pullfrog 0.1.81 → 0.1.83

package/dist/cli.mjs

@@ -19991,10 +19991,10 @@ var require_core = __commonJS({
       (0, command_1.issueCommand)("set-env", { name }, convertedVal);
     }
     exports.exportVariable = exportVariable;
-    function setSecret7(secret) {
+    function setSecret2(secret) {
       (0, command_1.issueCommand)("add-mask", {}, secret);
     }
-    exports.setSecret = setSecret7;
+    exports.setSecret = setSecret2;
     function addPath(inputPath) {
       const filePath = process.env["GITHUB_PATH"] || "";
       if (filePath) {
@@ -20099,14 +20099,14 @@ Support boolean input list: \`true | True | TRUE | false | False | FALSE\``);
       });
     }
     exports.group = group2;
-    function saveState4(name, value2) {
+    function saveState2(name, value2) {
       const filePath = process.env["GITHUB_STATE"] || "";
       if (filePath) {
         return (0, file_command_1.issueFileCommand)("STATE", (0, file_command_1.prepareKeyValueMessage)(name, value2));
       }
       (0, command_1.issueCommand)("save-state", { name }, (0, utils_1.toCommandValue)(value2));
     }
-    exports.saveState = saveState4;
+    exports.saveState = saveState2;
     function getState3(name) {
       return process.env[`STATE_${name}`] || "";
     }
@@ -27894,11 +27894,11 @@ var require_mode = __commonJS({
 var require_isexe = __commonJS({
   "node_modules/.pnpm/isexe@2.0.0/node_modules/isexe/index.js"(exports, module) {
     var fs5 = __require("fs");
-    var core13;
+    var core9;
     if (process.platform === "win32" || global.TESTING_WINDOWS) {
-      core13 = require_windows();
+      core9 = require_windows();
     } else {
-      core13 = require_mode();
+      core9 = require_mode();
     }
     module.exports = isexe;
     isexe.sync = sync;
@@ -27921,7 +27921,7 @@ var require_isexe = __commonJS({
           });
         });
       }
-      core13(path4, options || {}, function(er, is) {
+      core9(path4, options || {}, function(er, is) {
         if (er) {
           if (er.code === "EACCES" || options && options.ignoreErrors) {
             er = null;
@@ -27933,7 +27933,7 @@ var require_isexe = __commonJS({
     }
     function sync(path4, options) {
       try {
-        return core13.sync(path4, options || {});
+        return core9.sync(path4, options || {});
       } catch (er) {
         if (options && options.ignoreErrors || er.code === "EACCES") {
           return false;
@@ -81073,7 +81073,7 @@ var require_core3 = __commonJS({
     Object.defineProperty(exports, "__esModule", { value: true });
     var id_1 = require_id();
     var ref_1 = require_ref();
-    var core13 = [
+    var core9 = [
       "$schema",
       "$id",
       "$defs",
@@ -81083,7 +81083,7 @@ var require_core3 = __commonJS({
       id_1.default,
       ref_1.default
     ];
-    exports.default = core13;
+    exports.default = core9;
   }
 });
 
@@ -123005,7 +123005,7 @@ var import_picocolors = __toESM(require_picocolors(), 1);
 // package.json
 var package_default = {
   name: "pullfrog",
-  version: "0.1.81",
+  version: "0.1.83",
   cliContractVersion: "1",
   type: "module",
   bin: {
@@ -123022,6 +123022,7 @@ var package_default = {
     typecheck: "tsc --noEmit",
     build: "node esbuild.config.js && tsc -p tsconfig.exports.json",
     "check:entrypoints": "nub scripts/check-entrypoint-imports.ts",
+    "check:secret-commands": "nub scripts/check-secret-commands.ts",
     docker: "nub docker.ts",
     play: "nub play.ts",
     runtest: "nub test/run.ts",
@@ -123032,7 +123033,7 @@ var package_default = {
   },
   devDependencies: {
     "@actions/core": "^1.11.1",
-    "@anthropic-ai/claude-code": "2.1.150",
+    "@anthropic-ai/claude-code": "2.1.280",
     "@ark/fs": "0.56.0",
     "@ark/util": "0.56.0",
     "@clack/prompts": "^1.2.0",
@@ -124579,7 +124580,7 @@ without a terminal, only print its URL.`
 }
 
 // commands/gha.ts
-var core12 = __toESM(require_core(), 1);
+var core8 = __toESM(require_core(), 1);
 var import_arg5 = __toESM(require_arg(), 1);
 import { dirname as dirname6 } from "node:path";
 
@@ -124995,19 +124996,19 @@ var providers = {
       // API is the source of truth (#959).
       "claude-fable": {
         displayName: "Claude Fable",
-        resolve: "anthropic/claude-fable-5",
+        resolve: "anthropic/claude-fable-5-1",
         effort: ["low", "medium", "high", "xhigh", "max"],
         // rolling alias: models.dev's OpenRouter mirror lags brand-new pinned
-        // versions (claude-fable-5 isn't indexed yet), so track ~…-latest to
+        // versions (claude-fable-5 was missing there when this was added), so track ~…-latest to
         // stay catalog-valid and auto-follow version bumps.
         openRouterResolve: "openrouter/~anthropic/claude-fable-latest",
         subagentModel: "claude-sonnet"
       },
       "claude-opus": {
         displayName: "Claude Opus",
-        resolve: "anthropic/claude-opus-5",
+        resolve: "anthropic/claude-opus-5-5",
         effort: ["low", "medium", "high", "xhigh", "max"],
-        openRouterResolve: "openrouter/anthropic/claude-opus-5",
+        openRouterResolve: "openrouter/anthropic/claude-opus-5.5",
         preferred: true,
         subagentModel: "claude-sonnet"
       },
@@ -125042,9 +125043,9 @@ var providers = {
       },
       "gpt-sol": {
         displayName: "GPT Sol",
-        resolve: "openai/gpt-5.6-sol",
+        resolve: "openai/gpt-6-sol",
         effort: ["none", "low", "medium", "high", "xhigh", "max"],
-        openRouterResolve: "openrouter/openai/gpt-5.6-sol",
+        openRouterResolve: "openrouter/openai/gpt-6-sol",
         preferred: true,
         subagentModel: "gpt-terra"
       },
@@ -125054,9 +125055,9 @@ var providers = {
       "gpt-sol-pro": {
         displayName: "GPT Sol Pro",
         description: "Maximum reasoning effort",
-        resolve: "openai/gpt-5.6-sol",
+        resolve: "openai/gpt-6-sol",
         effort: ["none", "low", "medium", "high", "xhigh", "max"],
-        openRouterResolve: "openrouter/openai/gpt-5.6-sol-pro",
+        openRouterResolve: "openrouter/openai/gpt-6-sol-pro",
         subagentModel: "gpt-sol"
       },
       // gpt-5.6's balanced mid-tier. selectable on its own and doubles as Sol's
@@ -125069,9 +125070,9 @@ var providers = {
       },
       "gpt-luna": {
         displayName: "GPT Luna",
-        resolve: "openai/gpt-5.6-luna",
+        resolve: "openai/gpt-6-luna",
         effort: ["none", "low", "medium", "high", "xhigh", "max"],
-        openRouterResolve: "openrouter/openai/gpt-5.6-luna"
+        openRouterResolve: "openrouter/openai/gpt-6-luna"
       },
       // legacy aliases — openai unified the codex line into the main GPT family
       // and is shutting down every "-codex" snapshot on 2026-07-23. transparently
@@ -125165,9 +125166,9 @@ var providers = {
     models: {
       grok: {
         displayName: "Grok",
-        resolve: "xai/grok-4.6",
+        resolve: "xai/grok-4.7",
         effort: ["low", "medium", "high", "xhigh"],
-        openRouterResolve: "openrouter/x-ai/grok-4.6",
+        openRouterResolve: "openrouter/x-ai/grok-4.7",
         preferred: true
       },
       // the Smart ladder's cheap rung: 1.25/2.5 against 4.6's 2/6, and a 0.2
@@ -125182,17 +125183,17 @@ var providers = {
       // 2026-05-15 (https://docs.x.ai/developers/migration/may-15-deprecation)
       // and now redirects every deprecated text-model slug to grok-4.3 at
       // standard pricing. fall back to the live `xai/grok` so the alias
-      // chain resolves to grok-4.6 for both direct-key and OpenRouter users.
+      // chain resolves to grok-4.7 for both direct-key and OpenRouter users.
       "grok-fast": {
         displayName: "Grok Fast",
         resolve: "xai/grok-4-1-fast",
-        openRouterResolve: "openrouter/x-ai/grok-4.6",
+        openRouterResolve: "openrouter/x-ai/grok-4.7",
         fallback: "xai/grok"
       },
       "grok-code-fast": {
         displayName: "Grok Code Fast",
         resolve: "xai/grok-code-fast-1",
-        openRouterResolve: "openrouter/x-ai/grok-4.6",
+        openRouterResolve: "openrouter/x-ai/grok-4.7",
         fallback: "xai/grok"
       }
     }
@@ -125220,8 +125221,9 @@ var providers = {
       "deepseek-pro": {
         displayName: "DeepSeek Pro",
         resolve: "deepseek/deepseek-v4-pro",
-        effort: ["high", "max"],
-        openRouterEffort: ["low", "high", "max"],
+        // models.dev gave the direct id V4.1-Flash's ladder on 2026-09-21, which
+        // is what DeepSeek now serves under it — and the same as the Router pin's.
+        effort: ["low", "high", "max"],
         openRouterResolve: "openrouter/deepseek/deepseek-v4-pro-0813",
         preferred: true
       },
@@ -125285,12 +125287,20 @@ var providers = {
   // the same models as `moonshotai` above, billed against a Kimi membership
   // instead of a Moonshot API balance — a separate endpoint, separate model
   // ids and a separate key, which is why it is a provider rather than a second
-  // `envVars` entry. no provider injection is needed: models.dev carries
-  // `kimi-for-coding` (api `https://api.kimi.com/coding/v1`, npm
-  // `@ai-sdk/anthropic`) and opencode's env loop enables it from a bare
+  // `envVars` entry. no provider injection is needed: models.dev carries the
+  // provider (api `https://api.kimi.com/coding/v1`, npm
+  // `@ai-sdk/openai-compatible`) and opencode's env loop enables it from a bare
   // `KIMI_API_KEY`, verified against our pinned opencode-ai@1.18.5 — all four
   // ids list in `opencode models` and a run reaches Kimi's own auth check.
   //
+  // models.dev renamed that provider on 2026-09-18: `kimi-for-coding` became
+  // `kimi-code-plan-cn` (api.kimi.com — where the console mints the key) and
+  // `kimi-code-plan-global` (api.kimi.ai). opencode resolves providers from
+  // its models.dev cache, so a `resolve` still spelling the old key names a
+  // provider it does not know. the `resolve` targets track models.dev's key;
+  // the provider KEY below is Pullfrog's slug and stays put. see
+  // wiki/kimi-code.md.
+  //
   // NO `openRouterResolve` ON PURPOSE. OpenRouter cannot serve a Kimi
   // membership, so a Router path here would silently bill the wallet for
   // Moonshot pay-as-you-go under a slug picked for the opposite reason. The
@@ -125300,9 +125310,11 @@ var providers = {
   // keyless Router pick to the default subsidy model with `noRouterPath`.
   "kimi-for-coding": provider({
     // "Kimi Code" is the product name on kimi.com/code and in the console the
-    // key is minted from. The provider KEY has to stay `kimi-for-coding` — it
-    // is models.dev's id, so it is what `enabled_providers` and every
-    // `resolve` prefix must spell.
+    // key is minted from. the provider KEY stays `kimi-for-coding`: it is the
+    // slug prefix every stored pick, `--model` flag and BYOK card spells, and
+    // it is not what reaches opencode — `enabled_providers` is derived from
+    // the `resolve` prefix (`action/agents/opencode.ts`), which is why the
+    // two may differ here and nowhere else in this file.
     displayName: "Kimi Code",
     envVars: ["KIMI_API_KEY"],
     models: {
@@ -125313,7 +125325,7 @@ var providers = {
       "kimi-k3": {
         displayName: "Kimi K3",
         description: "1M context, but only on Allegretto and above \xB7 Moderato caps it at 256K",
-        resolve: "kimi-for-coding/k3",
+        resolve: "kimi-code-plan-cn/k3",
         effort: ["low", "high", "max"],
         subagentModel: "kimi-k2"
       },
@@ -125328,7 +125340,7 @@ var providers = {
       "kimi-k3-256k": {
         displayName: "Kimi K3 256K",
         description: "Same model at 256K for ~half the quota \xB7 Moderato or above",
-        resolve: "kimi-for-coding/k3-256k",
+        resolve: "kimi-code-plan-cn/k3-256k",
         effort: ["low", "high", "max"],
         preferred: true,
         subagentModel: "kimi-k2"
@@ -125336,7 +125348,7 @@ var providers = {
       "kimi-k2": {
         displayName: "Kimi K2",
         description: "Included in every Kimi membership tier",
-        resolve: "kimi-for-coding/kimi-for-coding",
+        resolve: "kimi-code-plan-cn/kimi-for-coding",
         // models.dev published this ladder on 2026-09-14; the catalog gate
         // mirrors it, so main was red until the alias carried it too.
         effort: ["low", "high", "max"]
@@ -125344,7 +125356,7 @@ var providers = {
       "kimi-k2-highspeed": {
         displayName: "Kimi K2 HighSpeed",
         description: "~6x output speed for ~3x quota \xB7 needs Allegretto or above",
-        resolve: "kimi-for-coding/kimi-for-coding-highspeed"
+        resolve: "kimi-code-plan-cn/kimi-for-coding-highspeed"
       }
     }
   }),
@@ -125409,24 +125421,15 @@ var providers = {
       },
       "claude-opus": {
         displayName: "Claude Opus",
-        resolve: "opencode/claude-opus-5",
+        resolve: "opencode/claude-opus-5-5",
         effort: ["low", "medium", "high", "xhigh", "max"],
-        openRouterResolve: "openrouter/anthropic/claude-opus-5",
-        subagentModel: "claude-sonnet",
-        // TEMPORARY — clear this ONLY when opus completes a run through opencode,
-        // never when the endpoint merely answers. Zen LISTS claude-opus-5 in
-        // /zen/v1/models, so the catalog test passes; on 2026-08-25 the endpoint
-        // itself answered 503 `Upstream request failed: Endpoint is unavailable.`
-        // (measured 5/5; claude-sonnet-5, claude-opus-4-8, claude-haiku-4-5 and
-        // claude-fable-5 all 200 on the same key). opencode retries above the AI
-        // SDK emitting no part.updated, so a run just produces nothing until it is
-        // killed — metaideas/init logged six zero-output failures from 2026-08-23.
-        // The 503 has since cleared and the model is STILL unusable: re-measured
-        // 2026-08-26, direct POST /zen/v1/messages is 10/10 200 at 1.3-4.1s while
-        // `opencode run --model opencode/claude-opus-5` on the same trivial prompt
-        // emitted nothing for 240s in CI. A raw-endpoint 200 is not runtime
-        // availability. see wiki/opencode-silent-stall.md
-        fallback: "opencode/claude-sonnet"
+        openRouterResolve: "openrouter/anthropic/claude-opus-5.5",
+        subagentModel: "claude-sonnet"
+        // fell back to Sonnet from 2026-08-25 to 2026-09-25: Zen listed
+        // claude-opus-5 while `opencode run` on it emitted nothing for 240s. A
+        // raw-endpoint 200 is not runtime availability — the fallback was cleared
+        // only once `opencode run` completed on both claude-opus-5 and 5-5. see
+        // wiki/opencode-silent-stall.md
       },
       "claude-sonnet": {
         displayName: "Claude Sonnet",
@@ -125441,9 +125444,9 @@ var providers = {
       },
       "gpt-sol": {
         displayName: "GPT Sol",
-        resolve: "opencode/gpt-5.6-sol",
+        resolve: "opencode/gpt-6-sol",
         effort: ["none", "low", "medium", "high", "xhigh", "max"],
-        openRouterResolve: "openrouter/openai/gpt-5.6-sol",
+        openRouterResolve: "openrouter/openai/gpt-6-sol",
         subagentModel: "gpt-terra"
       },
       "gpt-astra": {
@@ -125457,9 +125460,9 @@ var providers = {
       "gpt-sol-pro": {
         displayName: "GPT Sol Pro",
         description: "Maximum reasoning effort",
-        resolve: "opencode/gpt-5.6-sol",
+        resolve: "opencode/gpt-6-sol",
         effort: ["none", "low", "medium", "high", "xhigh", "max"],
-        openRouterResolve: "openrouter/openai/gpt-5.6-sol-pro",
+        openRouterResolve: "openrouter/openai/gpt-6-sol-pro",
         subagentModel: "gpt-sol"
       },
       // gpt-5.6 balanced mid-tier — selectable + Sol's subagent. see openai above.
@@ -125471,9 +125474,9 @@ var providers = {
       },
       "gpt-luna": {
         displayName: "GPT Luna",
-        resolve: "opencode/gpt-5.6-luna",
+        resolve: "opencode/gpt-6-luna",
         effort: ["none", "low", "medium", "high", "xhigh", "max"],
-        openRouterResolve: "openrouter/openai/gpt-5.6-luna"
+        openRouterResolve: "openrouter/openai/gpt-6-luna"
       },
       // legacy aliases — see openai provider above for context.
       "gpt-codex": {
@@ -125572,9 +125575,34 @@ var providers = {
       },
       grok: {
         displayName: "Grok",
-        resolve: "opencode/grok-4.6",
+        resolve: "opencode/grok-4.7",
         effort: ["low", "medium", "high", "xhigh"],
-        openRouterResolve: "openrouter/x-ai/grok-4.6"
+        openRouterResolve: "openrouter/x-ai/grok-4.7"
+      },
+      // Zen began listing Qwen's Max and Flash tiers in late 2026-09 (Max on
+      // 09-25); until then `opencode-go` was the only Qwen route, so a Zen
+      // subscriber without Go had none. Plus is still Go-only. Zen's Max entry
+      // publishes a reasoning toggle but no effort rungs.
+      "qwen-max": {
+        displayName: "Qwen Max",
+        resolve: "opencode/qwen3.8-max",
+        openRouterEffort: ["minimal", "low", "medium", "high", "xhigh"],
+        openRouterResolve: "openrouter/qwen/qwen3.8-max-0902",
+        // unlisted until a published `pullfrog` carries this alias (the
+        // merge-vs-publish rule in wiki/models-catalog.md). unhide in the release
+        // that ships it.
+        hidden: true
+      },
+      "qwen-flash": {
+        displayName: "Qwen Flash",
+        resolve: "opencode/qwen3.8-flash",
+        effort: ["low", "medium", "xhigh"],
+        openRouterEffort: [],
+        openRouterResolve: "openrouter/qwen/qwen3.8-flash",
+        // unlisted until a published `pullfrog` carries this alias (the
+        // merge-vs-publish rule in wiki/models-catalog.md). unhide in the release
+        // that ships it.
+        hidden: true
       },
       "gpt-5-nano": {
         displayName: "GPT Nano",
@@ -125587,8 +125615,12 @@ var providers = {
       "muse-spark": {
         displayName: "Muse Spark",
         resolve: "opencode/muse-spark-1.3",
-        effort: ["minimal", "low", "medium", "high", "xhigh", "max"],
-        openRouterResolve: "openrouter/meta/muse-spark-1.3"
+        // models.dev dropped `max` from Zen's ladder on 2026-09-19 while the
+        // OpenRouter and direct `meta/` routes kept it; the catalog gate
+        // mirrors what is published per route.
+        effort: ["minimal", "low", "medium", "high", "xhigh"],
+        openRouterResolve: "openrouter/meta/muse-spark-1.3",
+        openRouterEffort: ["minimal", "low", "medium", "high", "xhigh", "max"]
       },
       // Zen's FREE contributor tier: the same model at $0 because Meta trains
       // on the prompts and completions. Zen served it to our key on 2026-09-12
@@ -125612,13 +125644,38 @@ var providers = {
         resolve: "opencode/union-alpha",
         // free to run, still gated on the provider's own OPENCODE_API_KEY —
         // see the big-pickle note above (#1077).
-        isFree: true
+        isFree: true,
+        // Zen dropped the id from `/v1/models` on 2026-09-18, two days after it
+        // listed it, and answers a 500 for it. a stealth preview has no same-
+        // family successor, so stored picks land on the other free stealth
+        // model, as `minimax-m2.5-free` does.
+        fallback: "opencode/big-pickle"
+      },
+      // Zen's FREE stealth preview (listed 2026-09-23), the third after
+      // big-pickle and union-alpha. OpenRouter's listing: prompts and
+      // completions may be retained by the provider, not trained on. unlike the
+      // first two it publishes an effort ladder, so the gate mirrors one here.
+      "space-bunny": {
+        displayName: "Space Bunny",
+        description: "Stealth preview; prompts may be retained",
+        resolve: "opencode/space-bunny-free",
+        effort: ["low", "medium", "high", "xhigh", "max"],
+        // free to run, still gated on the provider's own OPENCODE_API_KEY —
+        // see the big-pickle note above (#1077).
+        isFree: true,
+        // unlisted until a published `pullfrog` carries this alias: 0.1.82
+        // predates it, so a run passes `opencode/space-bunny` through raw and
+        // Zen answers a 500. unhide in the release that ships it.
+        hidden: true
       },
       // Zen's live free MiMo, and the second free row in a menu that big-pickle
       // was alone in since `mimo-v2-pro-free` lost its model.
       mimo: {
         displayName: "MiMo",
-        resolve: "opencode/mimo-v2.5-free",
+        // models.dev deprecated `mimo-v2.5-free` on 2026-09-22. V2.6-Flash is
+        // the only other MiMo Zen serves, so the slug follows it across the
+        // tier rather than leaving stored picks on a dying id.
+        resolve: "opencode/mimo-v2.6-flash-free",
         // free to run, still gated on the provider's own OPENCODE_API_KEY —
         // see the big-pickle note above (#1077).
         isFree: true
@@ -125647,11 +125704,12 @@ var providers = {
   // OpenCode Go is a separate $10/mo subscription from Zen, served on its own
   // base URL (`https://opencode.ai/zen/go/v1`) but authenticated with the SAME
   // `OPENCODE_API_KEY`. it carries the open-weight coding models plus a couple
-  // of frontier ones, six of which are served ONLY here — Zen's `/v1/models`
-  // does not list qwen3.7/3.8-*, mimo-v2.5-pro, longcat-2.0 or hy3. (it listed
+  // of frontier ones, four of which are served ONLY here — Zen's `/v1/models`
+  // does not list qwen3.7-plus, mimo-v2.6-pro, longcat-2.0 or hy3. (it listed
   // no glm-5.3* either until 2026-09, which is why `opencode/glm` trailed on
-  // 5.2.) so for a Go subscriber this provider is not a duplicate route to Zen,
-  // it is the only route to a large part of what they pay for.
+  // 5.2, and no qwen3.8-* until late 2026-09.) so for a Go subscriber this
+  // provider is not a duplicate route to Zen, it is the only route to a large
+  // part of what they pay for.
   // like `opencode` and `openrouter` this is a ROUTER, not a vendor: slugs and
   // display names mirror the upstream brand tier, and the picker groups them
   // under the upstream vendor.
@@ -125711,7 +125769,8 @@ var providers = {
       // picker row that fails for almost everyone is worse than none. DeepSeek
       // stays reachable ungated via `deepseek/*`, `opencode/*` and
       // `openrouter/*`; both remain runnable by full specifier once opted in.
-      // Alibaba — new vendor family for the catalog; Zen serves neither tier.
+      // Alibaba — Zen serves Max and Flash too (see `opencode/qwen-max`); Plus
+      // is Go-only.
       "qwen-max": {
         displayName: "Qwen Max",
         resolve: "opencode-go/qwen3.8-max",
@@ -125754,8 +125813,8 @@ var providers = {
       // Xiaomi — Go-only; Zen serves the free `mimo-v2-pro-free` promo instead.
       "mimo-pro": {
         displayName: "MiMo Pro",
-        resolve: "opencode-go/mimo-v2.5-pro",
-        openRouterResolve: "openrouter/xiaomi/mimo-v2.5-pro"
+        resolve: "opencode-go/mimo-v2.6-pro",
+        openRouterResolve: "openrouter/xiaomi/mimo-v2.6-pro"
       },
       // Meituan — Go-only.
       longcat: {
@@ -125781,15 +125840,15 @@ var providers = {
       // wiki/models-catalog.md on `opencode/kimi-k2`.
       grok: {
         displayName: "Grok",
-        resolve: "opencode-go/grok-4.6",
+        resolve: "opencode-go/grok-4.7",
         effort: ["low", "medium", "high", "xhigh"],
-        openRouterResolve: "openrouter/x-ai/grok-4.6"
+        openRouterResolve: "openrouter/x-ai/grok-4.7"
       },
       "gpt-luna": {
         displayName: "GPT Luna",
-        resolve: "opencode-go/gpt-5.6-luna",
+        resolve: "opencode-go/gpt-6-luna",
         effort: ["none", "low", "medium", "high", "xhigh", "max"],
-        openRouterResolve: "openrouter/openai/gpt-5.6-luna"
+        openRouterResolve: "openrouter/openai/gpt-6-luna"
       }
     }
   }),
@@ -125891,15 +125950,15 @@ var providers = {
         resolve: "openrouter/~anthropic/claude-haiku-latest",
         openRouterResolve: "openrouter/~anthropic/claude-haiku-latest"
       },
-      // pinned to the explicit gpt-5.6 tiers (not the ~openai/gpt-latest rolling
-      // alias): after the Sol/Terra/Luna rename, ~gpt-mini-latest no longer maps
+      // pinned to the explicit Sol/Terra/Luna tiers (not the ~openai/gpt-latest
+      // rolling alias): after that rename, ~gpt-mini-latest no longer maps
       // to Luna, so rolling aliases would silently diverge `gpt`/`gpt-mini` from
       // the chosen tiers across funding paths.
       "gpt-sol": {
         displayName: "GPT Sol",
-        resolve: "openrouter/openai/gpt-5.6-sol",
+        resolve: "openrouter/openai/gpt-6-sol",
         effort: ["none", "low", "medium", "high", "xhigh", "max"],
-        openRouterResolve: "openrouter/openai/gpt-5.6-sol",
+        openRouterResolve: "openrouter/openai/gpt-6-sol",
         subagentModel: "gpt-terra"
       },
       "gpt-astra": {
@@ -125913,9 +125972,9 @@ var providers = {
       "gpt-sol-pro": {
         displayName: "GPT Sol Pro",
         description: "Maximum reasoning effort",
-        resolve: "openrouter/openai/gpt-5.6-sol-pro",
+        resolve: "openrouter/openai/gpt-6-sol-pro",
         effort: ["none", "low", "medium", "high", "xhigh", "max"],
-        openRouterResolve: "openrouter/openai/gpt-5.6-sol-pro",
+        openRouterResolve: "openrouter/openai/gpt-6-sol-pro",
         subagentModel: "gpt-sol"
       },
       // gpt-5.6 balanced mid-tier — selectable + Sol's subagent. see openai above.
@@ -125927,9 +125986,9 @@ var providers = {
       },
       "gpt-luna": {
         displayName: "GPT Luna",
-        resolve: "openrouter/openai/gpt-5.6-luna",
+        resolve: "openrouter/openai/gpt-6-luna",
         effort: ["none", "low", "medium", "high", "xhigh", "max"],
-        openRouterResolve: "openrouter/openai/gpt-5.6-luna"
+        openRouterResolve: "openrouter/openai/gpt-6-luna"
       },
       // legacy aliases — see openai provider for context.
       "gpt-codex": {
@@ -125993,9 +126052,9 @@ var providers = {
       },
       grok: {
         displayName: "Grok",
-        resolve: "openrouter/x-ai/grok-4.6",
+        resolve: "openrouter/x-ai/grok-4.7",
         effort: ["low", "medium", "high", "xhigh"],
-        openRouterResolve: "openrouter/x-ai/grok-4.6"
+        openRouterResolve: "openrouter/x-ai/grok-4.7"
       },
       // dated pin, not the bare id — see `deepseek/deepseek-pro` for why
       // OpenRouter's unversioned `deepseek-v4-pro` is the stale April preview.
@@ -126066,8 +126125,10 @@ var providers = {
   vercel: provider({
     // Vercel AI Gateway — one key serves every model it fronts. model IDs use
     // the models.dev `vercel` catalog's own naming (dotted versions, e.g.
-    // `anthropic/claude-opus-5`, `zai/glm-5.3`), and effort ladders mirror that
-    // catalog's entries, not the upstream vendor's. deliberately no
+    // `anthropic/claude-opus-5.5`, `zai/glm-5.3`). effort ladders come from the
+    // gateway's OWN `/v1/models`, not models.dev — the two disagree routinely
+    // (on 2026-09-22 they disagreed on all ten entries that drifted), and the
+    // drift test reads the gateway for that reason. deliberately no
     // `openRouterResolve`: a gateway pick is BYOK-only — silently rerouting it
     // over the Router proxy would bill the wallet for traffic the user pointed
     // at their own gateway.
@@ -126076,7 +126137,7 @@ var providers = {
     models: {
       "claude-opus": {
         displayName: "Claude Opus",
-        resolve: "vercel/anthropic/claude-opus-5",
+        resolve: "vercel/anthropic/claude-opus-5.5",
         effort: ["low", "medium", "high", "xhigh", "max"],
         preferred: true,
         subagentModel: "claude-sonnet"
@@ -126084,7 +126145,7 @@ var providers = {
       "claude-sonnet": {
         displayName: "Claude Sonnet",
         resolve: "vercel/anthropic/claude-sonnet-5",
-        effort: ["low", "medium", "high", "xhigh"]
+        effort: ["none", "low", "medium", "high", "xhigh", "max"]
       },
       "claude-haiku": {
         displayName: "Claude Haiku",
@@ -126092,7 +126153,7 @@ var providers = {
       },
       "gpt-sol": {
         displayName: "GPT Sol",
-        resolve: "vercel/openai/gpt-5.6-sol",
+        resolve: "vercel/openai/gpt-6-sol",
         effort: ["none", "low", "medium", "high", "xhigh", "max"],
         subagentModel: "gpt-terra"
       },
@@ -126105,35 +126166,35 @@ var providers = {
       "gpt-terra": {
         displayName: "GPT Terra",
         resolve: "vercel/openai/gpt-5.6-terra",
-        effort: ["none", "low", "medium", "high", "xhigh", "max"]
+        effort: ["none", "minimal", "low", "medium", "high", "xhigh", "max"]
       },
       "gpt-luna": {
         displayName: "GPT Luna",
-        resolve: "vercel/openai/gpt-5.6-luna",
+        resolve: "vercel/openai/gpt-6-luna",
         effort: ["none", "low", "medium", "high", "xhigh", "max"]
       },
       "gemini-pro": {
         displayName: "Gemini Pro",
         resolve: "vercel/google/gemini-3.1-pro-preview",
-        effort: ["low", "medium", "high"]
+        effort: ["low", "high"]
       },
       "gemini-flash": {
         displayName: "Gemini Flash",
         resolve: "vercel/google/gemini-3.8-flash",
-        effort: ["low", "medium", "high"]
+        effort: ["low", "high"]
       },
       "deepseek-pro": {
         displayName: "DeepSeek Pro",
         resolve: "vercel/deepseek/deepseek-v4-pro-0813",
-        effort: ["high", "xhigh"]
+        effort: ["none", "high", "max"]
       },
       // the gateway's bare `deepseek-v4-flash` is the April preview — the same
       // fork trap as OpenRouter, with `deepseek-v4-flash-0731` beside it — so
-      // this entry sat on the preview until V4.1. the gateway publishes no
-      // effort ladder for the V4.1 id.
+      // this entry sat on the preview until V4.1.
       "deepseek-flash": {
         displayName: "DeepSeek Flash",
-        resolve: "vercel/deepseek/deepseek-v4.1-flash"
+        resolve: "vercel/deepseek/deepseek-v4.1-flash",
+        effort: ["none", "high", "max"]
       },
       glm: {
         displayName: "GLM",
@@ -126143,12 +126204,12 @@ var providers = {
       "kimi-k3": {
         displayName: "Kimi K3",
         resolve: "vercel/moonshotai/kimi-k3",
-        effort: ["low", "high", "max"]
+        effort: ["none", "low", "high", "max"]
       },
-      // the gateway publishes no effort ladder for this id.
       "muse-spark": {
         displayName: "Muse Spark",
-        resolve: "vercel/meta/muse-spark-1.3"
+        resolve: "vercel/meta/muse-spark-1.3",
+        effort: ["minimal", "low", "medium", "high", "xhigh"]
       }
     }
   })
@@ -127730,7 +127791,7 @@ process.stdin.on("end", () => {
 });
 `;
 }
-function buildClaudePretoolGateSettings(scriptAbsolutePath, execToolDenyRules) {
+function buildClaudePretoolGateSettings(scriptAbsolutePath, denyRules) {
   return {
     hooks: {
       PreToolUse: [
@@ -127750,7 +127811,7 @@ function buildClaudePretoolGateSettings(scriptAbsolutePath, execToolDenyRules) {
         }
       ]
     },
-    permissions: { deny: execToolDenyRules }
+    permissions: { deny: denyRules }
   };
 }
 
@@ -128613,12 +128674,22 @@ async function installClaudeCli() {
     installDependencies: true
   });
 }
-var CLAUDE_EXEC_TOOLS = ["Bash", "Monitor", "REPL", "Workflow"];
-var CLAUDE_EXEC_TOOL_DENY_RULES = [
+var CLAUDE_EXEC_TOOLS = ["Bash", "PowerShell", "Monitor", "REPL", "Workflow"];
+var CLAUDE_DENIED_TOOLS = [
   ...CLAUDE_EXEC_TOOLS,
-  ...CLAUDE_EXEC_TOOLS.map((t2) => `Agent(${t2})`)
+  "DesignSync",
+  "Artifact",
+  "ShareOnboardingGuide",
+  "SendMessage",
+  "ListAgents",
+  "PushNotification",
+  "RemoteTrigger"
 ];
-var CLAUDE_DISALLOWED_TOOLS = CLAUDE_EXEC_TOOL_DENY_RULES.join(",");
+var CLAUDE_DENY_RULES = [
+  ...CLAUDE_DENIED_TOOLS,
+  ...CLAUDE_DENIED_TOOLS.map((t2) => `Agent(${t2})`)
+];
+var CLAUDE_DISALLOWED_TOOLS = CLAUDE_DENY_RULES.join(",");
 function writeMcpConfig(ctx) {
   const configDir = join5(ctx.tmpdir, ".claude");
   mkdirSync4(configDir, { recursive: true });
@@ -129051,14 +129122,11 @@ function buildClaudeSettings(params) {
     `Glob(${path4}/**)`,
     `Glob(/${path4}/**)`
   ]);
-  const gate = buildClaudePretoolGateSettings(
-    params.pretoolGateScriptPath,
-    CLAUDE_EXEC_TOOL_DENY_RULES
-  );
+  const gate = buildClaudePretoolGateSettings(params.pretoolGateScriptPath, CLAUDE_DENY_RULES);
   const base = {
     permissions: {
       deny: [
-        // native exec tools — the authoritative, bypass-immune deny.
+        // CLAUDE_DENIED_TOOLS — the authoritative, bypass-immune deny.
         // `--disallowedTools` (a cliArg-source deny) leaked under
         // `--dangerously-skip-permissions`; policySettings denies survive
         // bypassPermissions mode. covers top-level + Agent(...) subagent use.
@@ -129272,7 +129340,6 @@ var claude = agent({
 });
 
 // agents/codex.ts
-var core3 = __toESM(require_core(), 1);
 import { existsSync as existsSync7, mkdirSync as mkdirSync6, readFileSync as readFileSync5, writeFileSync as writeFileSync6 } from "node:fs";
 import { join as join7 } from "node:path";
 import { performance as performance6 } from "node:perf_hooks";
@@ -129634,6 +129701,18 @@ async function writeBackEntry(apiToken, entry) {
   }
 }
 
+// utils/secretCommands.ts
+var core3 = __toESM(require_core(), 1);
+function maskSecret(value2) {
+  if (isGitHubActions) core3.setSecret(value2);
+}
+function saveSecretState(name, value2) {
+  if (isGitHubActions) core3.saveState(name, value2);
+}
+function setSecretOutput(name, value2) {
+  if (isGitHubActions) core3.setOutput(name, value2);
+}
+
 // utils/secrets.ts
 var SENSITIVE_PATTERNS = [
   /_KEY$/i,
@@ -129982,8 +130061,8 @@ function toTodoWriteInput(item) {
 }
 var CODEX_MODEL_PRICING = {
   "gpt-6-astra": { input: 10, cacheRead: 1, cacheWrite: 12.5, output: 50 },
-  "gpt-5.6-sol": { input: 5, cacheRead: 0.5, cacheWrite: 6.25, output: 30 },
-  "gpt-5.6-luna": { input: 0.2, cacheRead: 0.02, cacheWrite: 0.25, output: 1.2 },
+  "gpt-6-sol": { input: 2, cacheRead: 0.2, cacheWrite: 2.5, output: 10 },
+  "gpt-6-luna": { input: 0.1, cacheRead: 0.01, cacheWrite: 0.125, output: 0.5 },
   "gpt-5.6-terra": { input: 2, cacheRead: 0.2, cacheWrite: 2.5, output: 12 }
 };
 function codexCostUsd(params) {
@@ -130221,7 +130300,7 @@ var codex = agent({
       gatewayUrl: codexHomeAuth ? void 0 : getProviderGatewayUrl("openai/")
     });
     if (codexHomeAuth) {
-      core3.saveState(
+      saveSecretState(
         OAUTH_WRITEBACK_STATE,
         JSON.stringify({
           apiToken: ctx.apiToken,
@@ -130306,7 +130385,6 @@ var codex = agent({
 });
 
 // agents/opencode.ts
-var core4 = __toESM(require_core(), 1);
 import { spawn as nodeSpawn2 } from "node:child_process";
 import { mkdirSync as mkdirSync7, writeFileSync as writeFileSync7 } from "node:fs";
 import { join as join8 } from "node:path";
@@ -135878,6 +135956,11 @@ export default async function pullfrogSubagentGatePlugin() {
       // pick a different action.
       const sessionID = typeof input?.sessionID === "string" ? input.sessionID : "";
       const tool = typeof input?.tool === "string" ? input.tool : "";
+      // above the sessionID check: the bash block must never depend on a
+      // session id being present.
+      if (tool === "bash") {
+        throw new Error("the native bash tool is disabled in Pullfrog runs.");
+      }
       if (!sessionID || !tool) return;
       if (orchestratorSessionID === undefined) orchestratorSessionID = sessionID;
       if (sessionID === orchestratorSessionID) return;
@@ -136090,7 +136173,11 @@ var installCli = () => installOpencodeCli({ binPath: "bin/opencode.exe" });
 function buildSecurityConfig(ctx, model) {
   const config4 = {
     permission: {
-      bash: "deny",
+      // listed but never run: Zen's free tier 403s a tool list missing `bash`,
+      // `glob`, `grep` or `read` (2026-09-17), so the gate plugin throws on
+      // every bash call and "ask" (no responder in serve mode) fails closed.
+      // never switch one of those four to "deny". see wiki/security.md.
+      bash: "ask",
       edit: "allow",
       read: "allow",
       webfetch: "allow",
@@ -136739,7 +136826,7 @@ var opencode = agent({
       });
     }
     if (writebacks.length > 0) {
-      core4.saveState(
+      saveSecretState(
         OAUTH_WRITEBACK_STATE,
         JSON.stringify({ apiToken: ctx.apiToken, entries: writebacks })
       );
@@ -147834,7 +147921,7 @@ var Hono2 = class extends Hono {
   }
 };
 
-// node_modules/.pnpm/mcp-proxy@6.7.11/node_modules/mcp-proxy/dist/startStdioServer-C4sEMMHS.mjs
+// node_modules/.pnpm/mcp-proxy@6.7.12/node_modules/mcp-proxy/dist/startStdioServer-C9HzKfjR.mjs
 import { createRequire } from "node:module";
 import { randomUUID as randomUUID2, timingSafeEqual } from "node:crypto";
 
@@ -157607,7 +157694,7 @@ var require_core$2 = /* @__PURE__ */ __commonJSMin(((exports) => {
   Object.defineProperty(exports, "__esModule", { value: true });
   const id_1 = require_id2();
   const ref_1 = require_ref2();
-  const core13 = [
+  const core9 = [
     "$schema",
     "$id",
     "$defs",
@@ -157617,7 +157704,7 @@ var require_core$2 = /* @__PURE__ */ __commonJSMin(((exports) => {
     id_1.default,
     ref_1.default
   ];
-  exports.default = core13;
+  exports.default = core9;
 }));
 var require_limitNumber2 = /* @__PURE__ */ __commonJSMin(((exports) => {
   Object.defineProperty(exports, "__esModule", { value: true });
@@ -159755,7 +159842,7 @@ var require_json_schema_2019_09 = /* @__PURE__ */ __commonJSMin(((exports) => {
   const metaSchema = require_schema$1();
   const applicator = require_applicator$1();
   const content = require_content$1();
-  const core13 = require_core$1();
+  const core9 = require_core$1();
   const format2 = require_format3();
   const metadata = require_meta_data$1();
   const validation = require_validation$1();
@@ -159765,7 +159852,7 @@ var require_json_schema_2019_09 = /* @__PURE__ */ __commonJSMin(((exports) => {
       metaSchema,
       applicator,
       content,
-      core13,
+      core9,
       with$data(this, format2),
       metadata,
       with$data(this, validation)
@@ -160205,7 +160292,7 @@ var require_json_schema_2020_12 = /* @__PURE__ */ __commonJSMin(((exports) => {
   const applicator = require_applicator2();
   const unevaluated = require_unevaluated();
   const content = require_content();
-  const core13 = require_core4();
+  const core9 = require_core4();
   const format2 = require_format_annotation();
   const metadata = require_meta_data();
   const validation = require_validation2();
@@ -160216,7 +160303,7 @@ var require_json_schema_2020_12 = /* @__PURE__ */ __commonJSMin(((exports) => {
       applicator,
       unevaluated,
       content,
-      core13,
+      core9,
       with$data(this, format2),
       metadata,
       with$data(this, validation)
@@ -163433,7 +163520,7 @@ function createMcpHandler(factory, options = {}) {
   };
 }
 
-// node_modules/.pnpm/mcp-proxy@6.7.11/node_modules/mcp-proxy/dist/startStdioServer-C4sEMMHS.mjs
+// node_modules/.pnpm/mcp-proxy@6.7.12/node_modules/mcp-proxy/dist/startStdioServer-C9HzKfjR.mjs
 import http from "http";
 import { Http2ServerRequest } from "http2";
 import { Readable } from "stream";
@@ -171658,7 +171745,7 @@ var require_core$22 = /* @__PURE__ */ __commonJSMin2(((exports) => {
   Object.defineProperty(exports, "__esModule", { value: true });
   const id_1 = require_id3();
   const ref_1 = require_ref3();
-  const core13 = [
+  const core9 = [
     "$schema",
     "$id",
     "$defs",
@@ -171668,7 +171755,7 @@ var require_core$22 = /* @__PURE__ */ __commonJSMin2(((exports) => {
     id_1.default,
     ref_1.default
   ];
-  exports.default = core13;
+  exports.default = core9;
 }));
 var require_limitNumber3 = /* @__PURE__ */ __commonJSMin2(((exports) => {
   Object.defineProperty(exports, "__esModule", { value: true });
@@ -173806,7 +173893,7 @@ var require_json_schema_2019_092 = /* @__PURE__ */ __commonJSMin2(((exports) =>
   const metaSchema = require_schema$12();
   const applicator = require_applicator$12();
   const content = require_content$12();
-  const core13 = require_core$12();
+  const core9 = require_core$12();
   const format2 = require_format4();
   const metadata = require_meta_data$12();
   const validation = require_validation$12();
@@ -173816,7 +173903,7 @@ var require_json_schema_2019_092 = /* @__PURE__ */ __commonJSMin2(((exports) =>
       metaSchema,
       applicator,
       content,
-      core13,
+      core9,
       with$data(this, format2),
       metadata,
       with$data(this, validation)
@@ -174256,7 +174343,7 @@ var require_json_schema_2020_122 = /* @__PURE__ */ __commonJSMin2(((exports) =>
   const applicator = require_applicator3();
   const unevaluated = require_unevaluated2();
   const content = require_content2();
-  const core13 = require_core5();
+  const core9 = require_core5();
   const format2 = require_format_annotation2();
   const metadata = require_meta_data2();
   const validation = require_validation3();
@@ -174267,7 +174354,7 @@ var require_json_schema_2020_122 = /* @__PURE__ */ __commonJSMin2(((exports) =>
       applicator,
       unevaluated,
       content,
-      core13,
+      core9,
       with$data(this, format2),
       metadata,
       with$data(this, validation)
@@ -174838,7 +174925,7 @@ var SseError = class extends Error {
   }
 };
 
-// node_modules/.pnpm/mcp-proxy@6.7.11/node_modules/mcp-proxy/dist/startStdioServer-C4sEMMHS.mjs
+// node_modules/.pnpm/mcp-proxy@6.7.12/node_modules/mcp-proxy/dist/startStdioServer-C9HzKfjR.mjs
 var __create4 = Object.create;
 var __defProp$1 = Object.defineProperty;
 var __getOwnPropDesc4 = Object.getOwnPropertyDescriptor;
@@ -191851,6 +191938,10 @@ var applyCorsHeaders = (req, res, corsOptions) => {
     console.error("[mcp-proxy] error parsing origin", error109);
   }
 };
+var canServeModernRoute = (server) => {
+  const target = server instanceof McpServer ? server.server : server;
+  return Array.isArray(target._supportedProtocolVersions);
+};
 var createModernLeg = ({ createServer: createServer4, onClose, onConnect, onListenSubscriptions }) => {
   const requestContext = new AsyncLocalStorage2();
   const createInstance = async ({ authResult, body, req }) => {
@@ -191870,6 +191961,18 @@ var createModernLeg = ({ createServer: createServer4, onClose, onConnect, onList
     };
     target.onclose = teardown;
     try {
+      if (!canServeModernRoute(server)) throw new Response(JSON.stringify({
+        error: {
+          code: -32e3,
+          data: { reason: "server_missing_modern_protocol_support" },
+          message: "Unsupported protocol version: the server instance cannot serve the 2026-07-28 protocol revision. It was built by the 1.x MCP SDK (e.g. fastmcp <=4.x pulling mcp-proxy through its `^6.4.6` range), which does not declare `_supportedProtocolVersions`. Upgrade the framework that builds it, or serve only 2025-era clients (`modern: false`)."
+        },
+        id: getRequestId(body),
+        jsonrpc: "2.0"
+      }), {
+        headers: { "content-type": "application/json" },
+        status: 400
+      });
       if (onListenSubscriptions) {
         const listenUris = readListenSubscriptions(body);
         if (listenUris.length > 0) releaseSubscriptions = await onListenSubscriptions(listenUris);
@@ -204972,7 +205075,7 @@ this usually means your local branch has commits that were never pushed \u2014 s
 }
 
 // utils/github.ts
-var core5 = __toESM(require_core(), 1);
+var core4 = __toESM(require_core(), 1);
 import { createSign } from "node:crypto";
 import { rename, writeFile } from "node:fs/promises";
 import { dirname as dirname3, join as join13 } from "node:path";
@@ -209221,9 +209324,7 @@ async function fetchIdTokenFromStash(creds) {
   if (!body.value) {
     throw new Error("ID token response has no value field");
   }
-  if (isGitHubActions) {
-    core5.setSecret(body.value);
-  }
+  maskSecret(body.value);
   return body.value;
 }
 function translateIdTokenError(error109) {
@@ -209235,7 +209336,7 @@ function translateIdTokenError(error109) {
 var mintIdToken = op(
   async () => {
     try {
-      return await core5.getIDToken(OIDC_AUDIENCE);
+      return await core4.getIDToken(OIDC_AUDIENCE);
     } catch (error109) {
       throw translateIdTokenError(error109);
     }
@@ -210573,6 +210674,15 @@ function buildImplementPlanLink(ctx, issueNumber, commentId) {
   const apiUrl = getApiUrl();
   return `[Implement plan \u2794](${apiUrl}/trigger/${ctx.repo.owner}/${ctx.repo.name}/${issueNumber}?action=implement&comment_id=${commentId})`;
 }
+function buildEnrichmentLinks(ctx) {
+  const event = ctx.payload.event;
+  if (event.trigger !== "issues_opened" || event.is_pr || ctx.payload.prompt || ctx.toolState.selectedMode === "Build") {
+    return [];
+  }
+  return [
+    `[Implement a fix \u2794](${getApiUrl()}/trigger/${ctx.repo.owner}/${ctx.repo.name}/${event.issue_number}?action=build)`
+  ];
+}
 function addFooter(ctx, body) {
   if (/<br\s*\/?>[ \t]*\n(?!\s*\n)/i.test(body)) {
     throw new Error(
@@ -210609,13 +210719,14 @@ function CreateCommentTool(ctx) {
       if (issueNumber === ctx.payload.event.issue_number) {
         ctx.toolState.standaloneCommentId = result.data.id;
       }
-      if (commentType === "Plan") {
-        if (result.data.node_id) {
+      const enrichmentLinks = issueNumber === ctx.payload.event.issue_number ? buildEnrichmentLinks(ctx) : [];
+      if (commentType === "Plan" || enrichmentLinks.length > 0) {
+        if (commentType === "Plan" && result.data.node_id) {
           await patchWorkflowRunFields(ctx, { planCommentNodeId: result.data.node_id });
         }
-        const customParts = [buildImplementPlanLink(ctx, issueNumber, result.data.id)];
+        const customParts = commentType === "Plan" ? [buildImplementPlanLink(ctx, issueNumber, result.data.id)] : enrichmentLinks;
         const footer = buildCommentFooter(ctx, customParts);
-        const bodyWithPlanLink = `${stripExistingFooter(body)}${footer}`;
+        const bodyWithPlanLink = `${stripExistingFooter(bodyWithFooter)}${footer}`;
         const updateResult = await ctx.octokit.rest.issues.updateComment({
           owner: ctx.repo.owner,
           repo: ctx.repo.name,
@@ -210687,6 +210798,7 @@ async function reportProgress(ctx, params) {
   }
   const issueNumber = ctx.payload.event.issue_number ?? primaryRepoState(ctx.toolState).issueNumber;
   const isPlanMode = ctx.toolState.selectedMode === "Plan";
+  const enrichmentLinks = params.liveProgress ? [] : buildEnrichmentLinks(ctx);
   const apiCtx = { octokit: ctx.octokit, owner: ctx.repo.owner, repo: ctx.repo.name };
   if (target_plan_comment === true && ctx.toolState.existingPlanCommentId === void 0) {
     log2.warning("target_plan_comment requested but no existingPlanCommentId in tool state");
@@ -210694,7 +210806,7 @@ async function reportProgress(ctx, params) {
   if (target_plan_comment === true && ctx.toolState.existingPlanCommentId !== void 0) {
     const commentId = ctx.toolState.existingPlanCommentId;
     const customParts = issueNumber !== void 0 ? [buildImplementPlanLink(ctx, issueNumber, commentId)] : void 0;
-    const bodyWithoutFooter = stripExistingFooter(body);
+    const bodyWithoutFooter = stripExistingFooter(fixDoubleEscapedString(body));
     const footer = buildCommentFooter(ctx, customParts);
     const bodyWithFooter = `${bodyWithoutFooter}${footer}`;
     const result = await updateProgressComment(
@@ -210715,8 +210827,8 @@ async function reportProgress(ctx, params) {
   }
   const existingComment = ctx.toolState.progressComment;
   if (existingComment) {
-    const customParts = isPlanMode && issueNumber !== void 0 ? [buildImplementPlanLink(ctx, issueNumber, existingComment.id)] : void 0;
-    const bodyWithoutFooter = stripExistingFooter(body);
+    const customParts = isPlanMode && issueNumber !== void 0 ? [buildImplementPlanLink(ctx, issueNumber, existingComment.id)] : enrichmentLinks;
+    const bodyWithoutFooter = stripExistingFooter(fixDoubleEscapedString(body));
     const footer = buildCommentFooter(ctx, customParts);
     const bodyWithFooter = `${bodyWithoutFooter}${footer}`;
     let result;
@@ -210768,13 +210880,13 @@ async function reportProgress(ctx, params) {
   );
   ctx.toolState.progressComment = created.comment;
   if (!params.liveProgress) ctx.toolState.wasUpdated = true;
-  if (isPlanMode) {
-    const customParts = [buildImplementPlanLink(ctx, issueNumber, created.comment.id)];
-    const bodyWithoutFooter = stripExistingFooter(body);
+  if (isPlanMode || enrichmentLinks.length > 0) {
+    const customParts = isPlanMode ? [buildImplementPlanLink(ctx, issueNumber, created.comment.id)] : enrichmentLinks;
+    const bodyWithoutFooter = stripExistingFooter(initialBody);
     const footer = buildCommentFooter(ctx, customParts);
     const bodyWithPlanLink = `${bodyWithoutFooter}${footer}`;
     const updateResult = await updateProgressComment(apiCtx, created.comment, bodyWithPlanLink);
-    if (updateResult.node_id) {
+    if (isPlanMode && updateResult.node_id) {
       await patchWorkflowRunFields(ctx, { planCommentNodeId: updateResult.node_id });
     }
     return {
@@ -214689,6 +214801,37 @@ function ResolveReviewThreadTool(ctx) {
   });
 }
 
+// mcp/searchIssues.ts
+var SearchIssues = type({
+  terms: type.string.matching(/^[\p{L}\p{N}_./-]+$/u).atMostLength(40).array().atLeastLength(1).atMostLength(5).describe("1-5 keywords from the issue; no GitHub qualifiers or query operators")
+});
+function SearchIssuesTool(ctx) {
+  return tool({
+    name: "search_issues",
+    description: "Find open or closed issues in this repository by keyword. Inspect promising matches with get_issue before deciding whether they are duplicates or related. Results are bounded, not an exhaustive duplicate check.",
+    parameters: SearchIssues,
+    execute: execute(async (params) => {
+      const repoPath = `/repos/${ctx.repo.owner}/${ctx.repo.name}`.toLowerCase();
+      const terms = params.terms.map((term) => `"${term}"`).join(" ");
+      const response = await ctx.octokit.rest.search.issuesAndPullRequests({
+        q: `repo:${ctx.repo.owner}/${ctx.repo.name} is:issue ${terms}`,
+        per_page: 20
+      });
+      return {
+        incomplete: response.data.incomplete_results || response.data.total_count > 20,
+        issues: response.data.items.filter(
+          (issue4) => new URL(issue4.repository_url).pathname.toLowerCase() === repoPath && !issue4.pull_request && issue4.number !== ctx.payload.event.issue_number
+        ).map((issue4) => ({
+          number: issue4.number,
+          title: issue4.title,
+          url: issue4.html_url,
+          state: issue4.state
+        }))
+      };
+    })
+  });
+}
+
 // mcp/selectMode.ts
 var SelectModeParams = type({
   mode: type.string.describe(
@@ -215103,6 +215246,9 @@ function buildCommonTools(ctx, outputSchema) {
   if (hasSimilarIssues({ repoIntelligence: ctx.repoIntelligence, event: ctx.payload.event })) {
     tools.push(SimilarIssuesTool(ctx));
   }
+  if (ctx.payload.event.issue_number !== void 0 && !ctx.payload.event.is_pr) {
+    tools.push(SearchIssuesTool(ctx));
+  }
   const isStandalone = ctx.payload.event.trigger === "unknown";
   if (isStandalone || outputSchema) {
     tools.push(SetOutputTool(ctx, outputSchema));
@@ -216828,7 +216974,6 @@ function buildModelAccessError(input2) {
 }
 
 // utils/normalizeEnv.ts
-var core6 = __toESM(require_core(), 1);
 function hasControlCharacter(value2) {
   return [...value2].some((ch) => {
     const code = ch.charCodeAt(0);
@@ -216854,7 +216999,7 @@ function sanitizeSecret(key, value2) {
       `\xBB stripped whitespace from ${key} (whitespace in secret values breaks GitHub Actions log masking)`
     );
   }
-  core6.setSecret(trimmed);
+  maskSecret(trimmed);
   return trimmed;
 }
 function normalizeEnv() {
@@ -216898,7 +217043,6 @@ function normalizeEnv() {
 }
 
 // utils/overrides.ts
-var core7 = __toESM(require_core(), 1);
 var DENIED_OVERRIDE_NAMES = /* @__PURE__ */ new Set([
   "GITHUB_TOKEN",
   "GH_TOKEN",
@@ -216944,7 +217088,7 @@ function applyOverrides(params) {
       denied.push(key);
       continue;
     }
-    if (value2.length > 0) core7.setSecret(value2);
+    if (value2.length > 0) maskSecret(value2);
     params.env[key] = value2;
     applied.push(key);
   }
@@ -216953,7 +217097,7 @@ function applyOverrides(params) {
 }
 
 // utils/payload.ts
-var core8 = __toESM(require_core(), 1);
+var core5 = __toESM(require_core(), 1);
 import { readFileSync as readFileSync9 } from "node:fs";
 import { isAbsolute as isAbsolute2, resolve as resolve2 } from "node:path";
 
@@ -217096,8 +217240,8 @@ function assertDispatchPayloadIntact(promptInput) {
   );
 }
 function resolvePromptInput() {
-  const promptInput = core8.getInput("prompt");
-  const promptFile = core8.getInput("prompt_file");
+  const promptInput = core5.getInput("prompt");
+  const promptFile = core5.getInput("prompt_file");
   if (promptInput && promptFile) {
     throw new Error("set exactly one of 'prompt' or 'prompt_file' inputs, not both.");
   }
@@ -217131,7 +217275,7 @@ function resolvePromptFile(input2) {
 }
 function warnIfDeprecatedStatusChecks(value2) {
   if (value2 !== void 0) {
-    core8.warning(
+    core5.warning(
       "`status_checks` is deprecated. Both checks are now repository settings \u2014 open the Pullfrog console for this repo (Automations \u2192 Review PRs) and set them there, then remove `status_checks` from your workflow. It keeps working until you do."
     );
   }
@@ -217139,15 +217283,15 @@ function warnIfDeprecatedStatusChecks(value2) {
 }
 function resolveNonPromptInputs() {
   return Inputs.omit("prompt", "prompt_file").assert({
-    model: core8.getInput("model") || void 0,
-    effort: core8.getInput("effort") || void 0,
-    debug: core8.getInput("debug") || void 0,
-    timeout: core8.getInput("timeout") || void 0,
-    cwd: core8.getInput("cwd") || void 0,
-    push: core8.getInput("push") || void 0,
-    shell: core8.getInput("shell") || void 0,
-    status_checks: warnIfDeprecatedStatusChecks(core8.getInput("status_checks") || void 0),
-    progress_comments: core8.getInput("progress_comments") || void 0
+    model: core5.getInput("model") || void 0,
+    effort: core5.getInput("effort") || void 0,
+    debug: core5.getInput("debug") || void 0,
+    timeout: core5.getInput("timeout") || void 0,
+    cwd: core5.getInput("cwd") || void 0,
+    push: core5.getInput("push") || void 0,
+    shell: core5.getInput("shell") || void 0,
+    status_checks: warnIfDeprecatedStatusChecks(core5.getInput("status_checks") || void 0),
+    progress_comments: core5.getInput("progress_comments") || void 0
   });
 }
 function resolvePayload(resolvedPromptInput, repoSettings) {
@@ -217218,7 +217362,7 @@ function resolvePayload(resolvedPromptInput, repoSettings) {
   };
 }
 function resolveOutputSchema() {
-  const raw2 = core8.getInput("output_schema");
+  const raw2 = core5.getInput("output_schema");
   if (!raw2) return void 0;
   let parsed2;
   try {
@@ -217233,11 +217377,8 @@ function resolveOutputSchema() {
   return parsed2;
 }
 
-// utils/proxy.ts
-var core10 = __toESM(require_core(), 1);
-
 // utils/token.ts
-var core9 = __toESM(require_core(), 1);
+var core6 = __toESM(require_core(), 1);
 import assert3 from "node:assert/strict";
 var mcpTokenValue;
 var refreshMcpTokenFn;
@@ -217245,7 +217386,7 @@ function getMcpTokenRefresh() {
   return refreshMcpTokenFn;
 }
 function getJobToken() {
-  const inputToken = core9.getInput("token");
+  const inputToken = core6.getInput("token");
   if (inputToken) {
     return inputToken;
   }
@@ -217260,9 +217401,7 @@ async function resolveTokens(params) {
   const externalToken = process.env.GH_TOKEN;
   if (externalToken) {
     mcpTokenValue = externalToken;
-    if (isGitHubActions) {
-      core9.setSecret(externalToken);
-    }
+    maskSecret(externalToken);
     log2.info("\xBB using external GH_TOKEN for both git and MCP");
     return {
       gitToken: externalToken,
@@ -217284,9 +217423,7 @@ async function resolveTokens(params) {
     xrepoGrant: params.xrepoGrant,
     permissions: gitPermissions
   });
-  if (isGitHubActions) {
-    core9.setSecret(gitToken);
-  }
+  maskSecret(gitToken);
   log2.info(
     `\xBB acquired git token (${Object.entries(gitPermissions).map((e) => e.join(":")).join(", ")})`
   );
@@ -217305,9 +217442,7 @@ async function resolveTokens(params) {
     xrepoGrant: params.xrepoGrant,
     permissions: mcpPermissions
   });
-  if (isGitHubActions) {
-    core9.setSecret(mcpToken);
-  }
+  maskSecret(mcpToken);
   log2.info(
     `\xBB acquired scoped MCP token (${Object.entries(mcpPermissions).map((e) => e.join(":")).join(", ")})`
   );
@@ -217315,7 +217450,7 @@ async function resolveTokens(params) {
   let ghToken;
   if (ghPermissions) {
     ghToken = await acquireNewToken({ permissions: ghPermissions });
-    if (isGitHubActions) core9.setSecret(ghToken);
+    maskSecret(ghToken);
     log2.info(
       `\xBB acquired gh token mirroring ${params.authorPermission} (${formatPermissions(ghPermissions)})`
     );
@@ -217327,7 +217462,7 @@ async function resolveTokens(params) {
       xrepoGrant: params.xrepoGrant,
       permissions: { contents: "read" }
     });
-    if (isGitHubActions) core9.setSecret(readToken);
+    maskSecret(readToken);
     log2.info(`\xBB acquired cross-repo read token (contents:read, ${params.xrepo.read.length} repos)`);
   }
   mcpTokenValue = mcpToken;
@@ -217346,9 +217481,7 @@ async function resolveTokens(params) {
       permissions: mcpPermissions,
       oidc: params.oidc ?? void 0
     }).then((fresh) => {
-      if (isGitHubActions) {
-        core9.setSecret(fresh);
-      }
+      maskSecret(fresh);
       mcpTokenValue = fresh;
       currentMcpToken = fresh;
       log2.warning("\xBB GitHub rejected the MCP token; re-acquired a fresh scoped MCP token");
@@ -217369,7 +217502,7 @@ async function resolveTokens(params) {
         permissions: gitPermissions,
         oidc: params.oidc ?? void 0
       }).then((fresh) => {
-        if (isGitHubActions) core9.setSecret(fresh);
+        maskSecret(fresh);
         void revokeGitHubInstallationToken(currentGitToken);
         currentGitToken = fresh;
         log2.warning("\xBB GitHub rejected the git token; re-acquired a fresh git token");
@@ -217387,7 +217520,7 @@ async function resolveTokens(params) {
         permissions: { contents: "read" },
         oidc: params.oidc ?? void 0
       }).then((fresh) => {
-        if (isGitHubActions) core9.setSecret(fresh);
+        maskSecret(fresh);
         void revokeGitHubInstallationToken(read2);
         currentReadToken = fresh;
         log2.warning("\xBB GitHub rejected the read token; re-acquired a fresh read token");
@@ -217601,7 +217734,7 @@ async function resolveProxyModel(ctx) {
   });
   if (!key) return;
   process.env.OPENROUTER_API_KEY = key;
-  core10.setSecret(key);
+  maskSecret(key);
   ctx.payload.proxyModel = ctx.proxyModel;
   ctx.toolState.model = ctx.proxyModel;
   const label = ctx.oss ? "oss" : "router";
@@ -217679,7 +217812,7 @@ async function resolveTrialFallback(ctx) {
   });
   if (!key) return false;
   process.env.OPENROUTER_API_KEY = key;
-  core10.setSecret(key);
+  maskSecret(key);
   ctx.payload.proxyModel = DEFAULT_PROXY_MODEL;
   ctx.toolState.model = DEFAULT_PROXY_MODEL;
   ctx.toolState.modelClamped = {
@@ -217830,6 +217963,7 @@ var defaultSettings = {
   push: "restricted",
   shell: "restricted",
   prApproveEnabled: false,
+  reviewDrafts: false,
   autoMergeEnabled: false,
   codexAgent: false,
   signedCommits: false,
@@ -218076,6 +218210,23 @@ function isContextOverflowError(message) {
 function isNoProviderAvailableError(message) {
   return /\bNo provider available\b/i.test(message);
 }
+function isZenFreeTierGateError(message) {
+  return /free tier can only be used from within OpenCode/i.test(message);
+}
+function formatZenFreeTierGateSummary(input2) {
+  const settingsUrl = `${getApiUrl()}/console/${input2.owner}/${input2.name}`;
+  return [
+    "**Zen's free tier refused a request this run made.** OpenCode Zen currently rejects free-model requests whose tool list is missing one of the built-in tools it expects ([upstream issue](https://github.com/anomalyco/opencode/issues/49587)). Pullfrog sends all of them, but opencode's mid-run context-compaction request carries no tools at all, and a repo-level `opencode.json` that denies `bash`, `glob`, `grep` or `read` strips that tool from every request.",
+    "",
+    'Pick a paid model for this repo, drop any `"deny"` on `bash`, `glob`, `grep` or `read` from the repo\'s `opencode.json` if it sets one, or split the PR so the run stays under the compaction threshold and re-trigger.',
+    "",
+    `[Model settings \u2192](${settingsUrl}) \xB7 [Ask in Discord \u2192](https://discord.gg/8y96raFg8e)`,
+    "",
+    `\`\`\`
+${input2.raw}
+\`\`\``
+  ].join("\n");
+}
 function formatNoProviderAvailableSummary(input2) {
   const settingsUrl = `${getApiUrl()}/console/${input2.owner}/${input2.name}`;
   return [
@@ -218319,6 +218470,16 @@ ${body}`, comment: body };
     });
     return { summary: `### \u274C Pullfrog failed
 
+${body}`, comment: body };
+  }
+  if (isZenFreeTierGateError(input2.errorMessage)) {
+    const body = formatZenFreeTierGateSummary({
+      owner: input2.repo.owner,
+      name: input2.repo.name,
+      raw: input2.errorMessage
+    });
+    return { summary: `### \u274C Pullfrog failed
+
 ${body}`, comment: body };
   }
   if (isContextOverflowError(input2.errorMessage)) {
@@ -218356,7 +218517,7 @@ ${genericBody}`,
 }
 
 // utils/runLifecycle.ts
-var core11 = __toESM(require_core(), 1);
+var core7 = __toESM(require_core(), 1);
 
 // utils/autoMerge.ts
 function hasBlockingHumanReview(reviews) {
@@ -218500,7 +218661,7 @@ async function dispatchFollowUpReReview(ctx, reviewedSha) {
   });
   if (pr.data.head.sha === reviewedSha) return;
   if (pr.data.state !== "open") return;
-  if (pr.data.draft) return;
+  if (pr.data.draft && !ctx.reviewDrafts) return;
   log2.info(
     `safety net: pr HEAD moved from ${reviewedSha.slice(0, 7)} to ${pr.data.head.sha.slice(0, 7)} and agent did not review inline \u2014 dispatching follow-up re-review`
   );
@@ -218752,7 +218913,7 @@ async function finalizeSuccessRun(input2) {
   }
   if (input2.toolState.output) {
     log2.info(`::pullfrog-output::${Buffer.from(input2.toolState.output).toString("base64")}`);
-    core11.setOutput("result", input2.toolState.output);
+    core7.setOutput("result", input2.toolState.output);
   }
   if (input2.result.success) {
     await approveAfterFix(input2.toolContext).catch((error109) => {
@@ -219333,6 +219494,7 @@ async function main() {
           postCheckoutScript: runContext.repoSettings.postCheckoutScript,
           prepushScript: runContext.repoSettings.prepushScript,
           prApproveEnabled: runContext.repoSettings.prApproveEnabled,
+          reviewDrafts: runContext.repoSettings.reviewDrafts,
           autoMergeEnabled: runContext.repoSettings.autoMergeEnabled,
           signedCommits: runContext.repoSettings.signedCommits,
           repoIntelligence: runContext.repoSettings.repoIntelligence,
@@ -219643,27 +219805,27 @@ async function runMain() {
     }
   } catch (error109) {
     const errorMessage = error109 instanceof Error ? error109.message : "unknown error occurred";
-    core12.setFailed(`action failed: ${errorMessage}`);
+    core8.setFailed(`action failed: ${errorMessage}`);
   }
 }
 async function tokenMain() {
-  const reposInput = core12.getInput("repos");
+  const reposInput = core8.getInput("repos");
   const additionalRepos = reposInput ? reposInput.split(",").map((r2) => r2.trim()).filter(Boolean) : [];
   const token = await acquireNewToken({ repos: additionalRepos });
-  core12.setSecret(token);
-  core12.saveState(STATE_TOKEN, token);
-  core12.setOutput("token", token);
+  maskSecret(token);
+  saveSecretState(STATE_TOKEN, token);
+  setSecretOutput("token", token);
   const scope2 = additionalRepos.length ? `current repo + ${additionalRepos.join(", ")}` : "current repo only";
-  core12.info(`\xBB installation token acquired (${scope2})`);
+  core8.info(`\xBB installation token acquired (${scope2})`);
 }
 async function tokenPost() {
-  const token = core12.getState(STATE_TOKEN);
+  const token = core8.getState(STATE_TOKEN);
   if (!token) {
-    core12.debug("no token found in state, skipping revocation");
+    core8.debug("no token found in state, skipping revocation");
     return;
   }
   await revokeGitHubInstallationToken(token);
-  core12.info("\xBB installation token revoked");
+  core8.info("\xBB installation token revoked");
 }
 function printGhaUsage(params) {
   params.stream(`usage: ${params.prog} gha [subcommand]
@@ -219770,7 +219932,7 @@ async function runCli5(params) {
 }
 async function run(args2) {
   if (args2.includes("--post") && !args2.includes("token")) {
-    await runOAuthWriteback().catch((error109) => core12.warning(`oauth post-hook: ${error109}`));
+    await runOAuthWriteback().catch((error109) => core8.warning(`oauth post-hook: ${error109}`));
     return;
   }
   try {
@@ -219785,7 +219947,7 @@ async function run(args2) {
     }
   } catch (error109) {
     const message = error109 instanceof Error ? error109.message : String(error109);
-    core12.setFailed(message);
+    core8.setFailed(message);
   }
 }
 
@@ -220172,7 +220334,7 @@ function resolveTarget2(repo) {
   return { owner: match3[1], repo: match3[2] };
 }
 function cliVersion() {
-  const parts = /^(\d+)\.(\d+)\.(\d+)$/.exec("0.1.81");
+  const parts = /^(\d+)\.(\d+)\.(\d+)$/.exec("0.1.83");
   if (!parts) return "0.0.0";
   return `${Number(parts[1])}.${Number(parts[2])}.${Number(parts[3])}`;
 }
@@ -220339,7 +220501,7 @@ async function runCli8(input2) {
 }
 
 // cli.ts
-var VERSION10 = "0.1.81";
+var VERSION10 = "0.1.83";
 var bin = basename2(process.argv[1] || "");
 var PROG = bin === "pf" || bin === "pullfrog" ? bin : "pullfrog";
 var rawArgs = process.argv.slice(2);
@@ -220495,7 +220657,7 @@ ieee754/index.js:
   * MIT Licensed
   *)
 
-mcp-proxy/dist/startStdioServer-C4sEMMHS.mjs:
+mcp-proxy/dist/startStdioServer-C9HzKfjR.mjs:
   (*!
   * content-type
   * Copyright(c) 2015 Douglas Christopher Wilson