pullfrog 0.1.77 → 0.1.78

package/dist/agents/opencodeShared.d.ts

@@ -76,23 +76,57 @@ export declare function providerGatewayOverride(model: string | undefined): Reco
  * openai-compatible's do; `validateAzureSetup` guarantees they parse.
  */
 export declare function azureProvider(model: string | undefined): Record<string, AzureProviderEntry>;
+export type OpenRouterDataCollection = "allow" | "deny";
 /**
- * Build the `provider.openrouter.models[id].options` map that pins every Kimi
- * K2 OpenRouter alias away from the Enforcer-less providers via OpenRouter's
- * `provider: {ignore:[...]}` routing directive. Sourced from the model registry
- * so a Kimi alias/route change in `action/models.ts` flows through automatically.
+ * OpenRouter's request-level `provider.data_collection` decides whether hosts
+ * that retain or train on prompts may serve a run. The account-wide privacy
+ * setting is only a ceiling a request can tighten, so the policy rides on the
+ * run instead: OSS-funded runs `allow` (public code on headless runs — and the
+ * cheapest V4.1 Flash host, DeepSeek's own, is a training host), Router runs
+ * `deny` (a customer's private code never reaches one; every catalog target
+ * was still served under `deny` on 2026-09-11), and a BYOK OpenRouter key gets
+ * no preference — the customer's own account decides. see wiki/muse-spark.md.
+ */
+export declare function openRouterDataCollection(ctx: {
+    payload: {
+        proxyModel?: string | undefined;
+    };
+    toolState: {
+        oss?: boolean | undefined;
+    };
+}): OpenRouterDataCollection | undefined;
+/**
+ * The `provider.openrouter` config block: the run's data policy as `extraBody`
+ * (the SDK merges it into every request), plus the per-model `options` that
+ * carry OpenRouter's `provider` routing object where a model needs its own —
+ * Kimi K2 pinned away from the Enforcer-less providers, and the Muse Spark
+ * contributor tier opened to data collection whatever the run's policy, since
+ * Meta training on the traffic is what that tier is. Sourced from the model
+ * registry so an alias/route change in `action/models.ts` flows through.
  *
  * Wiring: the per-model `options` object merges into the request options
  * (opencode `session/llm/request.ts` `mergeOptions(base, model.options)`),
  * gets wrapped under `providerOptions.openrouter` (`provider/transform.ts`
  * `sdkKey("@openrouter/ai-sdk-provider") === "openrouter"`), and the OpenRouter
- * AI-SDK provider spreads everything under `providerOptions.openrouter` straight
- * into the request body (`@openrouter/ai-sdk-provider` `doStream`/`doGenerate`),
- * so `provider` lands as the top-level routing object OpenRouter expects.
+ * AI-SDK provider spreads everything under `providerOptions.openrouter` into the
+ * request body LAST — after `extraBody` — so a per-model `provider` object
+ * replaces the run-level one wholesale. that is why the Kimi entry restates
+ * the run's `data_collection` beside its `ignore` list.
  */
-export declare function kimiOpenRouterProviderOverrides(): Record<string, {
-    options: object;
-}>;
+export declare function openRouterProvider(policy: OpenRouterDataCollection | undefined): {
+    options?: {
+        extraBody: {
+            provider: {
+                data_collection: OpenRouterDataCollection;
+            };
+        };
+    };
+    models: Record<string, {
+        options: {
+            provider: object;
+        };
+    }>;
+};
 /**
  * Read-only `reviewfrog` subagent for lens-based review. Non-mutative +
  * non-recursive — enforced by the system prompt in reviewer.ts.

package/dist/cli.mjs

@@ -123000,7 +123000,7 @@ var import_picocolors = __toESM(require_picocolors(), 1);
 // package.json
 var package_default = {
   name: "pullfrog",
-  version: "0.1.77",
+  version: "0.1.78",
   cliContractVersion: "1",
   type: "module",
   bin: {
@@ -125122,26 +125122,34 @@ var providers = {
     models: {
       grok: {
         displayName: "Grok",
-        resolve: "xai/grok-4.5",
-        effort: ["low", "medium", "high"],
-        openRouterResolve: "openrouter/x-ai/grok-4.5",
+        resolve: "xai/grok-4.6",
+        effort: ["low", "medium", "high", "xhigh"],
+        openRouterResolve: "openrouter/x-ai/grok-4.6",
         preferred: true
       },
+      // the Smart ladder's cheap rung: 1.25/2.5 against 4.6's 2/6, and a 0.2
+      // cache read against 0.5 — the only live xAI model a rung can save on.
+      "grok-4.3": {
+        displayName: "Grok 4.3",
+        resolve: "xai/grok-4.3",
+        effort: ["none", "low", "medium", "high"],
+        openRouterResolve: "openrouter/x-ai/grok-4.3"
+      },
       // legacy aliases — xAI retired the entire fast/code-fast line on
       // 2026-05-15 (https://docs.x.ai/developers/migration/may-15-deprecation)
       // and now redirects every deprecated text-model slug to grok-4.3 at
       // standard pricing. fall back to the live `xai/grok` so the alias
-      // chain resolves to grok-4.5 for both direct-key and OpenRouter users.
+      // chain resolves to grok-4.6 for both direct-key and OpenRouter users.
       "grok-fast": {
         displayName: "Grok Fast",
         resolve: "xai/grok-4-1-fast",
-        openRouterResolve: "openrouter/x-ai/grok-4.5",
+        openRouterResolve: "openrouter/x-ai/grok-4.6",
         fallback: "xai/grok"
       },
       "grok-code-fast": {
         displayName: "Grok Code Fast",
         resolve: "xai/grok-code-fast-1",
-        openRouterResolve: "openrouter/x-ai/grok-4.5",
+        openRouterResolve: "openrouter/x-ai/grok-4.6",
         fallback: "xai/grok"
       }
     }
@@ -125160,6 +125168,12 @@ var providers = {
       // $0.0405. there is no `~deepseek/*-pro-latest` pointer to track, so this
       // one has to be a dated pin; the `models-catalog` drift test is what
       // catches the next release.
+      // from 2026-09-14 DeepSeek serves every direct `deepseek-v4-pro` call with
+      // V4.1-Flash at Flash rates until V4.1-Pro ships. it is still the only Pro
+      // id the vendor lists, and the OpenRouter 0813 pin is third-party-hosted
+      // and unaffected — so no `fallback` to Flash, which would drag the Router
+      // route down with it. the OSS program dropped Pro from its menu instead;
+      // see `OSS_MODEL_ALLOWLIST`.
       "deepseek-pro": {
         displayName: "DeepSeek Pro",
         resolve: "deepseek/deepseek-v4-pro",
@@ -125168,30 +125182,24 @@ var providers = {
         openRouterResolve: "openrouter/deepseek/deepseek-v4-pro-0813",
         preferred: true
       },
-      // DeepSeek upgrades the `deepseek-v4-flash` API model in place, so the
-      // direct `resolve` needs no version. OpenRouter instead forked the 0731
-      // release into its own id and left the April preview live under the
-      // unversioned one at a HIGHER price ($0.14/$0.28 vs $0.09/$0.18) — so the
-      // OpenRouter route can never use the bare id. it tracks the rolling
-      // `~deepseek/*-latest` pointer (rule 4), which follows the next in-place
-      // upgrade on its own rather than pinning a dated snapshot that goes stale
-      // every release. that pointer is NOT priced like 0731 — its listed rates
-      // run +40% on output and +57.5% on cache read, and it costs 12% more per
-      // run on authoritative spend ($0.0405 vs $0.0361). kept anyway: ~$45/yr
-      // buys auto-following the upgrade, and the listed gap overstates the real
-      // one because a rolling alias prices at its routing ceiling.
-      // 0731 gained a `low` rung and renamed the top to `max`, and that ladder
-      // now reads the same on BOTH routes — the in-place direct upgrade caught
-      // up to the fork. so `low`, not `high`, is position 0 either way, which is
-      // why the OSS effort floor in `main.ts` pins the `high` rung by name. Pro
-      // is the same shape via OpenRouter since 0813; only its direct route still
-      // starts at `high`.
+      // V4.1-Flash (2026-09-10) retired `deepseek-v4-flash`; DeepSeek's /models
+      // now lists the unversioned `deepseek-flash`, so the direct resolve is the
+      // rolling id at the same price. OpenRouter treats V4.1 as its own id
+      // (`deepseek/deepseek-v4.1-flash`, $0.15/$0.6, cache $0.003) and its
+      // `~deepseek/deepseek-v4-flash-latest` pointer still served 0731 on
+      // 2026-09-11, so this is a pinned id rather than the pointer and the next
+      // Flash release is a catalog edit (the bump cron flags it). this target is
+      // the funded OSS default: priced on the measured OSS token mix at x1.34
+      // the pointer's $0.0531/run on the DeepSeek-hosted endpoint — see
+      // wiki/oss-model-allowlist.md. the bare `deepseek-v4-flash` on OpenRouter
+      // is still the April preview, so that route can never use it. both routes
+      // publish `low, high, max`; the OSS effort floor pins `high` by name.
       "deepseek-flash": {
         displayName: "DeepSeek Flash",
-        resolve: "deepseek/deepseek-v4-flash",
+        resolve: "deepseek/deepseek-flash",
         effort: ["low", "high", "max"],
         openRouterEffort: ["low", "high", "max"],
-        openRouterResolve: "openrouter/~deepseek/deepseek-v4-flash-latest"
+        openRouterResolve: "openrouter/deepseek/deepseek-v4.1-flash"
       },
       // legacy aliases — deepseek retires these on 2026-07-24; transparently
       // upgrade existing users to the v4 family via the fallback chain.
@@ -125294,6 +125302,40 @@ var providers = {
       }
     }
   }),
+  // Meta Model API — the direct route to Muse Spark. a registry entry, like
+  // kimi-for-coding: models.dev carries `meta` (`https://api.meta.ai/v1`, npm
+  // `@ai-sdk/openai`) and opencode 1.18.29 enables it from a bare
+  // META_MODEL_API_KEY — all five ids list in `opencode models`, and a bogus key
+  // reaches Meta's own auth check (`invalid_api_key`). see wiki/muse-spark.md.
+  meta: provider({
+    displayName: "Meta",
+    envVars: ["META_MODEL_API_KEY"],
+    models: {
+      // the Standard tier. no `subagentModel`: the contributor tier below is
+      // the same model, not a cheaper sibling.
+      "muse-spark": {
+        displayName: "Muse Spark",
+        resolve: "meta/muse-spark-1.3",
+        effort: ["minimal", "low", "medium", "high", "xhigh", "max"],
+        openRouterResolve: "openrouter/meta/muse-spark-1.3",
+        preferred: true
+      },
+      // the Contributor tier: the same model at $0.10 / $0.20 (cache read
+      // $0.002) because Meta trains on the prompts and completions. an opt-in
+      // pick on the OSS menu (public code, headless runs), never the default.
+      // OpenRouter only serves it when the account allows paid-model training,
+      // so the runtime opens data collection for this id alone — see
+      // `openRouterProvider` in opencodeShared.ts.
+      "muse-spark-contributor": {
+        displayName: "Muse Spark Contributor",
+        description: "Meta trains on prompts and completions",
+        resolve: "meta/muse-spark-1.3-contributor",
+        effort: ["minimal", "low", "medium", "high", "xhigh"],
+        openRouterEffort: ["minimal", "low", "medium", "high", "xhigh", "max"],
+        openRouterResolve: "openrouter/meta/muse-spark-1.3-contributor"
+      }
+    }
+  }),
   opencode: provider({
     displayName: "OpenCode Zen",
     envVars: ["OPENCODE_API_KEY"],
@@ -125494,6 +125536,17 @@ var providers = {
         effort: ["minimal", "low", "medium", "high"],
         openRouterResolve: "openrouter/openai/gpt-5-nano"
       },
+      // Zen's PAID Muse Spark, priced like Meta's own Standard tier. not the
+      // `-contributor-free` id beside it, which is the data-collection variant
+      // Go refuses with DataPolicyError. unverified through the harness on
+      // 2026-09-11: the workspace was out of balance and a claude-sonnet-5
+      // control failed identically. see wiki/muse-spark.md.
+      "muse-spark": {
+        displayName: "Muse Spark",
+        resolve: "opencode/muse-spark-1.3",
+        effort: ["minimal", "low", "medium", "high", "xhigh", "max"],
+        openRouterResolve: "openrouter/meta/muse-spark-1.3"
+      },
       // Zen's live free MiMo, and the second free row in a menu that big-pickle
       // was alone in since `mimo-v2-pro-free` lost its model.
       mimo: {
@@ -125873,9 +125926,9 @@ var providers = {
       },
       grok: {
         displayName: "Grok",
-        resolve: "openrouter/x-ai/grok-4.5",
-        effort: ["low", "medium", "high"],
-        openRouterResolve: "openrouter/x-ai/grok-4.5"
+        resolve: "openrouter/x-ai/grok-4.6",
+        effort: ["low", "medium", "high", "xhigh"],
+        openRouterResolve: "openrouter/x-ai/grok-4.6"
       },
       // dated pin, not the bare id — see `deepseek/deepseek-pro` for why
       // OpenRouter's unversioned `deepseek-v4-pro` is the stale April preview.
@@ -125885,13 +125938,14 @@ var providers = {
         effort: ["low", "high", "max"],
         openRouterResolve: "openrouter/deepseek/deepseek-v4-pro-0813"
       },
-      // rolling pointer, not the bare id — see `deepseek/deepseek-flash` for why
-      // OpenRouter's unversioned `deepseek-v4-flash` is the stale April preview.
+      // the V4.1 id, not the bare one — see `deepseek/deepseek-flash` for why
+      // OpenRouter's unversioned `deepseek-v4-flash` is the stale April preview
+      // and why the `~deepseek/*-latest` pointer is no longer the target.
       "deepseek-flash": {
         displayName: "DeepSeek Flash",
-        resolve: "openrouter/~deepseek/deepseek-v4-flash-latest",
+        resolve: "openrouter/deepseek/deepseek-v4.1-flash",
         effort: ["low", "high", "max"],
-        openRouterResolve: "openrouter/~deepseek/deepseek-v4-flash-latest"
+        openRouterResolve: "openrouter/deepseek/deepseek-v4.1-flash"
       },
       // legacy alias — deepseek retires this on 2026-07-24; transparently
       // upgrade existing users to the v4 family via the fallback chain.
@@ -125922,6 +125976,23 @@ var providers = {
         displayName: "MiniMax M3",
         resolve: "openrouter/minimax/minimax-m3",
         openRouterResolve: "openrouter/minimax/minimax-m3"
+      },
+      // OpenRouter gates Meta models on an ACCOUNT-level 18+ confirmation
+      // (openrouter.ai/settings/preferences). Pullfrog's account has it, so the
+      // Router path runs; a BYOK OpenRouter key without it refuses with that
+      // link before the request reaches Meta. see wiki/muse-spark.md.
+      "muse-spark": {
+        displayName: "Muse Spark",
+        resolve: "openrouter/meta/muse-spark-1.3",
+        effort: ["minimal", "low", "medium", "high", "xhigh", "max"],
+        openRouterResolve: "openrouter/meta/muse-spark-1.3"
+      },
+      "muse-spark-contributor": {
+        displayName: "Muse Spark Contributor",
+        description: "Meta trains on prompts and completions",
+        resolve: "openrouter/meta/muse-spark-1.3-contributor",
+        effort: ["minimal", "low", "medium", "high", "xhigh", "max"],
+        openRouterResolve: "openrouter/meta/muse-spark-1.3-contributor"
       }
     }
   }),
@@ -125989,10 +126060,13 @@ var providers = {
         resolve: "vercel/deepseek/deepseek-v4-pro-0813",
         effort: ["high", "xhigh"]
       },
+      // the gateway's bare `deepseek-v4-flash` is the April preview — the same
+      // fork trap as OpenRouter, with `deepseek-v4-flash-0731` beside it — so
+      // this entry sat on the preview until V4.1. the gateway publishes no
+      // effort ladder for the V4.1 id.
       "deepseek-flash": {
         displayName: "DeepSeek Flash",
-        resolve: "vercel/deepseek/deepseek-v4-flash",
-        effort: ["high", "xhigh"]
+        resolve: "vercel/deepseek/deepseek-v4.1-flash"
       },
       glm: {
         displayName: "GLM",
@@ -126003,6 +126077,11 @@ var providers = {
         displayName: "Kimi K3",
         resolve: "vercel/moonshotai/kimi-k3",
         effort: ["low", "high", "max"]
+      },
+      // the gateway publishes no effort ladder for this id.
+      "muse-spark": {
+        displayName: "Muse Spark",
+        resolve: "vercel/meta/muse-spark-1.3"
       }
     }
   })
@@ -126098,8 +126177,8 @@ var PROVIDER_LADDERS = {
     deep: "deepseek/deepseek-pro"
   },
   xai: {
-    minimal: "xai/grok-fast",
-    light: "xai/grok-fast",
+    minimal: "xai/grok-4.3",
+    light: "xai/grok-4.3",
     standard: "xai/grok",
     deep: "xai/grok"
   },
@@ -126181,15 +126260,22 @@ if (!defaultProxyAlias?.openRouterResolve) {
 var DEFAULT_PROXY_MODEL = defaultProxyAlias.openRouterResolve;
 var defaultProxyDisplayName = defaultProxyAlias.displayName;
 for (const [name, ladder] of Object.entries({ ...PROVIDER_LADDERS, router: ROUTER_LADDER })) {
+  const terminal = /* @__PURE__ */ new Set();
   for (const slug2 of Object.values(ladder)) {
-    if (!resolveDisplayAlias(slug2)) throw new Error(`${name} ladder names unknown alias ${slug2}`);
+    const alias = resolveDisplayAlias(slug2);
+    if (!alias) throw new Error(`${name} ladder names unknown alias ${slug2}`);
+    terminal.add(alias.slug);
   }
+  if (terminal.size < 2) throw new Error(`${name} ladder runs every tier on ${[...terminal][0]}`);
 }
 var OSS_MODEL_ALLOWLIST = [
   "deepseek/deepseek-flash",
-  "deepseek/deepseek-pro",
   "openai/gpt-luna",
-  "openrouter/minimax-m2.5"
+  "openrouter/minimax-m2.5",
+  // opt-in: 0.86x the old default on the measured mix, and Meta trains on the
+  // traffic — fine for public code on headless runs, the human decided
+  // 2026-09-11. unmeasured on a real run; not the default until it is.
+  "meta/muse-spark-contributor"
 ];
 var OSS_RECOMMENDED_MODEL = AUTO_TIER_TARGET[AUTO_EFFICIENT];
 function ossFundedModelNames() {
@@ -135865,13 +135951,29 @@ function azureProvider(model) {
   };
 }
 var KIMI_ENFORCERLESS_PROVIDERS = ["siliconflow", "together"];
-function kimiOpenRouterProviderOverrides() {
-  return Object.fromEntries(
-    modelAliases.map((a2) => a2.openRouterResolve).filter((r2) => r2?.includes("kimi") ?? false).map((r2) => [
-      r2.replace(/^openrouter\//, ""),
-      { options: { provider: { ignore: KIMI_ENFORCERLESS_PROVIDERS } } }
-    ])
-  );
+function openRouterDataCollection(ctx) {
+  if (!ctx.payload.proxyModel) return void 0;
+  return ctx.toolState.oss ? "allow" : "deny";
+}
+function dataCollectionPreference(policy) {
+  if (!policy) return {};
+  return { data_collection: policy };
+}
+function openRouterProvider(policy) {
+  const models = {};
+  for (const alias of modelAliases) {
+    const id = alias.openRouterResolve?.replace(/^openrouter\//, "");
+    if (!id) continue;
+    if (id.endsWith("-contributor")) {
+      models[id] = { options: { provider: { data_collection: "allow" } } };
+    }
+    if (id.includes("kimi")) {
+      const provider2 = { ...dataCollectionPreference(policy), ignore: KIMI_ENFORCERLESS_PROVIDERS };
+      models[id] = { options: { provider: provider2 } };
+    }
+  }
+  if (!policy) return { models };
+  return { options: { extraBody: { provider: { data_collection: policy } } }, models };
 }
 function buildReviewerAgentConfig(orchestratorModel) {
   const overrides = deriveSubagentModels(orchestratorModel);
@@ -135947,13 +136049,12 @@ function buildSecurityConfig(ctx, model) {
       log2.info(`\xBB subagent models: reviewfrog=${reviewerModel}`);
       return cfg;
     })(),
-    // kimi pinned away from Enforcer-less openrouter providers (siliconflow /
-    // together) that drop optional tool-call params — per-model on the
-    // openrouter route, so other models are unaffected. this is routing, not
-    // reasoning: every model's effort now rides the per-prompt `variant`.
-    // see opencodeShared.ts.
+    // openrouter routing, not reasoning (every model's effort rides the
+    // per-prompt `variant`): the run's data-collection policy, kimi pinned
+    // away from Enforcer-less providers, the Muse Spark contributor tier
+    // opened to training hosts. see opencodeShared.ts.
     provider: {
-      openrouter: { models: kimiOpenRouterProviderOverrides() },
+      openrouter: openRouterProvider(openRouterDataCollection(ctx)),
       ...openAICompatibleProvider(model),
       ...azureProvider(model),
       ...providerGatewayOverride(model)
@@ -219871,7 +219972,7 @@ function resolveTarget2(repo) {
   return { owner: match3[1], repo: match3[2] };
 }
 function cliVersion() {
-  const parts = /^(\d+)\.(\d+)\.(\d+)$/.exec("0.1.77");
+  const parts = /^(\d+)\.(\d+)\.(\d+)$/.exec("0.1.78");
   if (!parts) return "0.0.0";
   return `${Number(parts[1])}.${Number(parts[2])}.${Number(parts[3])}`;
 }
@@ -220038,7 +220139,7 @@ async function runCli8(input2) {
 }
 
 // cli.ts
-var VERSION10 = "0.1.77";
+var VERSION10 = "0.1.78";
 var bin = basename2(process.argv[1] || "");
 var PROG = bin === "pf" || bin === "pullfrog" ? bin : "pullfrog";
 var rawArgs = process.argv.slice(2);

package/dist/index.js

@@ -107941,26 +107941,34 @@ var providers = {
     models: {
       grok: {
         displayName: "Grok",
-        resolve: "xai/grok-4.5",
-        effort: ["low", "medium", "high"],
-        openRouterResolve: "openrouter/x-ai/grok-4.5",
+        resolve: "xai/grok-4.6",
+        effort: ["low", "medium", "high", "xhigh"],
+        openRouterResolve: "openrouter/x-ai/grok-4.6",
         preferred: true
       },
+      // the Smart ladder's cheap rung: 1.25/2.5 against 4.6's 2/6, and a 0.2
+      // cache read against 0.5 — the only live xAI model a rung can save on.
+      "grok-4.3": {
+        displayName: "Grok 4.3",
+        resolve: "xai/grok-4.3",
+        effort: ["none", "low", "medium", "high"],
+        openRouterResolve: "openrouter/x-ai/grok-4.3"
+      },
       // legacy aliases — xAI retired the entire fast/code-fast line on
       // 2026-05-15 (https://docs.x.ai/developers/migration/may-15-deprecation)
       // and now redirects every deprecated text-model slug to grok-4.3 at
       // standard pricing. fall back to the live `xai/grok` so the alias
-      // chain resolves to grok-4.5 for both direct-key and OpenRouter users.
+      // chain resolves to grok-4.6 for both direct-key and OpenRouter users.
       "grok-fast": {
         displayName: "Grok Fast",
         resolve: "xai/grok-4-1-fast",
-        openRouterResolve: "openrouter/x-ai/grok-4.5",
+        openRouterResolve: "openrouter/x-ai/grok-4.6",
         fallback: "xai/grok"
       },
       "grok-code-fast": {
         displayName: "Grok Code Fast",
         resolve: "xai/grok-code-fast-1",
-        openRouterResolve: "openrouter/x-ai/grok-4.5",
+        openRouterResolve: "openrouter/x-ai/grok-4.6",
         fallback: "xai/grok"
       }
     }
@@ -107979,6 +107987,12 @@ var providers = {
       // $0.0405. there is no `~deepseek/*-pro-latest` pointer to track, so this
       // one has to be a dated pin; the `models-catalog` drift test is what
       // catches the next release.
+      // from 2026-09-14 DeepSeek serves every direct `deepseek-v4-pro` call with
+      // V4.1-Flash at Flash rates until V4.1-Pro ships. it is still the only Pro
+      // id the vendor lists, and the OpenRouter 0813 pin is third-party-hosted
+      // and unaffected — so no `fallback` to Flash, which would drag the Router
+      // route down with it. the OSS program dropped Pro from its menu instead;
+      // see `OSS_MODEL_ALLOWLIST`.
       "deepseek-pro": {
         displayName: "DeepSeek Pro",
         resolve: "deepseek/deepseek-v4-pro",
@@ -107987,30 +108001,24 @@ var providers = {
         openRouterResolve: "openrouter/deepseek/deepseek-v4-pro-0813",
         preferred: true
       },
-      // DeepSeek upgrades the `deepseek-v4-flash` API model in place, so the
-      // direct `resolve` needs no version. OpenRouter instead forked the 0731
-      // release into its own id and left the April preview live under the
-      // unversioned one at a HIGHER price ($0.14/$0.28 vs $0.09/$0.18) — so the
-      // OpenRouter route can never use the bare id. it tracks the rolling
-      // `~deepseek/*-latest` pointer (rule 4), which follows the next in-place
-      // upgrade on its own rather than pinning a dated snapshot that goes stale
-      // every release. that pointer is NOT priced like 0731 — its listed rates
-      // run +40% on output and +57.5% on cache read, and it costs 12% more per
-      // run on authoritative spend ($0.0405 vs $0.0361). kept anyway: ~$45/yr
-      // buys auto-following the upgrade, and the listed gap overstates the real
-      // one because a rolling alias prices at its routing ceiling.
-      // 0731 gained a `low` rung and renamed the top to `max`, and that ladder
-      // now reads the same on BOTH routes — the in-place direct upgrade caught
-      // up to the fork. so `low`, not `high`, is position 0 either way, which is
-      // why the OSS effort floor in `main.ts` pins the `high` rung by name. Pro
-      // is the same shape via OpenRouter since 0813; only its direct route still
-      // starts at `high`.
+      // V4.1-Flash (2026-09-10) retired `deepseek-v4-flash`; DeepSeek's /models
+      // now lists the unversioned `deepseek-flash`, so the direct resolve is the
+      // rolling id at the same price. OpenRouter treats V4.1 as its own id
+      // (`deepseek/deepseek-v4.1-flash`, $0.15/$0.6, cache $0.003) and its
+      // `~deepseek/deepseek-v4-flash-latest` pointer still served 0731 on
+      // 2026-09-11, so this is a pinned id rather than the pointer and the next
+      // Flash release is a catalog edit (the bump cron flags it). this target is
+      // the funded OSS default: priced on the measured OSS token mix at x1.34
+      // the pointer's $0.0531/run on the DeepSeek-hosted endpoint — see
+      // wiki/oss-model-allowlist.md. the bare `deepseek-v4-flash` on OpenRouter
+      // is still the April preview, so that route can never use it. both routes
+      // publish `low, high, max`; the OSS effort floor pins `high` by name.
       "deepseek-flash": {
         displayName: "DeepSeek Flash",
-        resolve: "deepseek/deepseek-v4-flash",
+        resolve: "deepseek/deepseek-flash",
         effort: ["low", "high", "max"],
         openRouterEffort: ["low", "high", "max"],
-        openRouterResolve: "openrouter/~deepseek/deepseek-v4-flash-latest"
+        openRouterResolve: "openrouter/deepseek/deepseek-v4.1-flash"
       },
       // legacy aliases — deepseek retires these on 2026-07-24; transparently
       // upgrade existing users to the v4 family via the fallback chain.
@@ -108113,6 +108121,40 @@ var providers = {
       }
     }
   }),
+  // Meta Model API — the direct route to Muse Spark. a registry entry, like
+  // kimi-for-coding: models.dev carries `meta` (`https://api.meta.ai/v1`, npm
+  // `@ai-sdk/openai`) and opencode 1.18.29 enables it from a bare
+  // META_MODEL_API_KEY — all five ids list in `opencode models`, and a bogus key
+  // reaches Meta's own auth check (`invalid_api_key`). see wiki/muse-spark.md.
+  meta: provider({
+    displayName: "Meta",
+    envVars: ["META_MODEL_API_KEY"],
+    models: {
+      // the Standard tier. no `subagentModel`: the contributor tier below is
+      // the same model, not a cheaper sibling.
+      "muse-spark": {
+        displayName: "Muse Spark",
+        resolve: "meta/muse-spark-1.3",
+        effort: ["minimal", "low", "medium", "high", "xhigh", "max"],
+        openRouterResolve: "openrouter/meta/muse-spark-1.3",
+        preferred: true
+      },
+      // the Contributor tier: the same model at $0.10 / $0.20 (cache read
+      // $0.002) because Meta trains on the prompts and completions. an opt-in
+      // pick on the OSS menu (public code, headless runs), never the default.
+      // OpenRouter only serves it when the account allows paid-model training,
+      // so the runtime opens data collection for this id alone — see
+      // `openRouterProvider` in opencodeShared.ts.
+      "muse-spark-contributor": {
+        displayName: "Muse Spark Contributor",
+        description: "Meta trains on prompts and completions",
+        resolve: "meta/muse-spark-1.3-contributor",
+        effort: ["minimal", "low", "medium", "high", "xhigh"],
+        openRouterEffort: ["minimal", "low", "medium", "high", "xhigh", "max"],
+        openRouterResolve: "openrouter/meta/muse-spark-1.3-contributor"
+      }
+    }
+  }),
   opencode: provider({
     displayName: "OpenCode Zen",
     envVars: ["OPENCODE_API_KEY"],
@@ -108313,6 +108355,17 @@ var providers = {
         effort: ["minimal", "low", "medium", "high"],
         openRouterResolve: "openrouter/openai/gpt-5-nano"
       },
+      // Zen's PAID Muse Spark, priced like Meta's own Standard tier. not the
+      // `-contributor-free` id beside it, which is the data-collection variant
+      // Go refuses with DataPolicyError. unverified through the harness on
+      // 2026-09-11: the workspace was out of balance and a claude-sonnet-5
+      // control failed identically. see wiki/muse-spark.md.
+      "muse-spark": {
+        displayName: "Muse Spark",
+        resolve: "opencode/muse-spark-1.3",
+        effort: ["minimal", "low", "medium", "high", "xhigh", "max"],
+        openRouterResolve: "openrouter/meta/muse-spark-1.3"
+      },
       // Zen's live free MiMo, and the second free row in a menu that big-pickle
       // was alone in since `mimo-v2-pro-free` lost its model.
       mimo: {
@@ -108692,9 +108745,9 @@ var providers = {
       },
       grok: {
         displayName: "Grok",
-        resolve: "openrouter/x-ai/grok-4.5",
-        effort: ["low", "medium", "high"],
-        openRouterResolve: "openrouter/x-ai/grok-4.5"
+        resolve: "openrouter/x-ai/grok-4.6",
+        effort: ["low", "medium", "high", "xhigh"],
+        openRouterResolve: "openrouter/x-ai/grok-4.6"
       },
       // dated pin, not the bare id — see `deepseek/deepseek-pro` for why
       // OpenRouter's unversioned `deepseek-v4-pro` is the stale April preview.
@@ -108704,13 +108757,14 @@ var providers = {
         effort: ["low", "high", "max"],
         openRouterResolve: "openrouter/deepseek/deepseek-v4-pro-0813"
       },
-      // rolling pointer, not the bare id — see `deepseek/deepseek-flash` for why
-      // OpenRouter's unversioned `deepseek-v4-flash` is the stale April preview.
+      // the V4.1 id, not the bare one — see `deepseek/deepseek-flash` for why
+      // OpenRouter's unversioned `deepseek-v4-flash` is the stale April preview
+      // and why the `~deepseek/*-latest` pointer is no longer the target.
       "deepseek-flash": {
         displayName: "DeepSeek Flash",
-        resolve: "openrouter/~deepseek/deepseek-v4-flash-latest",
+        resolve: "openrouter/deepseek/deepseek-v4.1-flash",
         effort: ["low", "high", "max"],
-        openRouterResolve: "openrouter/~deepseek/deepseek-v4-flash-latest"
+        openRouterResolve: "openrouter/deepseek/deepseek-v4.1-flash"
       },
       // legacy alias — deepseek retires this on 2026-07-24; transparently
       // upgrade existing users to the v4 family via the fallback chain.
@@ -108741,6 +108795,23 @@ var providers = {
         displayName: "MiniMax M3",
         resolve: "openrouter/minimax/minimax-m3",
         openRouterResolve: "openrouter/minimax/minimax-m3"
+      },
+      // OpenRouter gates Meta models on an ACCOUNT-level 18+ confirmation
+      // (openrouter.ai/settings/preferences). Pullfrog's account has it, so the
+      // Router path runs; a BYOK OpenRouter key without it refuses with that
+      // link before the request reaches Meta. see wiki/muse-spark.md.
+      "muse-spark": {
+        displayName: "Muse Spark",
+        resolve: "openrouter/meta/muse-spark-1.3",
+        effort: ["minimal", "low", "medium", "high", "xhigh", "max"],
+        openRouterResolve: "openrouter/meta/muse-spark-1.3"
+      },
+      "muse-spark-contributor": {
+        displayName: "Muse Spark Contributor",
+        description: "Meta trains on prompts and completions",
+        resolve: "openrouter/meta/muse-spark-1.3-contributor",
+        effort: ["minimal", "low", "medium", "high", "xhigh", "max"],
+        openRouterResolve: "openrouter/meta/muse-spark-1.3-contributor"
       }
     }
   }),
@@ -108808,10 +108879,13 @@ var providers = {
         resolve: "vercel/deepseek/deepseek-v4-pro-0813",
         effort: ["high", "xhigh"]
       },
+      // the gateway's bare `deepseek-v4-flash` is the April preview — the same
+      // fork trap as OpenRouter, with `deepseek-v4-flash-0731` beside it — so
+      // this entry sat on the preview until V4.1. the gateway publishes no
+      // effort ladder for the V4.1 id.
       "deepseek-flash": {
         displayName: "DeepSeek Flash",
-        resolve: "vercel/deepseek/deepseek-v4-flash",
-        effort: ["high", "xhigh"]
+        resolve: "vercel/deepseek/deepseek-v4.1-flash"
       },
       glm: {
         displayName: "GLM",
@@ -108822,6 +108896,11 @@ var providers = {
         displayName: "Kimi K3",
         resolve: "vercel/moonshotai/kimi-k3",
         effort: ["low", "high", "max"]
+      },
+      // the gateway publishes no effort ladder for this id.
+      "muse-spark": {
+        displayName: "Muse Spark",
+        resolve: "vercel/meta/muse-spark-1.3"
       }
     }
   })
@@ -108917,8 +108996,8 @@ var PROVIDER_LADDERS = {
     deep: "deepseek/deepseek-pro"
   },
   xai: {
-    minimal: "xai/grok-fast",
-    light: "xai/grok-fast",
+    minimal: "xai/grok-4.3",
+    light: "xai/grok-4.3",
     standard: "xai/grok",
     deep: "xai/grok"
   },
@@ -109000,15 +109079,22 @@ if (!defaultProxyAlias?.openRouterResolve) {
 var DEFAULT_PROXY_MODEL = defaultProxyAlias.openRouterResolve;
 var defaultProxyDisplayName = defaultProxyAlias.displayName;
 for (const [name, ladder] of Object.entries({ ...PROVIDER_LADDERS, router: ROUTER_LADDER })) {
+  const terminal = /* @__PURE__ */ new Set();
   for (const slug2 of Object.values(ladder)) {
-    if (!resolveDisplayAlias(slug2)) throw new Error(`${name} ladder names unknown alias ${slug2}`);
+    const alias = resolveDisplayAlias(slug2);
+    if (!alias) throw new Error(`${name} ladder names unknown alias ${slug2}`);
+    terminal.add(alias.slug);
   }
+  if (terminal.size < 2) throw new Error(`${name} ladder runs every tier on ${[...terminal][0]}`);
 }
 var OSS_MODEL_ALLOWLIST = [
   "deepseek/deepseek-flash",
-  "deepseek/deepseek-pro",
   "openai/gpt-luna",
-  "openrouter/minimax-m2.5"
+  "openrouter/minimax-m2.5",
+  // opt-in: 0.86x the old default on the measured mix, and Meta trains on the
+  // traffic — fine for public code on headless runs, the human decided
+  // 2026-09-11. unmeasured on a real run; not the default until it is.
+  "meta/muse-spark-contributor"
 ];
 var OSS_RECOMMENDED_MODEL = AUTO_TIER_TARGET[AUTO_EFFICIENT];
 function ossFundedModelNames() {
@@ -109876,7 +109962,7 @@ var import_semver = __toESM(require_semver2(), 1);
 // package.json
 var package_default = {
   name: "pullfrog",
-  version: "0.1.77",
+  version: "0.1.78",
   cliContractVersion: "1",
   type: "module",
   bin: {
@@ -118725,13 +118811,29 @@ function azureProvider(model) {
   };
 }
 var KIMI_ENFORCERLESS_PROVIDERS = ["siliconflow", "together"];
-function kimiOpenRouterProviderOverrides() {
-  return Object.fromEntries(
-    modelAliases.map((a) => a.openRouterResolve).filter((r) => r?.includes("kimi") ?? false).map((r) => [
-      r.replace(/^openrouter\//, ""),
-      { options: { provider: { ignore: KIMI_ENFORCERLESS_PROVIDERS } } }
-    ])
-  );
+function openRouterDataCollection(ctx) {
+  if (!ctx.payload.proxyModel) return void 0;
+  return ctx.toolState.oss ? "allow" : "deny";
+}
+function dataCollectionPreference(policy) {
+  if (!policy) return {};
+  return { data_collection: policy };
+}
+function openRouterProvider(policy) {
+  const models = {};
+  for (const alias of modelAliases) {
+    const id = alias.openRouterResolve?.replace(/^openrouter\//, "");
+    if (!id) continue;
+    if (id.endsWith("-contributor")) {
+      models[id] = { options: { provider: { data_collection: "allow" } } };
+    }
+    if (id.includes("kimi")) {
+      const provider2 = { ...dataCollectionPreference(policy), ignore: KIMI_ENFORCERLESS_PROVIDERS };
+      models[id] = { options: { provider: provider2 } };
+    }
+  }
+  if (!policy) return { models };
+  return { options: { extraBody: { provider: { data_collection: policy } } }, models };
 }
 function buildReviewerAgentConfig(orchestratorModel) {
   const overrides = deriveSubagentModels(orchestratorModel);
@@ -118807,13 +118909,12 @@ function buildSecurityConfig(ctx, model) {
       log.info(`\xBB subagent models: reviewfrog=${reviewerModel}`);
       return cfg;
     })(),
-    // kimi pinned away from Enforcer-less openrouter providers (siliconflow /
-    // together) that drop optional tool-call params — per-model on the
-    // openrouter route, so other models are unaffected. this is routing, not
-    // reasoning: every model's effort now rides the per-prompt `variant`.
-    // see opencodeShared.ts.
+    // openrouter routing, not reasoning (every model's effort rides the
+    // per-prompt `variant`): the run's data-collection policy, kimi pinned
+    // away from Enforcer-less providers, the Muse Spark contributor tier
+    // opened to training hosts. see opencodeShared.ts.
     provider: {
-      openrouter: { models: kimiOpenRouterProviderOverrides() },
+      openrouter: openRouterProvider(openRouterDataCollection(ctx)),
       ...openAICompatibleProvider(model),
       ...azureProvider(model),
       ...providerGatewayOverride(model)

package/dist/internal.js

@@ -8,7 +8,7 @@ var __export = (target, all) => {
 // package.json
 var package_default = {
   name: "pullfrog",
-  version: "0.1.77",
+  version: "0.1.78",
   cliContractVersion: "1",
   type: "module",
   bin: {
@@ -14509,26 +14509,34 @@ var providers = {
     models: {
       grok: {
         displayName: "Grok",
-        resolve: "xai/grok-4.5",
-        effort: ["low", "medium", "high"],
-        openRouterResolve: "openrouter/x-ai/grok-4.5",
+        resolve: "xai/grok-4.6",
+        effort: ["low", "medium", "high", "xhigh"],
+        openRouterResolve: "openrouter/x-ai/grok-4.6",
         preferred: true
       },
+      // the Smart ladder's cheap rung: 1.25/2.5 against 4.6's 2/6, and a 0.2
+      // cache read against 0.5 — the only live xAI model a rung can save on.
+      "grok-4.3": {
+        displayName: "Grok 4.3",
+        resolve: "xai/grok-4.3",
+        effort: ["none", "low", "medium", "high"],
+        openRouterResolve: "openrouter/x-ai/grok-4.3"
+      },
       // legacy aliases — xAI retired the entire fast/code-fast line on
       // 2026-05-15 (https://docs.x.ai/developers/migration/may-15-deprecation)
       // and now redirects every deprecated text-model slug to grok-4.3 at
       // standard pricing. fall back to the live `xai/grok` so the alias
-      // chain resolves to grok-4.5 for both direct-key and OpenRouter users.
+      // chain resolves to grok-4.6 for both direct-key and OpenRouter users.
       "grok-fast": {
         displayName: "Grok Fast",
         resolve: "xai/grok-4-1-fast",
-        openRouterResolve: "openrouter/x-ai/grok-4.5",
+        openRouterResolve: "openrouter/x-ai/grok-4.6",
         fallback: "xai/grok"
       },
       "grok-code-fast": {
         displayName: "Grok Code Fast",
         resolve: "xai/grok-code-fast-1",
-        openRouterResolve: "openrouter/x-ai/grok-4.5",
+        openRouterResolve: "openrouter/x-ai/grok-4.6",
         fallback: "xai/grok"
       }
     }
@@ -14547,6 +14555,12 @@ var providers = {
       // $0.0405. there is no `~deepseek/*-pro-latest` pointer to track, so this
       // one has to be a dated pin; the `models-catalog` drift test is what
       // catches the next release.
+      // from 2026-09-14 DeepSeek serves every direct `deepseek-v4-pro` call with
+      // V4.1-Flash at Flash rates until V4.1-Pro ships. it is still the only Pro
+      // id the vendor lists, and the OpenRouter 0813 pin is third-party-hosted
+      // and unaffected — so no `fallback` to Flash, which would drag the Router
+      // route down with it. the OSS program dropped Pro from its menu instead;
+      // see `OSS_MODEL_ALLOWLIST`.
       "deepseek-pro": {
         displayName: "DeepSeek Pro",
         resolve: "deepseek/deepseek-v4-pro",
@@ -14555,30 +14569,24 @@ var providers = {
         openRouterResolve: "openrouter/deepseek/deepseek-v4-pro-0813",
         preferred: true
       },
-      // DeepSeek upgrades the `deepseek-v4-flash` API model in place, so the
-      // direct `resolve` needs no version. OpenRouter instead forked the 0731
-      // release into its own id and left the April preview live under the
-      // unversioned one at a HIGHER price ($0.14/$0.28 vs $0.09/$0.18) — so the
-      // OpenRouter route can never use the bare id. it tracks the rolling
-      // `~deepseek/*-latest` pointer (rule 4), which follows the next in-place
-      // upgrade on its own rather than pinning a dated snapshot that goes stale
-      // every release. that pointer is NOT priced like 0731 — its listed rates
-      // run +40% on output and +57.5% on cache read, and it costs 12% more per
-      // run on authoritative spend ($0.0405 vs $0.0361). kept anyway: ~$45/yr
-      // buys auto-following the upgrade, and the listed gap overstates the real
-      // one because a rolling alias prices at its routing ceiling.
-      // 0731 gained a `low` rung and renamed the top to `max`, and that ladder
-      // now reads the same on BOTH routes — the in-place direct upgrade caught
-      // up to the fork. so `low`, not `high`, is position 0 either way, which is
-      // why the OSS effort floor in `main.ts` pins the `high` rung by name. Pro
-      // is the same shape via OpenRouter since 0813; only its direct route still
-      // starts at `high`.
+      // V4.1-Flash (2026-09-10) retired `deepseek-v4-flash`; DeepSeek's /models
+      // now lists the unversioned `deepseek-flash`, so the direct resolve is the
+      // rolling id at the same price. OpenRouter treats V4.1 as its own id
+      // (`deepseek/deepseek-v4.1-flash`, $0.15/$0.6, cache $0.003) and its
+      // `~deepseek/deepseek-v4-flash-latest` pointer still served 0731 on
+      // 2026-09-11, so this is a pinned id rather than the pointer and the next
+      // Flash release is a catalog edit (the bump cron flags it). this target is
+      // the funded OSS default: priced on the measured OSS token mix at x1.34
+      // the pointer's $0.0531/run on the DeepSeek-hosted endpoint — see
+      // wiki/oss-model-allowlist.md. the bare `deepseek-v4-flash` on OpenRouter
+      // is still the April preview, so that route can never use it. both routes
+      // publish `low, high, max`; the OSS effort floor pins `high` by name.
       "deepseek-flash": {
         displayName: "DeepSeek Flash",
-        resolve: "deepseek/deepseek-v4-flash",
+        resolve: "deepseek/deepseek-flash",
         effort: ["low", "high", "max"],
         openRouterEffort: ["low", "high", "max"],
-        openRouterResolve: "openrouter/~deepseek/deepseek-v4-flash-latest"
+        openRouterResolve: "openrouter/deepseek/deepseek-v4.1-flash"
       },
       // legacy aliases — deepseek retires these on 2026-07-24; transparently
       // upgrade existing users to the v4 family via the fallback chain.
@@ -14681,6 +14689,40 @@ var providers = {
       }
     }
   }),
+  // Meta Model API — the direct route to Muse Spark. a registry entry, like
+  // kimi-for-coding: models.dev carries `meta` (`https://api.meta.ai/v1`, npm
+  // `@ai-sdk/openai`) and opencode 1.18.29 enables it from a bare
+  // META_MODEL_API_KEY — all five ids list in `opencode models`, and a bogus key
+  // reaches Meta's own auth check (`invalid_api_key`). see wiki/muse-spark.md.
+  meta: provider({
+    displayName: "Meta",
+    envVars: ["META_MODEL_API_KEY"],
+    models: {
+      // the Standard tier. no `subagentModel`: the contributor tier below is
+      // the same model, not a cheaper sibling.
+      "muse-spark": {
+        displayName: "Muse Spark",
+        resolve: "meta/muse-spark-1.3",
+        effort: ["minimal", "low", "medium", "high", "xhigh", "max"],
+        openRouterResolve: "openrouter/meta/muse-spark-1.3",
+        preferred: true
+      },
+      // the Contributor tier: the same model at $0.10 / $0.20 (cache read
+      // $0.002) because Meta trains on the prompts and completions. an opt-in
+      // pick on the OSS menu (public code, headless runs), never the default.
+      // OpenRouter only serves it when the account allows paid-model training,
+      // so the runtime opens data collection for this id alone — see
+      // `openRouterProvider` in opencodeShared.ts.
+      "muse-spark-contributor": {
+        displayName: "Muse Spark Contributor",
+        description: "Meta trains on prompts and completions",
+        resolve: "meta/muse-spark-1.3-contributor",
+        effort: ["minimal", "low", "medium", "high", "xhigh"],
+        openRouterEffort: ["minimal", "low", "medium", "high", "xhigh", "max"],
+        openRouterResolve: "openrouter/meta/muse-spark-1.3-contributor"
+      }
+    }
+  }),
   opencode: provider({
     displayName: "OpenCode Zen",
     envVars: ["OPENCODE_API_KEY"],
@@ -14881,6 +14923,17 @@ var providers = {
         effort: ["minimal", "low", "medium", "high"],
         openRouterResolve: "openrouter/openai/gpt-5-nano"
       },
+      // Zen's PAID Muse Spark, priced like Meta's own Standard tier. not the
+      // `-contributor-free` id beside it, which is the data-collection variant
+      // Go refuses with DataPolicyError. unverified through the harness on
+      // 2026-09-11: the workspace was out of balance and a claude-sonnet-5
+      // control failed identically. see wiki/muse-spark.md.
+      "muse-spark": {
+        displayName: "Muse Spark",
+        resolve: "opencode/muse-spark-1.3",
+        effort: ["minimal", "low", "medium", "high", "xhigh", "max"],
+        openRouterResolve: "openrouter/meta/muse-spark-1.3"
+      },
       // Zen's live free MiMo, and the second free row in a menu that big-pickle
       // was alone in since `mimo-v2-pro-free` lost its model.
       mimo: {
@@ -15260,9 +15313,9 @@ var providers = {
       },
       grok: {
         displayName: "Grok",
-        resolve: "openrouter/x-ai/grok-4.5",
-        effort: ["low", "medium", "high"],
-        openRouterResolve: "openrouter/x-ai/grok-4.5"
+        resolve: "openrouter/x-ai/grok-4.6",
+        effort: ["low", "medium", "high", "xhigh"],
+        openRouterResolve: "openrouter/x-ai/grok-4.6"
       },
       // dated pin, not the bare id — see `deepseek/deepseek-pro` for why
       // OpenRouter's unversioned `deepseek-v4-pro` is the stale April preview.
@@ -15272,13 +15325,14 @@ var providers = {
         effort: ["low", "high", "max"],
         openRouterResolve: "openrouter/deepseek/deepseek-v4-pro-0813"
       },
-      // rolling pointer, not the bare id — see `deepseek/deepseek-flash` for why
-      // OpenRouter's unversioned `deepseek-v4-flash` is the stale April preview.
+      // the V4.1 id, not the bare one — see `deepseek/deepseek-flash` for why
+      // OpenRouter's unversioned `deepseek-v4-flash` is the stale April preview
+      // and why the `~deepseek/*-latest` pointer is no longer the target.
       "deepseek-flash": {
         displayName: "DeepSeek Flash",
-        resolve: "openrouter/~deepseek/deepseek-v4-flash-latest",
+        resolve: "openrouter/deepseek/deepseek-v4.1-flash",
         effort: ["low", "high", "max"],
-        openRouterResolve: "openrouter/~deepseek/deepseek-v4-flash-latest"
+        openRouterResolve: "openrouter/deepseek/deepseek-v4.1-flash"
       },
       // legacy alias — deepseek retires this on 2026-07-24; transparently
       // upgrade existing users to the v4 family via the fallback chain.
@@ -15309,6 +15363,23 @@ var providers = {
         displayName: "MiniMax M3",
         resolve: "openrouter/minimax/minimax-m3",
         openRouterResolve: "openrouter/minimax/minimax-m3"
+      },
+      // OpenRouter gates Meta models on an ACCOUNT-level 18+ confirmation
+      // (openrouter.ai/settings/preferences). Pullfrog's account has it, so the
+      // Router path runs; a BYOK OpenRouter key without it refuses with that
+      // link before the request reaches Meta. see wiki/muse-spark.md.
+      "muse-spark": {
+        displayName: "Muse Spark",
+        resolve: "openrouter/meta/muse-spark-1.3",
+        effort: ["minimal", "low", "medium", "high", "xhigh", "max"],
+        openRouterResolve: "openrouter/meta/muse-spark-1.3"
+      },
+      "muse-spark-contributor": {
+        displayName: "Muse Spark Contributor",
+        description: "Meta trains on prompts and completions",
+        resolve: "openrouter/meta/muse-spark-1.3-contributor",
+        effort: ["minimal", "low", "medium", "high", "xhigh", "max"],
+        openRouterResolve: "openrouter/meta/muse-spark-1.3-contributor"
       }
     }
   }),
@@ -15376,10 +15447,13 @@ var providers = {
         resolve: "vercel/deepseek/deepseek-v4-pro-0813",
         effort: ["high", "xhigh"]
       },
+      // the gateway's bare `deepseek-v4-flash` is the April preview — the same
+      // fork trap as OpenRouter, with `deepseek-v4-flash-0731` beside it — so
+      // this entry sat on the preview until V4.1. the gateway publishes no
+      // effort ladder for the V4.1 id.
       "deepseek-flash": {
         displayName: "DeepSeek Flash",
-        resolve: "vercel/deepseek/deepseek-v4-flash",
-        effort: ["high", "xhigh"]
+        resolve: "vercel/deepseek/deepseek-v4.1-flash"
       },
       glm: {
         displayName: "GLM",
@@ -15390,6 +15464,11 @@ var providers = {
         displayName: "Kimi K3",
         resolve: "vercel/moonshotai/kimi-k3",
         effort: ["low", "high", "max"]
+      },
+      // the gateway publishes no effort ladder for this id.
+      "muse-spark": {
+        displayName: "Muse Spark",
+        resolve: "vercel/meta/muse-spark-1.3"
       }
     }
   })
@@ -15505,8 +15584,8 @@ var PROVIDER_LADDERS = {
     deep: "deepseek/deepseek-pro"
   },
   xai: {
-    minimal: "xai/grok-fast",
-    light: "xai/grok-fast",
+    minimal: "xai/grok-4.3",
+    light: "xai/grok-4.3",
     standard: "xai/grok",
     deep: "xai/grok"
   },
@@ -15610,15 +15689,22 @@ if (!defaultProxyAlias?.openRouterResolve) {
 var DEFAULT_PROXY_MODEL = defaultProxyAlias.openRouterResolve;
 var defaultProxyDisplayName = defaultProxyAlias.displayName;
 for (const [name, ladder] of Object.entries({ ...PROVIDER_LADDERS, router: ROUTER_LADDER })) {
+  const terminal = /* @__PURE__ */ new Set();
   for (const slug of Object.values(ladder)) {
-    if (!resolveDisplayAlias(slug)) throw new Error(`${name} ladder names unknown alias ${slug}`);
+    const alias = resolveDisplayAlias(slug);
+    if (!alias) throw new Error(`${name} ladder names unknown alias ${slug}`);
+    terminal.add(alias.slug);
   }
+  if (terminal.size < 2) throw new Error(`${name} ladder runs every tier on ${[...terminal][0]}`);
 }
 var OSS_MODEL_ALLOWLIST = [
   "deepseek/deepseek-flash",
-  "deepseek/deepseek-pro",
   "openai/gpt-luna",
-  "openrouter/minimax-m2.5"
+  "openrouter/minimax-m2.5",
+  // opt-in: 0.86x the old default on the measured mix, and Meta trains on the
+  // traffic — fine for public code on headless runs, the human decided
+  // 2026-09-11. unmeasured on a real run; not the default until it is.
+  "meta/muse-spark-contributor"
 ];
 var OSS_RECOMMENDED_MODEL = AUTO_TIER_TARGET[AUTO_EFFICIENT];
 function ossFundedModelNames() {

package/dist/models.d.ts

@@ -121,6 +121,7 @@ export declare const providers: {
     deepseek: ProviderConfig;
     moonshotai: ProviderConfig;
     "kimi-for-coding": ProviderConfig;
+    meta: ProviderConfig;
     opencode: ProviderConfig;
     "opencode-go": ProviderConfig;
     bedrock: ProviderConfig;
@@ -344,6 +345,12 @@ export declare const DEFAULT_PROXY_MODEL: string;
  * over 2,203 real runs ($0.4782 vs $0.0362), almost entirely on its cache-read
  * RATE — 8.5x Flash's. it also fails 2.9% of runs against Flash's 0.0%. best
  * achievable was 10.9x (cheapest OpenRouter endpoint), so no routing fixes it.
+ *
+ * DeepSeek Pro was funded and then dropped on 2026-09-11: 88% of OSS spend at
+ * $0.3117/run authoritative over 4,795 runs (30d), against Flash's $0.0531 —
+ * and DeepSeek's V4.1-Flash release says it beats V4-Pro and phases Pro out.
+ * a subsidised Pro pick now runs V4.1 Flash; BYOK and Router Pro are untouched.
+ * re-add it only after V4.1-Pro ships AND is priced on a real run.
  * see wiki/oss-model-allowlist.md.
  */
 export declare const OSS_MODEL_ALLOWLIST: readonly string[];

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "pullfrog",
-  "version": "0.1.77",
+  "version": "0.1.78",
   "cliContractVersion": "1",
   "type": "module",
   "bin": {