: true
       },
-      // DeepSeek upgrades the `deepseek-v4-flash` API model in place, so the
-      // direct `resolve` needs no version. OpenRouter instead forked the 0731
-      // release into its own id and left the April preview live under the
-      // unversioned one at a HIGHER price ($0.14/$0.28 vs $0.09/$0.18) — so the
-      // OpenRouter route can never use the bare id. it tracks the rolling
-      // `~deepseek/*-latest` pointer (rule 4), which follows the next in-place
-      // upgrade on its own rather than pinning a dated snapshot that goes stale
-      // every release. that pointer is NOT priced like 0731 — its listed rates
-      // run +40% on output and +57.5% on cache read, and it costs 12% more per
-      // run on authoritative spend ($0.0405 vs $0.0361). kept anyway: ~$45/yr
-      // buys auto-following the upgrade, and the listed gap overstates the real
-      // one because a rolling alias prices at its routing ceiling.
-      // 0731 gained a `low` rung and renamed the top to `max`, and that ladder
-      // now reads the same on BOTH routes — the in-place direct upgrade caught
-      // up to the fork. so `low`, not `high`, is position 0 either way, which is
-      // why the OSS effort floor in `main.ts` pins the `high` rung by name. Pro
-      // is the same shape via OpenRouter since 0813; only its direct route still
-      // starts at `high`.
+      // V4.1-Flash (2026-09-10) retired `deepseek-v4-flash`; DeepSeek's /models
+      // now lists the unversioned `deepseek-flash`, so the direct resolve is the
+      // rolling id at the same price. OpenRouter treats V4.1 as its own id
+      // (`deepseek/deepseek-v4.1-flash`, $0.15/$0.6, cache $0.003) and its
+      // `~deepseek/deepseek-v4-flash-latest` pointer still served 0731 on
+      // 2026-09-11, so this is a pinned id rather than the pointer and the next
+      // Flash release is a catalog edit (the bump cron flags it). this target is
+      // the funded OSS default: priced on the measured OSS token mix at x1.34
+      // the pointer's $0.0531/run on the DeepSeek-hosted endpoint — see
+      // wiki/oss-model-allowlist.md. the bare `deepseek-v4-flash` on OpenRouter
+      // is still the April preview, so that route can never use it. both routes
+      // publish `low, high, max`; the OSS effort floor pins `high` by name.
       "deepseek-flash": {
         displayName: "DeepSeek Flash",
-        resolve: "deepseek/deepseek-v4-flash",
+        resolve: "deepseek/deepseek-flash",
         effort: ["low", "high", "max"],
         openRouterEffort: ["low", "high", "max"],
-        openRouterResolve: "openrouter/~deepseek/deepseek-v4-flash-latest"
+        openRouterResolve: "openrouter/deepseek/deepseek-v4.1-flash"
       },
       // legacy aliases — deepseek retires these on 2026-07-24; transparently
       // upgrade existing users to the v4 family via the fallback chain.
@@ -125294,6 +125302,40 @@ var providers = {
       }
     }
   }),
+  // Meta Model API — the direct route to Muse Spark. a registry entry, like
+  // kimi-for-coding: models.dev carries `meta` (`https://api.meta.ai/v1`, npm
+  // `@ai-sdk/openai`) and opencode 1.18.29 enables it from a bare
+  // META_MODEL_API_KEY — all five ids list in `opencode models`, and a bogus key
+  // reaches Meta's own auth check (`invalid_api_key`). see wiki/muse-spark.md.
+  meta: provider({
+    displayName: "Meta",
+    envVars: ["META_MODEL_API_KEY"],
+    models: {
+      // the Standard tier. no `subagentModel`: the contributor tier below is
+      // the same model, not a cheaper sibling.
+      "muse-spark": {
+        displayName: "Muse Spark",
+        resolve: "meta/muse-spark-1.3",
+        effort: ["minimal", "low", "medium", "high", "xhigh", "max"],
+        openRouterResolve: "openrouter/meta/muse-spark-1.3",
+        preferred: true
+      },
+      // the Contributor tier: the same model at $0.10 / $0.20 (cache read
+      // $0.002) because Meta trains on the prompts and completions. an opt-in
+      // pick on the OSS menu (public code, headless runs), never the default.
+      // OpenRouter only serves it when the account allows paid-model training,
+      // so the runtime opens data collection for this id alone — see
+      // `openRouterProvider` in opencodeShared.ts.
+      "muse-spark-contributor": {
+        displayName: "Muse Spark Contributor",
+        description: "Meta trains on prompts and completions",
+        resolve: "meta/muse-spark-1.3-contributor",
+        effort: ["minimal", "low", "medium", "high", "xhigh"],
+        openRouterEffort: ["minimal", "low", "medium", "high", "xhigh", "max"],
+        openRouterResolve: "openrouter/meta/muse-spark-1.3-contributor"
+      }
+    }
+  }),
   opencode: provider({
     displayName: "OpenCode Zen",
     envVars: ["OPENCODE_API_KEY"],
@@ -125494,6 +125536,17 @@ var providers = {
         effort: ["minimal", "low", "medium", "high"],
         openRouterResolve: "openrouter/openai/gpt-5-nano"
       },
+      // Zen's PAID Muse Spark, priced like Meta's own Standard tier. not the
+      // `-contributor-free` id beside it, which is the data-collection variant
+      // Go refuses with DataPolicyError. unverified through the harness on
+      // 2026-09-11: the workspace was out of balance and a claude-sonnet-5
+      // control failed identically. see wiki/muse-spark.md.
+      "muse-spark": {
+        displayName: "Muse Spark",
+        resolve: "opencode/muse-spark-1.3",
+        effort: ["minimal", "low", "medium", "high", "xhigh", "max"],
+        openRouterResolve: "openrouter/meta/muse-spark-1.3"
+      },
       // Zen's live free MiMo, and the second free row in a menu that big-pickle
       // was alone in since `mimo-v2-pro-free` lost its model.
       mimo: {
@@ -125873,9 +125926,9 @@ var providers = {
       },
       grok: {
         displayName: "Grok",
-        resolve: "openrouter/x-ai/grok-4.5",
-        effort: ["low", "medium", "high"],
-        openRouterResolve: "openrouter/x-ai/grok-4.5"
+        resolve: "openrouter/x-ai/grok-4.6",
+        effort: ["low", "medium", "high", "xhigh"],
+        openRouterResolve: "openrouter/x-ai/grok-4.6"
       },
       // dated pin, not the bare id — see `deepseek/deepseek-pro` for why
       // OpenRouter's unversioned `deepseek-v4-pro` is the stale April preview.
@@ -125885,13 +125938,14 @@ var providers = {
         effort: ["low", "high", "max"],
         openRouterResolve: "openrouter/deepseek/deepseek-v4-pro-0813"
       },
-      // rolling pointer, not the bare id — see `deepseek/deepseek-flash` for why
-      // OpenRouter's unversioned `deepseek-v4-flash` is the stale April preview.
+      // the V4.1 id, not the bare one — see `deepseek/deepseek-flash` for why
+      // OpenRouter's unversioned `deepseek-v4-flash` is the stale April preview
+      // and why the `~deepseek/*-latest` pointer is no longer the target.
       "deepseek-flash": {
         displayName: "DeepSeek Flash",
-        resolve: "openrouter/~deepseek/deepseek-v4-flash-latest",
+        resolve: "openrouter/deepseek/deepseek-v4.1-flash",
         effort: ["low", "high", "max"],
-        openRouterResolve: "openrouter/~deepseek/deepseek-v4-flash-latest"
+        openRouterResolve: "openrouter/deepseek/deepseek-v4.1-flash"
       },
       // legacy alias — deepseek retires this on 2026-07-24; transparently
       // upgrade existing users to the v4 family via the fallback chain.
@@ -125922,6 +125976,23 @@ var providers = {
         displayName: "MiniMax M3",
         resolve: "openrouter/minimax/minimax-m3",
         openRouterResolve: "openrouter/minimax/minimax-m3"
+      },
+      // OpenRouter gates Meta models on an ACCOUNT-level 18+ confirmation
+      // (openrouter.ai/settings/preferences). Pullfrog's account has it, so the
+      // Router path runs; a BYOK OpenRouter key without it refuses with that
+      // link before the request reaches Meta. see wiki/muse-spark.md.
+      "muse-spark": {
+        displayName: "Muse Spark",
+        resolve: "openrouter/meta/muse-spark-1.3",
+        effort: ["minimal", "low", "medium", "high", "xhigh", "max"],
+        openRouterResolve: "openrouter/meta/muse-spark-1.3"
+      },
+      "muse-spark-contributor": {
+        displayName: "Muse Spark Contributor",
+        description: "Meta trains on prompts and completions",
+        resolve: "openrouter/meta/muse-spark-1.3-contributor",
+        effort: ["minimal", "low", "medium", "high", "xhigh", "max"],
+        openRouterResolve: "openrouter/meta/muse-spark-1.3-contributor"
       }
     }
   }),
@@ -125989,10 +126060,13 @@ var providers = {
         resolve: "vercel/deepseek/deepseek-v4-pro-0813",
         effort: ["high", "xhigh"]
       },
+      // the gateway's bare `deepseek-v4-flash` is the April preview — the same
+      // fork trap as OpenRouter, with `deepseek-v4-flash-0731` beside it — so
+      // this entry sat on the preview until V4.1. the gateway publishes no
+      // effort ladder for the V4.1 id.
       "deepseek-flash": {
         displayName: "DeepSeek Flash",
-        resolve: "vercel/deepseek/deepseek-v4-flash",
-        effort: ["high", "xhigh"]
+        resolve: "vercel/deepseek/deepseek-v4.1-flash"
       },
       glm: {
         displayName: "GLM",
@@ -126003,6 +126077,11 @@ var providers = {
         displayName: "Kimi K3",
         resolve: "vercel/moonshotai/kimi-k3",
         effort: ["low", "high", "max"]
+      },
+      // the gateway publishes no effort ladder for this id.
+      "muse-spark": {
+        displayName: "Muse Spark",
+        resolve: "vercel/meta/muse-spark-1.3"
       }
     }
   })
@@ -126072,6 +126151,71 @@ var AUTO_TIER_TARGET = {
 function isAutoTier(slug2) {
   return slug2 === AUTO_EFFICIENT || slug2 === AUTO_INTELLIGENT;
 }
+var PROVIDER_LADDERS = {
+  anthropic: {
+    minimal: "anthropic/claude-haiku",
+    light: "anthropic/claude-sonnet",
+    standard: "anthropic/claude-opus",
+    deep: "anthropic/claude-opus"
+  },
+  openai: {
+    minimal: "openai/gpt-luna",
+    light: "openai/gpt-terra",
+    standard: "openai/gpt-sol",
+    deep: "openai/gpt-astra"
+  },
+  google: {
+    minimal: "google/gemini-flash",
+    light: "google/gemini-flash",
+    standard: "google/gemini-pro",
+    deep: "google/gemini-pro"
+  },
+  deepseek: {
+    minimal: "deepseek/deepseek-flash",
+    light: "deepseek/deepseek-flash",
+    standard: "deepseek/deepseek-pro",
+    deep: "deepseek/deepseek-pro"
+  },
+  xai: {
+    minimal: "xai/grok-4.3",
+    light: "xai/grok-4.3",
+    standard: "xai/grok",
+    deep: "xai/grok"
+  },
+  moonshotai: {
+    minimal: "moonshotai/kimi-k2",
+    light: "moonshotai/kimi-k2",
+    standard: "moonshotai/kimi-k3",
+    deep: "moonshotai/kimi-k3"
+  },
+  openrouter: {
+    minimal: "openrouter/deepseek-flash",
+    light: "openrouter/gpt-luna",
+    standard: "openrouter/gpt-sol",
+    deep: "openrouter/claude-opus"
+  },
+  opencode: {
+    minimal: "opencode/gpt-luna",
+    light: "opencode/gpt-luna",
+    standard: "opencode/gpt-sol",
+    deep: "opencode/claude-opus"
+  }
+};
+var ROUTER_LADDER = {
+  minimal: "deepseek/deepseek-flash",
+  light: "openai/gpt-luna",
+  standard: "openai/gpt-sol",
+  deep: "anthropic/claude-opus"
+};
+var AUTO_PREFIX = "auto/";
+function autoLadder(slug2) {
+  if (!slug2 || !slug2.startsWith(AUTO_PREFIX) || isAutoTier(slug2)) return void 0;
+  const target = slug2.slice(AUTO_PREFIX.length);
+  return target === "router" ? ROUTER_LADDER : PROVIDER_LADDERS[target];
+}
+var ROUTED_PROVIDERS = Object.keys(
+  PROVIDER_LADDERS
+).map((key) => ({ key, displayName: providers[key].displayName }));
 function isCardGatedModel(slug2) {
   return resolveOpenRouterModel(slug2) !== void 0;
 }
@@ -126080,7 +126224,7 @@ function resolveModelSlug(slug2) {
 }
 var MAX_FALLBACK_DEPTH = 10;
 function resolveDisplayAlias(slug2) {
-  let current = isAutoTier(slug2) ? AUTO_TIER_TARGET[slug2] : slug2;
+  let current = isAutoTier(slug2) ? AUTO_TIER_TARGET[slug2] : autoLadder(slug2)?.standard ?? slug2;
   const visited = /* @__PURE__ */ new Set();
   for (let i2 = 0; i2 < MAX_FALLBACK_DEPTH; i2++) {
     if (visited.has(current)) return void 0;
@@ -126115,11 +126259,23 @@ if (!defaultProxyAlias?.openRouterResolve) {
 }
 var DEFAULT_PROXY_MODEL = defaultProxyAlias.openRouterResolve;
 var defaultProxyDisplayName = defaultProxyAlias.displayName;
+for (const [name, ladder] of Object.entries({ ...PROVIDER_LADDERS, router: ROUTER_LADDER })) {
+  const terminal = /* @__PURE__ */ new Set();
+  for (const slug2 of Object.values(ladder)) {
+    const alias = resolveDisplayAlias(slug2);
+    if (!alias) throw new Error(`${name} ladder names unknown alias ${slug2}`);
+    terminal.add(alias.slug);
+  }
+  if (terminal.size < 2) throw new Error(`${name} ladder runs every tier on ${[...terminal][0]}`);
+}
 var OSS_MODEL_ALLOWLIST = [
   "deepseek/deepseek-flash",
-  "deepseek/deepseek-pro",
   "openai/gpt-luna",
-  "openrouter/minimax-m2.5"
+  "openrouter/minimax-m2.5",
+  // opt-in: 0.86x the old default on the measured mix, and Meta trains on the
+  // traffic — fine for public code on headless runs, the human decided
+  // 2026-09-11. unmeasured on a real run; not the default until it is.
+  "meta/muse-spark-contributor"
 ];
 var OSS_RECOMMENDED_MODEL = AUTO_TIER_TARGET[AUTO_EFFICIENT];
 function ossFundedModelNames() {
@@ -135795,13 +135951,29 @@ function azureProvider(model) {
   };
 }
 var KIMI_ENFORCERLESS_PROVIDERS = ["siliconflow", "together"];
-function kimiOpenRouterProviderOverrides() {
-  return Object.fromEntries(
-    modelAliases.map((a2) => a2.openRouterResolve).filter((r2) => r2?.includes("kimi") ?? false).map((r2) => [
-      r2.replace(/^openrouter\//, ""),
-      { options: { provider: { ignore: KIMI_ENFORCERLESS_PROVIDERS } } }
-    ])
-  );
+function openRouterDataCollection(ctx) {
+  if (!ctx.payload.proxyModel) return void 0;
+  return ctx.toolState.oss ? "allow" : "deny";
+}
+function dataCollectionPreference(policy) {
+  if (!policy) return {};
+  return { data_collection: policy };
+}
+function openRouterProvider(policy) {
+  const models = {};
+  for (const alias of modelAliases) {
+    const id = alias.openRouterResolve?.replace(/^openrouter\//, "");
+    if (!id) continue;
+    if (id.endsWith("-contributor")) {
+      models[id] = { options: { provider: { data_collection: "allow" } } };
+    }
+    if (id.includes("kimi")) {
+      const provider2 = { ...dataCollectionPreference(policy), ignore: KIMI_ENFORCERLESS_PROVIDERS };
+      models[id] = { options: { provider: provider2 } };
+    }
+  }
+  if (!policy) return { models };
+  return { options: { extraBody: { provider: { data_collection: policy } } }, models };
 }
 function buildReviewerAgentConfig(orchestratorModel) {
   const overrides = deriveSubagentModels(orchestratorModel);
@@ -135877,13 +136049,12 @@ function buildSecurityConfig(ctx, model) {
       log2.info(`\xBB subagent models: reviewfrog=${reviewerModel}`);
       return cfg;
     })(),
-    // kimi pinned away from Enforcer-less openrouter providers (siliconflow /
-    // together) that drop optional tool-call params — per-model on the
-    // openrouter route, so other models are unaffected. this is routing, not
-    // reasoning: every model's effort now rides the per-prompt `variant`.
-    // see opencodeShared.ts.
+    // openrouter routing, not reasoning (every model's effort rides the
+    // per-prompt `variant`): the run's data-collection policy, kimi pinned
+    // away from Enforcer-less providers, the Muse Spark contributor tier
+    // opened to training hosts. see opencodeShared.ts.
     provider: {
-      openrouter: { models: kimiOpenRouterProviderOverrides() },
+      openrouter: openRouterProvider(openRouterDataCollection(ctx)),
       ...openAICompatibleProvider(model),
       ...azureProvider(model),
       ...providerGatewayOverride(model)
@@ -216616,6 +216787,15 @@ var JsonPayload = type({
   "type?": "string | undefined",
   "model?": "string | undefined",
   "modelExplicit?": "boolean | undefined",
+  // optional so a payload from a pre-router server build still parses against a
+  // newer action across a rolling deploy.
+  "routing?": type({
+    tier: "'minimal' | 'light' | 'standard' | 'deep'",
+    stakes: "number",
+    workload: "number",
+    source: "'scorer' | 'heuristic' | 'fixed'",
+    rationale: "string"
+  }).or("undefined"),
   "effort?": "number | string | undefined",
   "debug?": "boolean | undefined",
   prompt: "string",
@@ -216797,6 +216977,7 @@ function resolvePayload(resolvedPromptInput, repoSettings) {
     // explicit only when the model came from a per-run override flag (carried on
     // the JSON payload). a GHA `model` input or the repo default is not explicit.
     modelExplicit: jsonPayload?.modelExplicit ?? false,
+    routing: jsonPayload?.routing,
     effort,
     debug: debug4 || void 0,
     prompt,
@@ -217483,9 +217664,12 @@ async function fetchRunContext(params) {
     if (params.oidcToken) {
       headers["X-GitHub-OIDC-Token"] = params.oidcToken;
     }
-    const query = params.runType ? `?type=${encodeURIComponent(params.runType)}` : "";
+    const query = new URLSearchParams();
+    if (params.runType) query.set("type", params.runType);
+    if (params.routedTier) query.set("tier", params.routedTier);
+    const search2 = query.toString();
     const response = await apiFetch({
-      path: `/api/repo/${params.repoContext.owner}/${params.repoContext.name}/run-context${query}`,
+      path: `/api/repo/${params.repoContext.owner}/${params.repoContext.name}/run-context${search2 ? `?${search2}` : ""}`,
       headers,
       signal: controller.signal
     });
@@ -217552,7 +217736,13 @@ async function resolveRunContextData(params) {
       retries: [100, 500],
       bail: (error109) => !isTransientOctokitError(error109)
     })(),
-    fetchRunContext({ token: params.token, repoContext, oidcToken, runType: params.runType })
+    fetchRunContext({
+      token: params.token,
+      repoContext,
+      oidcToken,
+      runType: params.runType,
+      routedTier: params.routedTier
+    })
   ]);
   return {
     repo: {
@@ -218460,6 +218650,12 @@ function logRunStartup(ctx) {
   log2.info(
     `\xBB effort:  ${resolveEffortForLog({ payload: ctx.payload, resolvedModel: ctx.resolvedModel })}`
   );
+  const routing = ctx.payload.routing;
+  if (routing) {
+    log2.info(
+      `\xBB routed:  ${routing.tier} (${routing.source}: stakes ${routing.stakes}, workload ${routing.workload}) \u2014 ${routing.rationale}`
+    );
+  }
   log2.info(
     `\xBB agent:   ${resolveAgentForLog({ agentName: ctx.agentName, resolvedModel: ctx.resolvedModel })}`
   );
@@ -218654,7 +218850,8 @@ async function main() {
     const runContext = await resolveRunContextData({
       octokit: initialOctokit,
       token: jobToken,
-      runType: typeof resolvedPromptInput === "string" ? void 0 : resolvedPromptInput.type
+      runType: typeof resolvedPromptInput === "string" ? void 0 : resolvedPromptInput.type,
+      routedTier: typeof resolvedPromptInput === "string" ? void 0 : resolvedPromptInput.routing?.tier
     });
     timer.checkpoint("runContextData");
     const payload = resolvePayload(resolvedPromptInput, runContext.repoSettings);
@@ -219775,7 +219972,7 @@ function resolveTarget2(repo) {
   return { owner: match3[1], repo: match3[2] };
 }
 function cliVersion() {
-  const parts = /^(\d+)\.(\d+)\.(\d+)$/.exec("0.1.76");
+  const parts = /^(\d+)\.(\d+)\.(\d+)$/.exec("0.1.78");
   if (!parts) return "0.0.0";
   return `${Number(parts[1])}.${Number(parts[2])}.${Number(parts[3])}`;
 }
@@ -219942,7 +220139,7 @@ async function runCli8(input2) {
 }
 
 // cli.ts
-var VERSION10 = "0.1.76";
+var VERSION10 = "0.1.78";
 var bin = basename2(process.argv[1] || "");
 var PROG = bin === "pf" || bin === "pullfrog" ? bin : "pullfrog";
 var rawArgs = process.argv.slice(2);

package/dist/external.d.ts

@@ -4,6 +4,7 @@
  * Other files in action/ re-export from this file for backward compatibility.
  */
 import type { EffortPosition } from "./effort.ts";
+import type { RouterTier } from "./models.ts";
 export declare const pullfrogMcpName = "pullfrog";
 /** @see {@link file://./agents/shared.ts} Agent interface that uses this type */
 export type AgentId = "claude" | "codex" | "opencode";
@@ -51,8 +52,8 @@ export declare function findDanglingPromptToolRefs(params: {
 }): string[];
 export type { EffortPosition } from "./effort.ts";
 export { DEFAULT_EFFORT_POSITION, EFFORT_ALIASES, isEffortPosition, offeredRungs, parseEffortPosition, resolveRung, rungLabel, rungPosition, SUBSIDY_RUNG, } from "./effort.ts";
-export type { AutoTier, ModelAlias, ModelProvider, ProviderConfig } from "./models.ts";
-export { AUTO_EFFICIENT, AUTO_INTELLIGENT, DEFAULT_PROXY_MODEL, defaultAutoTier, getAutoSelectHintModel, getModelEffortLevels, getModelEnvVars, getModelManagedCredentials, getModelProvider, getProviderDisplayName, isAutoTier, isCardGatedModel, isOssAllowedModel, modelAliases, modelHasStoredAuth, OSS_MODEL_ALLOWLIST, OSS_RECOMMENDED_MODEL, ossFundedModelNames, PROVIDER_GATEWAY_URL_ENV, parseModel, providers, resolveAutoTier, resolveCliModel, resolveDisplayAlias, resolveModelRung, resolveModelSlug, resolveOpenRouterModel, } from "./models.ts";
+export type { AutoTier, ModelAlias, ModelProvider, ProviderConfig, RouterTier, } from "./models.ts";
+export { AUTO_EFFICIENT, AUTO_INTELLIGENT, AUTO_ROUTER, autoLadder, autoRoutedSlug, DEFAULT_PROXY_MODEL, defaultAutoTier, getAutoSelectHintModel, getModelEffortLevels, getModelEnvVars, getModelManagedCredentials, getModelProvider, getProviderDisplayName, isAutoRouted, isAutoSlug, isAutoTier, isCardGatedModel, isOssAllowedModel, isRouterTier, ladderRungs, modelAliases, modelHasStoredAuth, OSS_MODEL_ALLOWLIST, OSS_RECOMMENDED_MODEL, ossFundedModelNames, PROVIDER_GATEWAY_URL_ENV, parseModel, providers, ROUTED_PROVIDERS, ROUTER_LADDER, ROUTER_TIERS, resolveAutoTier, resolveCliModel, resolveDisplayAlias, resolveModelRung, resolveModelSlug, resolveOpenRouterModel, resolveRoutedModel, } from "./models.ts";
 export type ToolPermission = "disabled" | "enabled";
 export type ShellPermission = "disabled" | "restricted" | "enabled";
 export type PushPermission = "disabled" | "restricted" | "enabled";
@@ -262,6 +263,21 @@ export interface XrepoConfig {
      */
     unavailable?: string[] | undefined;
 }
+/**
+ * the model router's decision, carried so the runner can log it and forward the
+ * tier to run-context as `?tier=` — the Router proxy mint happens there and
+ * never sees `model` below. see wiki/router.md.
+ */
+export interface PayloadRouting {
+    tier: RouterTier;
+    stakes: number;
+    workload: number;
+    /** who decided: the scorer, the heuristic it falls back to, or the fixed tier a non-review kind of work carries. mirrors the `RouterSource` enum. */
+    source: RouterSource;
+    /** the scorer's own sentence or two on what a reviewer must reconstruct */
+    rationale: string;
+}
+export type RouterSource = "scorer" | "heuristic" | "fixed";
 export interface WriteablePayload {
     "~pullfrog": true;
     /** semantic version of the payload to ensure compatibility */
@@ -283,6 +299,8 @@ export interface WriteablePayload {
      * baseInstructions flag) keeps the soft-fallback safety net. see modelAccess.ts.
      */
     modelExplicit?: boolean | undefined;
+    /** the model router's decision, when it made one; `model` above already reflects it */
+    routing?: PayloadRouting | undefined;
     /** reasoning-effort position on [0,1]; 0 is the model's cheapest rung, 1 its priciest */
     effort?: EffortPosition | undefined;
     /**