pullfrog 0.1.81 → 0.1.83

package/dist/index.js

@@ -19718,10 +19718,10 @@ var require_core = __commonJS({
       (0, command_1.issueCommand)("set-env", { name }, convertedVal);
     }
     exports.exportVariable = exportVariable;
-    function setSecret6(secret) {
+    function setSecret2(secret) {
       (0, command_1.issueCommand)("add-mask", {}, secret);
     }
-    exports.setSecret = setSecret6;
+    exports.setSecret = setSecret2;
     function addPath(inputPath) {
       const filePath = process.env["GITHUB_PATH"] || "";
       if (filePath) {
@@ -19763,7 +19763,7 @@ var require_core = __commonJS({
 Support boolean input list: \`true | True | TRUE | false | False | FALSE\``);
     }
     exports.getBooleanInput = getBooleanInput;
-    function setOutput2(name, value2) {
+    function setOutput3(name, value2) {
       const filePath = process.env["GITHUB_OUTPUT"] || "";
       if (filePath) {
         return (0, file_command_1.issueFileCommand)("OUTPUT", (0, file_command_1.prepareKeyValueMessage)(name, value2));
@@ -19771,7 +19771,7 @@ Support boolean input list: \`true | True | TRUE | false | False | FALSE\``);
       process.stdout.write(os2.EOL);
       (0, command_1.issueCommand)("set-output", { name }, (0, utils_1.toCommandValue)(value2));
     }
-    exports.setOutput = setOutput2;
+    exports.setOutput = setOutput3;
     function setCommandEcho(enabled) {
       (0, command_1.issue)("echo", enabled ? "on" : "off");
     }
@@ -19826,14 +19826,14 @@ Support boolean input list: \`true | True | TRUE | false | False | FALSE\``);
       });
     }
     exports.group = group2;
-    function saveState3(name, value2) {
+    function saveState2(name, value2) {
       const filePath = process.env["GITHUB_STATE"] || "";
       if (filePath) {
         return (0, file_command_1.issueFileCommand)("STATE", (0, file_command_1.prepareKeyValueMessage)(name, value2));
       }
       (0, command_1.issueCommand)("save-state", { name }, (0, utils_1.toCommandValue)(value2));
     }
-    exports.saveState = saveState3;
+    exports.saveState = saveState2;
     function getState2(name) {
       return process.env[`STATE_${name}`] || "";
     }
@@ -27621,11 +27621,11 @@ var require_mode = __commonJS({
 var require_isexe = __commonJS({
   "node_modules/.pnpm/isexe@2.0.0/node_modules/isexe/index.js"(exports, module) {
     var fs5 = __require("fs");
-    var core12;
+    var core8;
     if (process.platform === "win32" || global.TESTING_WINDOWS) {
-      core12 = require_windows();
+      core8 = require_windows();
     } else {
-      core12 = require_mode();
+      core8 = require_mode();
     }
     module.exports = isexe;
     isexe.sync = sync;
@@ -27648,7 +27648,7 @@ var require_isexe = __commonJS({
           });
         });
       }
-      core12(path4, options || {}, function(er, is) {
+      core8(path4, options || {}, function(er, is) {
         if (er) {
           if (er.code === "EACCES" || options && options.ignoreErrors) {
             er = null;
@@ -27660,7 +27660,7 @@ var require_isexe = __commonJS({
     }
     function sync(path4, options) {
       try {
-        return core12.sync(path4, options || {});
+        return core8.sync(path4, options || {});
       } catch (er) {
         if (options && options.ignoreErrors || er.code === "EACCES") {
           return false;
@@ -80800,7 +80800,7 @@ var require_core3 = __commonJS({
     Object.defineProperty(exports, "__esModule", { value: true });
     var id_1 = require_id();
     var ref_1 = require_ref();
-    var core12 = [
+    var core8 = [
       "$schema",
       "$id",
       "$defs",
@@ -80810,7 +80810,7 @@ var require_core3 = __commonJS({
       id_1.default,
       ref_1.default
     ];
-    exports.default = core12;
+    exports.default = core8;
   }
 });
 
@@ -107771,19 +107771,19 @@ var providers = {
       // API is the source of truth (#959).
       "claude-fable": {
         displayName: "Claude Fable",
-        resolve: "anthropic/claude-fable-5",
+        resolve: "anthropic/claude-fable-5-1",
         effort: ["low", "medium", "high", "xhigh", "max"],
         // rolling alias: models.dev's OpenRouter mirror lags brand-new pinned
-        // versions (claude-fable-5 isn't indexed yet), so track ~…-latest to
+        // versions (claude-fable-5 was missing there when this was added), so track ~…-latest to
         // stay catalog-valid and auto-follow version bumps.
         openRouterResolve: "openrouter/~anthropic/claude-fable-latest",
         subagentModel: "claude-sonnet"
       },
       "claude-opus": {
         displayName: "Claude Opus",
-        resolve: "anthropic/claude-opus-5",
+        resolve: "anthropic/claude-opus-5-5",
         effort: ["low", "medium", "high", "xhigh", "max"],
-        openRouterResolve: "openrouter/anthropic/claude-opus-5",
+        openRouterResolve: "openrouter/anthropic/claude-opus-5.5",
         preferred: true,
         subagentModel: "claude-sonnet"
       },
@@ -107818,9 +107818,9 @@ var providers = {
       },
       "gpt-sol": {
         displayName: "GPT Sol",
-        resolve: "openai/gpt-5.6-sol",
+        resolve: "openai/gpt-6-sol",
         effort: ["none", "low", "medium", "high", "xhigh", "max"],
-        openRouterResolve: "openrouter/openai/gpt-5.6-sol",
+        openRouterResolve: "openrouter/openai/gpt-6-sol",
         preferred: true,
         subagentModel: "gpt-terra"
       },
@@ -107830,9 +107830,9 @@ var providers = {
       "gpt-sol-pro": {
         displayName: "GPT Sol Pro",
         description: "Maximum reasoning effort",
-        resolve: "openai/gpt-5.6-sol",
+        resolve: "openai/gpt-6-sol",
         effort: ["none", "low", "medium", "high", "xhigh", "max"],
-        openRouterResolve: "openrouter/openai/gpt-5.6-sol-pro",
+        openRouterResolve: "openrouter/openai/gpt-6-sol-pro",
         subagentModel: "gpt-sol"
       },
       // gpt-5.6's balanced mid-tier. selectable on its own and doubles as Sol's
@@ -107845,9 +107845,9 @@ var providers = {
       },
       "gpt-luna": {
         displayName: "GPT Luna",
-        resolve: "openai/gpt-5.6-luna",
+        resolve: "openai/gpt-6-luna",
         effort: ["none", "low", "medium", "high", "xhigh", "max"],
-        openRouterResolve: "openrouter/openai/gpt-5.6-luna"
+        openRouterResolve: "openrouter/openai/gpt-6-luna"
       },
       // legacy aliases — openai unified the codex line into the main GPT family
       // and is shutting down every "-codex" snapshot on 2026-07-23. transparently
@@ -107941,9 +107941,9 @@ var providers = {
     models: {
       grok: {
         displayName: "Grok",
-        resolve: "xai/grok-4.6",
+        resolve: "xai/grok-4.7",
         effort: ["low", "medium", "high", "xhigh"],
-        openRouterResolve: "openrouter/x-ai/grok-4.6",
+        openRouterResolve: "openrouter/x-ai/grok-4.7",
         preferred: true
       },
       // the Smart ladder's cheap rung: 1.25/2.5 against 4.6's 2/6, and a 0.2
@@ -107958,17 +107958,17 @@ var providers = {
       // 2026-05-15 (https://docs.x.ai/developers/migration/may-15-deprecation)
       // and now redirects every deprecated text-model slug to grok-4.3 at
       // standard pricing. fall back to the live `xai/grok` so the alias
-      // chain resolves to grok-4.6 for both direct-key and OpenRouter users.
+      // chain resolves to grok-4.7 for both direct-key and OpenRouter users.
       "grok-fast": {
         displayName: "Grok Fast",
         resolve: "xai/grok-4-1-fast",
-        openRouterResolve: "openrouter/x-ai/grok-4.6",
+        openRouterResolve: "openrouter/x-ai/grok-4.7",
         fallback: "xai/grok"
       },
       "grok-code-fast": {
         displayName: "Grok Code Fast",
         resolve: "xai/grok-code-fast-1",
-        openRouterResolve: "openrouter/x-ai/grok-4.6",
+        openRouterResolve: "openrouter/x-ai/grok-4.7",
         fallback: "xai/grok"
       }
     }
@@ -107996,8 +107996,9 @@ var providers = {
       "deepseek-pro": {
         displayName: "DeepSeek Pro",
         resolve: "deepseek/deepseek-v4-pro",
-        effort: ["high", "max"],
-        openRouterEffort: ["low", "high", "max"],
+        // models.dev gave the direct id V4.1-Flash's ladder on 2026-09-21, which
+        // is what DeepSeek now serves under it — and the same as the Router pin's.
+        effort: ["low", "high", "max"],
         openRouterResolve: "openrouter/deepseek/deepseek-v4-pro-0813",
         preferred: true
       },
@@ -108061,12 +108062,20 @@ var providers = {
   // the same models as `moonshotai` above, billed against a Kimi membership
   // instead of a Moonshot API balance — a separate endpoint, separate model
   // ids and a separate key, which is why it is a provider rather than a second
-  // `envVars` entry. no provider injection is needed: models.dev carries
-  // `kimi-for-coding` (api `https://api.kimi.com/coding/v1`, npm
-  // `@ai-sdk/anthropic`) and opencode's env loop enables it from a bare
+  // `envVars` entry. no provider injection is needed: models.dev carries the
+  // provider (api `https://api.kimi.com/coding/v1`, npm
+  // `@ai-sdk/openai-compatible`) and opencode's env loop enables it from a bare
   // `KIMI_API_KEY`, verified against our pinned opencode-ai@1.18.5 — all four
   // ids list in `opencode models` and a run reaches Kimi's own auth check.
   //
+  // models.dev renamed that provider on 2026-09-18: `kimi-for-coding` became
+  // `kimi-code-plan-cn` (api.kimi.com — where the console mints the key) and
+  // `kimi-code-plan-global` (api.kimi.ai). opencode resolves providers from
+  // its models.dev cache, so a `resolve` still spelling the old key names a
+  // provider it does not know. the `resolve` targets track models.dev's key;
+  // the provider KEY below is Pullfrog's slug and stays put. see
+  // wiki/kimi-code.md.
+  //
   // NO `openRouterResolve` ON PURPOSE. OpenRouter cannot serve a Kimi
   // membership, so a Router path here would silently bill the wallet for
   // Moonshot pay-as-you-go under a slug picked for the opposite reason. The
@@ -108076,9 +108085,11 @@ var providers = {
   // keyless Router pick to the default subsidy model with `noRouterPath`.
   "kimi-for-coding": provider({
     // "Kimi Code" is the product name on kimi.com/code and in the console the
-    // key is minted from. The provider KEY has to stay `kimi-for-coding` — it
-    // is models.dev's id, so it is what `enabled_providers` and every
-    // `resolve` prefix must spell.
+    // key is minted from. the provider KEY stays `kimi-for-coding`: it is the
+    // slug prefix every stored pick, `--model` flag and BYOK card spells, and
+    // it is not what reaches opencode — `enabled_providers` is derived from
+    // the `resolve` prefix (`action/agents/opencode.ts`), which is why the
+    // two may differ here and nowhere else in this file.
     displayName: "Kimi Code",
     envVars: ["KIMI_API_KEY"],
     models: {
@@ -108089,7 +108100,7 @@ var providers = {
       "kimi-k3": {
         displayName: "Kimi K3",
         description: "1M context, but only on Allegretto and above \xB7 Moderato caps it at 256K",
-        resolve: "kimi-for-coding/k3",
+        resolve: "kimi-code-plan-cn/k3",
         effort: ["low", "high", "max"],
         subagentModel: "kimi-k2"
       },
@@ -108104,7 +108115,7 @@ var providers = {
       "kimi-k3-256k": {
         displayName: "Kimi K3 256K",
         description: "Same model at 256K for ~half the quota \xB7 Moderato or above",
-        resolve: "kimi-for-coding/k3-256k",
+        resolve: "kimi-code-plan-cn/k3-256k",
         effort: ["low", "high", "max"],
         preferred: true,
         subagentModel: "kimi-k2"
@@ -108112,7 +108123,7 @@ var providers = {
       "kimi-k2": {
         displayName: "Kimi K2",
         description: "Included in every Kimi membership tier",
-        resolve: "kimi-for-coding/kimi-for-coding",
+        resolve: "kimi-code-plan-cn/kimi-for-coding",
         // models.dev published this ladder on 2026-09-14; the catalog gate
         // mirrors it, so main was red until the alias carried it too.
         effort: ["low", "high", "max"]
@@ -108120,7 +108131,7 @@ var providers = {
       "kimi-k2-highspeed": {
         displayName: "Kimi K2 HighSpeed",
         description: "~6x output speed for ~3x quota \xB7 needs Allegretto or above",
-        resolve: "kimi-for-coding/kimi-for-coding-highspeed"
+        resolve: "kimi-code-plan-cn/kimi-for-coding-highspeed"
       }
     }
   }),
@@ -108185,24 +108196,15 @@ var providers = {
       },
       "claude-opus": {
         displayName: "Claude Opus",
-        resolve: "opencode/claude-opus-5",
+        resolve: "opencode/claude-opus-5-5",
         effort: ["low", "medium", "high", "xhigh", "max"],
-        openRouterResolve: "openrouter/anthropic/claude-opus-5",
-        subagentModel: "claude-sonnet",
-        // TEMPORARY — clear this ONLY when opus completes a run through opencode,
-        // never when the endpoint merely answers. Zen LISTS claude-opus-5 in
-        // /zen/v1/models, so the catalog test passes; on 2026-08-25 the endpoint
-        // itself answered 503 `Upstream request failed: Endpoint is unavailable.`
-        // (measured 5/5; claude-sonnet-5, claude-opus-4-8, claude-haiku-4-5 and
-        // claude-fable-5 all 200 on the same key). opencode retries above the AI
-        // SDK emitting no part.updated, so a run just produces nothing until it is
-        // killed — metaideas/init logged six zero-output failures from 2026-08-23.
-        // The 503 has since cleared and the model is STILL unusable: re-measured
-        // 2026-08-26, direct POST /zen/v1/messages is 10/10 200 at 1.3-4.1s while
-        // `opencode run --model opencode/claude-opus-5` on the same trivial prompt
-        // emitted nothing for 240s in CI. A raw-endpoint 200 is not runtime
-        // availability. see wiki/opencode-silent-stall.md
-        fallback: "opencode/claude-sonnet"
+        openRouterResolve: "openrouter/anthropic/claude-opus-5.5",
+        subagentModel: "claude-sonnet"
+        // fell back to Sonnet from 2026-08-25 to 2026-09-25: Zen listed
+        // claude-opus-5 while `opencode run` on it emitted nothing for 240s. A
+        // raw-endpoint 200 is not runtime availability — the fallback was cleared
+        // only once `opencode run` completed on both claude-opus-5 and 5-5. see
+        // wiki/opencode-silent-stall.md
       },
       "claude-sonnet": {
         displayName: "Claude Sonnet",
@@ -108217,9 +108219,9 @@ var providers = {
       },
       "gpt-sol": {
         displayName: "GPT Sol",
-        resolve: "opencode/gpt-5.6-sol",
+        resolve: "opencode/gpt-6-sol",
         effort: ["none", "low", "medium", "high", "xhigh", "max"],
-        openRouterResolve: "openrouter/openai/gpt-5.6-sol",
+        openRouterResolve: "openrouter/openai/gpt-6-sol",
         subagentModel: "gpt-terra"
       },
       "gpt-astra": {
@@ -108233,9 +108235,9 @@ var providers = {
       "gpt-sol-pro": {
         displayName: "GPT Sol Pro",
         description: "Maximum reasoning effort",
-        resolve: "opencode/gpt-5.6-sol",
+        resolve: "opencode/gpt-6-sol",
         effort: ["none", "low", "medium", "high", "xhigh", "max"],
-        openRouterResolve: "openrouter/openai/gpt-5.6-sol-pro",
+        openRouterResolve: "openrouter/openai/gpt-6-sol-pro",
         subagentModel: "gpt-sol"
       },
       // gpt-5.6 balanced mid-tier — selectable + Sol's subagent. see openai above.
@@ -108247,9 +108249,9 @@ var providers = {
       },
       "gpt-luna": {
         displayName: "GPT Luna",
-        resolve: "opencode/gpt-5.6-luna",
+        resolve: "opencode/gpt-6-luna",
         effort: ["none", "low", "medium", "high", "xhigh", "max"],
-        openRouterResolve: "openrouter/openai/gpt-5.6-luna"
+        openRouterResolve: "openrouter/openai/gpt-6-luna"
       },
       // legacy aliases — see openai provider above for context.
       "gpt-codex": {
@@ -108348,9 +108350,34 @@ var providers = {
       },
       grok: {
         displayName: "Grok",
-        resolve: "opencode/grok-4.6",
+        resolve: "opencode/grok-4.7",
         effort: ["low", "medium", "high", "xhigh"],
-        openRouterResolve: "openrouter/x-ai/grok-4.6"
+        openRouterResolve: "openrouter/x-ai/grok-4.7"
+      },
+      // Zen began listing Qwen's Max and Flash tiers in late 2026-09 (Max on
+      // 09-25); until then `opencode-go` was the only Qwen route, so a Zen
+      // subscriber without Go had none. Plus is still Go-only. Zen's Max entry
+      // publishes a reasoning toggle but no effort rungs.
+      "qwen-max": {
+        displayName: "Qwen Max",
+        resolve: "opencode/qwen3.8-max",
+        openRouterEffort: ["minimal", "low", "medium", "high", "xhigh"],
+        openRouterResolve: "openrouter/qwen/qwen3.8-max-0902",
+        // unlisted until a published `pullfrog` carries this alias (the
+        // merge-vs-publish rule in wiki/models-catalog.md). unhide in the release
+        // that ships it.
+        hidden: true
+      },
+      "qwen-flash": {
+        displayName: "Qwen Flash",
+        resolve: "opencode/qwen3.8-flash",
+        effort: ["low", "medium", "xhigh"],
+        openRouterEffort: [],
+        openRouterResolve: "openrouter/qwen/qwen3.8-flash",
+        // unlisted until a published `pullfrog` carries this alias (the
+        // merge-vs-publish rule in wiki/models-catalog.md). unhide in the release
+        // that ships it.
+        hidden: true
       },
       "gpt-5-nano": {
         displayName: "GPT Nano",
@@ -108363,8 +108390,12 @@ var providers = {
       "muse-spark": {
         displayName: "Muse Spark",
         resolve: "opencode/muse-spark-1.3",
-        effort: ["minimal", "low", "medium", "high", "xhigh", "max"],
-        openRouterResolve: "openrouter/meta/muse-spark-1.3"
+        // models.dev dropped `max` from Zen's ladder on 2026-09-19 while the
+        // OpenRouter and direct `meta/` routes kept it; the catalog gate
+        // mirrors what is published per route.
+        effort: ["minimal", "low", "medium", "high", "xhigh"],
+        openRouterResolve: "openrouter/meta/muse-spark-1.3",
+        openRouterEffort: ["minimal", "low", "medium", "high", "xhigh", "max"]
       },
       // Zen's FREE contributor tier: the same model at $0 because Meta trains
       // on the prompts and completions. Zen served it to our key on 2026-09-12
@@ -108388,13 +108419,38 @@ var providers = {
         resolve: "opencode/union-alpha",
         // free to run, still gated on the provider's own OPENCODE_API_KEY —
         // see the big-pickle note above (#1077).
-        isFree: true
+        isFree: true,
+        // Zen dropped the id from `/v1/models` on 2026-09-18, two days after it
+        // listed it, and answers a 500 for it. a stealth preview has no same-
+        // family successor, so stored picks land on the other free stealth
+        // model, as `minimax-m2.5-free` does.
+        fallback: "opencode/big-pickle"
+      },
+      // Zen's FREE stealth preview (listed 2026-09-23), the third after
+      // big-pickle and union-alpha. OpenRouter's listing: prompts and
+      // completions may be retained by the provider, not trained on. unlike the
+      // first two it publishes an effort ladder, so the gate mirrors one here.
+      "space-bunny": {
+        displayName: "Space Bunny",
+        description: "Stealth preview; prompts may be retained",
+        resolve: "opencode/space-bunny-free",
+        effort: ["low", "medium", "high", "xhigh", "max"],
+        // free to run, still gated on the provider's own OPENCODE_API_KEY —
+        // see the big-pickle note above (#1077).
+        isFree: true,
+        // unlisted until a published `pullfrog` carries this alias: 0.1.82
+        // predates it, so a run passes `opencode/space-bunny` through raw and
+        // Zen answers a 500. unhide in the release that ships it.
+        hidden: true
       },
       // Zen's live free MiMo, and the second free row in a menu that big-pickle
       // was alone in since `mimo-v2-pro-free` lost its model.
       mimo: {
         displayName: "MiMo",
-        resolve: "opencode/mimo-v2.5-free",
+        // models.dev deprecated `mimo-v2.5-free` on 2026-09-22. V2.6-Flash is
+        // the only other MiMo Zen serves, so the slug follows it across the
+        // tier rather than leaving stored picks on a dying id.
+        resolve: "opencode/mimo-v2.6-flash-free",
         // free to run, still gated on the provider's own OPENCODE_API_KEY —
         // see the big-pickle note above (#1077).
         isFree: true
@@ -108423,11 +108479,12 @@ var providers = {
   // OpenCode Go is a separate $10/mo subscription from Zen, served on its own
   // base URL (`https://opencode.ai/zen/go/v1`) but authenticated with the SAME
   // `OPENCODE_API_KEY`. it carries the open-weight coding models plus a couple
-  // of frontier ones, six of which are served ONLY here — Zen's `/v1/models`
-  // does not list qwen3.7/3.8-*, mimo-v2.5-pro, longcat-2.0 or hy3. (it listed
+  // of frontier ones, four of which are served ONLY here — Zen's `/v1/models`
+  // does not list qwen3.7-plus, mimo-v2.6-pro, longcat-2.0 or hy3. (it listed
   // no glm-5.3* either until 2026-09, which is why `opencode/glm` trailed on
-  // 5.2.) so for a Go subscriber this provider is not a duplicate route to Zen,
-  // it is the only route to a large part of what they pay for.
+  // 5.2, and no qwen3.8-* until late 2026-09.) so for a Go subscriber this
+  // provider is not a duplicate route to Zen, it is the only route to a large
+  // part of what they pay for.
   // like `opencode` and `openrouter` this is a ROUTER, not a vendor: slugs and
   // display names mirror the upstream brand tier, and the picker groups them
   // under the upstream vendor.
@@ -108487,7 +108544,8 @@ var providers = {
       // picker row that fails for almost everyone is worse than none. DeepSeek
       // stays reachable ungated via `deepseek/*`, `opencode/*` and
       // `openrouter/*`; both remain runnable by full specifier once opted in.
-      // Alibaba — new vendor family for the catalog; Zen serves neither tier.
+      // Alibaba — Zen serves Max and Flash too (see `opencode/qwen-max`); Plus
+      // is Go-only.
       "qwen-max": {
         displayName: "Qwen Max",
         resolve: "opencode-go/qwen3.8-max",
@@ -108530,8 +108588,8 @@ var providers = {
       // Xiaomi — Go-only; Zen serves the free `mimo-v2-pro-free` promo instead.
       "mimo-pro": {
         displayName: "MiMo Pro",
-        resolve: "opencode-go/mimo-v2.5-pro",
-        openRouterResolve: "openrouter/xiaomi/mimo-v2.5-pro"
+        resolve: "opencode-go/mimo-v2.6-pro",
+        openRouterResolve: "openrouter/xiaomi/mimo-v2.6-pro"
       },
       // Meituan — Go-only.
       longcat: {
@@ -108557,15 +108615,15 @@ var providers = {
       // wiki/models-catalog.md on `opencode/kimi-k2`.
       grok: {
         displayName: "Grok",
-        resolve: "opencode-go/grok-4.6",
+        resolve: "opencode-go/grok-4.7",
         effort: ["low", "medium", "high", "xhigh"],
-        openRouterResolve: "openrouter/x-ai/grok-4.6"
+        openRouterResolve: "openrouter/x-ai/grok-4.7"
       },
       "gpt-luna": {
         displayName: "GPT Luna",
-        resolve: "opencode-go/gpt-5.6-luna",
+        resolve: "opencode-go/gpt-6-luna",
         effort: ["none", "low", "medium", "high", "xhigh", "max"],
-        openRouterResolve: "openrouter/openai/gpt-5.6-luna"
+        openRouterResolve: "openrouter/openai/gpt-6-luna"
       }
     }
   }),
@@ -108667,15 +108725,15 @@ var providers = {
         resolve: "openrouter/~anthropic/claude-haiku-latest",
         openRouterResolve: "openrouter/~anthropic/claude-haiku-latest"
       },
-      // pinned to the explicit gpt-5.6 tiers (not the ~openai/gpt-latest rolling
-      // alias): after the Sol/Terra/Luna rename, ~gpt-mini-latest no longer maps
+      // pinned to the explicit Sol/Terra/Luna tiers (not the ~openai/gpt-latest
+      // rolling alias): after that rename, ~gpt-mini-latest no longer maps
       // to Luna, so rolling aliases would silently diverge `gpt`/`gpt-mini` from
       // the chosen tiers across funding paths.
       "gpt-sol": {
         displayName: "GPT Sol",
-        resolve: "openrouter/openai/gpt-5.6-sol",
+        resolve: "openrouter/openai/gpt-6-sol",
         effort: ["none", "low", "medium", "high", "xhigh", "max"],
-        openRouterResolve: "openrouter/openai/gpt-5.6-sol",
+        openRouterResolve: "openrouter/openai/gpt-6-sol",
         subagentModel: "gpt-terra"
       },
       "gpt-astra": {
@@ -108689,9 +108747,9 @@ var providers = {
       "gpt-sol-pro": {
         displayName: "GPT Sol Pro",
         description: "Maximum reasoning effort",
-        resolve: "openrouter/openai/gpt-5.6-sol-pro",
+        resolve: "openrouter/openai/gpt-6-sol-pro",
         effort: ["none", "low", "medium", "high", "xhigh", "max"],
-        openRouterResolve: "openrouter/openai/gpt-5.6-sol-pro",
+        openRouterResolve: "openrouter/openai/gpt-6-sol-pro",
         subagentModel: "gpt-sol"
       },
       // gpt-5.6 balanced mid-tier — selectable + Sol's subagent. see openai above.
@@ -108703,9 +108761,9 @@ var providers = {
       },
       "gpt-luna": {
         displayName: "GPT Luna",
-        resolve: "openrouter/openai/gpt-5.6-luna",
+        resolve: "openrouter/openai/gpt-6-luna",
         effort: ["none", "low", "medium", "high", "xhigh", "max"],
-        openRouterResolve: "openrouter/openai/gpt-5.6-luna"
+        openRouterResolve: "openrouter/openai/gpt-6-luna"
       },
       // legacy aliases — see openai provider for context.
       "gpt-codex": {
@@ -108769,9 +108827,9 @@ var providers = {
       },
       grok: {
         displayName: "Grok",
-        resolve: "openrouter/x-ai/grok-4.6",
+        resolve: "openrouter/x-ai/grok-4.7",
         effort: ["low", "medium", "high", "xhigh"],
-        openRouterResolve: "openrouter/x-ai/grok-4.6"
+        openRouterResolve: "openrouter/x-ai/grok-4.7"
       },
       // dated pin, not the bare id — see `deepseek/deepseek-pro` for why
       // OpenRouter's unversioned `deepseek-v4-pro` is the stale April preview.
@@ -108842,8 +108900,10 @@ var providers = {
   vercel: provider({
     // Vercel AI Gateway — one key serves every model it fronts. model IDs use
     // the models.dev `vercel` catalog's own naming (dotted versions, e.g.
-    // `anthropic/claude-opus-5`, `zai/glm-5.3`), and effort ladders mirror that
-    // catalog's entries, not the upstream vendor's. deliberately no
+    // `anthropic/claude-opus-5.5`, `zai/glm-5.3`). effort ladders come from the
+    // gateway's OWN `/v1/models`, not models.dev — the two disagree routinely
+    // (on 2026-09-22 they disagreed on all ten entries that drifted), and the
+    // drift test reads the gateway for that reason. deliberately no
     // `openRouterResolve`: a gateway pick is BYOK-only — silently rerouting it
     // over the Router proxy would bill the wallet for traffic the user pointed
     // at their own gateway.
@@ -108852,7 +108912,7 @@ var providers = {
     models: {
       "claude-opus": {
         displayName: "Claude Opus",
-        resolve: "vercel/anthropic/claude-opus-5",
+        resolve: "vercel/anthropic/claude-opus-5.5",
         effort: ["low", "medium", "high", "xhigh", "max"],
         preferred: true,
         subagentModel: "claude-sonnet"
@@ -108860,7 +108920,7 @@ var providers = {
       "claude-sonnet": {
         displayName: "Claude Sonnet",
         resolve: "vercel/anthropic/claude-sonnet-5",
-        effort: ["low", "medium", "high", "xhigh"]
+        effort: ["none", "low", "medium", "high", "xhigh", "max"]
       },
       "claude-haiku": {
         displayName: "Claude Haiku",
@@ -108868,7 +108928,7 @@ var providers = {
       },
       "gpt-sol": {
         displayName: "GPT Sol",
-        resolve: "vercel/openai/gpt-5.6-sol",
+        resolve: "vercel/openai/gpt-6-sol",
         effort: ["none", "low", "medium", "high", "xhigh", "max"],
         subagentModel: "gpt-terra"
       },
@@ -108881,35 +108941,35 @@ var providers = {
       "gpt-terra": {
         displayName: "GPT Terra",
         resolve: "vercel/openai/gpt-5.6-terra",
-        effort: ["none", "low", "medium", "high", "xhigh", "max"]
+        effort: ["none", "minimal", "low", "medium", "high", "xhigh", "max"]
       },
       "gpt-luna": {
         displayName: "GPT Luna",
-        resolve: "vercel/openai/gpt-5.6-luna",
+        resolve: "vercel/openai/gpt-6-luna",
         effort: ["none", "low", "medium", "high", "xhigh", "max"]
       },
       "gemini-pro": {
         displayName: "Gemini Pro",
         resolve: "vercel/google/gemini-3.1-pro-preview",
-        effort: ["low", "medium", "high"]
+        effort: ["low", "high"]
       },
       "gemini-flash": {
         displayName: "Gemini Flash",
         resolve: "vercel/google/gemini-3.8-flash",
-        effort: ["low", "medium", "high"]
+        effort: ["low", "high"]
       },
       "deepseek-pro": {
         displayName: "DeepSeek Pro",
         resolve: "vercel/deepseek/deepseek-v4-pro-0813",
-        effort: ["high", "xhigh"]
+        effort: ["none", "high", "max"]
       },
       // the gateway's bare `deepseek-v4-flash` is the April preview — the same
       // fork trap as OpenRouter, with `deepseek-v4-flash-0731` beside it — so
-      // this entry sat on the preview until V4.1. the gateway publishes no
-      // effort ladder for the V4.1 id.
+      // this entry sat on the preview until V4.1.
       "deepseek-flash": {
         displayName: "DeepSeek Flash",
-        resolve: "vercel/deepseek/deepseek-v4.1-flash"
+        resolve: "vercel/deepseek/deepseek-v4.1-flash",
+        effort: ["none", "high", "max"]
       },
       glm: {
         displayName: "GLM",
@@ -108919,12 +108979,12 @@ var providers = {
       "kimi-k3": {
         displayName: "Kimi K3",
         resolve: "vercel/moonshotai/kimi-k3",
-        effort: ["low", "high", "max"]
+        effort: ["none", "low", "high", "max"]
       },
-      // the gateway publishes no effort ladder for this id.
       "muse-spark": {
         displayName: "Muse Spark",
-        resolve: "vercel/meta/muse-spark-1.3"
+        resolve: "vercel/meta/muse-spark-1.3",
+        effort: ["minimal", "low", "medium", "high", "xhigh"]
       }
     }
   })
@@ -109986,7 +110046,7 @@ var import_semver = __toESM(require_semver2(), 1);
 // package.json
 var package_default = {
   name: "pullfrog",
-  version: "0.1.81",
+  version: "0.1.83",
   cliContractVersion: "1",
   type: "module",
   bin: {
@@ -110003,6 +110063,7 @@ var package_default = {
     typecheck: "tsc --noEmit",
     build: "node esbuild.config.js && tsc -p tsconfig.exports.json",
     "check:entrypoints": "nub scripts/check-entrypoint-imports.ts",
+    "check:secret-commands": "nub scripts/check-secret-commands.ts",
     docker: "nub docker.ts",
     play: "nub play.ts",
     runtest: "nub test/run.ts",
@@ -110013,7 +110074,7 @@ var package_default = {
   },
   devDependencies: {
     "@actions/core": "^1.11.1",
-    "@anthropic-ai/claude-code": "2.1.150",
+    "@anthropic-ai/claude-code": "2.1.280",
     "@ark/fs": "0.56.0",
     "@ark/util": "0.56.0",
     "@clack/prompts": "^1.2.0",
@@ -110623,7 +110684,7 @@ process.stdin.on("end", () => {
 });
 `;
 }
-function buildClaudePretoolGateSettings(scriptAbsolutePath, execToolDenyRules) {
+function buildClaudePretoolGateSettings(scriptAbsolutePath, denyRules) {
   return {
     hooks: {
       PreToolUse: [
@@ -110643,7 +110704,7 @@ function buildClaudePretoolGateSettings(scriptAbsolutePath, execToolDenyRules) {
         }
       ]
     },
-    permissions: { deny: execToolDenyRules }
+    permissions: { deny: denyRules }
   };
 }
 
@@ -111506,12 +111567,22 @@ async function installClaudeCli() {
     installDependencies: true
   });
 }
-var CLAUDE_EXEC_TOOLS = ["Bash", "Monitor", "REPL", "Workflow"];
-var CLAUDE_EXEC_TOOL_DENY_RULES = [
+var CLAUDE_EXEC_TOOLS = ["Bash", "PowerShell", "Monitor", "REPL", "Workflow"];
+var CLAUDE_DENIED_TOOLS = [
   ...CLAUDE_EXEC_TOOLS,
-  ...CLAUDE_EXEC_TOOLS.map((t) => `Agent(${t})`)
+  "DesignSync",
+  "Artifact",
+  "ShareOnboardingGuide",
+  "SendMessage",
+  "ListAgents",
+  "PushNotification",
+  "RemoteTrigger"
 ];
-var CLAUDE_DISALLOWED_TOOLS = CLAUDE_EXEC_TOOL_DENY_RULES.join(",");
+var CLAUDE_DENY_RULES = [
+  ...CLAUDE_DENIED_TOOLS,
+  ...CLAUDE_DENIED_TOOLS.map((t) => `Agent(${t})`)
+];
+var CLAUDE_DISALLOWED_TOOLS = CLAUDE_DENY_RULES.join(",");
 function writeMcpConfig(ctx) {
   const configDir = join4(ctx.tmpdir, ".claude");
   mkdirSync4(configDir, { recursive: true });
@@ -111944,14 +112015,11 @@ function buildClaudeSettings(params) {
     `Glob(${path4}/**)`,
     `Glob(/${path4}/**)`
   ]);
-  const gate = buildClaudePretoolGateSettings(
-    params.pretoolGateScriptPath,
-    CLAUDE_EXEC_TOOL_DENY_RULES
-  );
+  const gate = buildClaudePretoolGateSettings(params.pretoolGateScriptPath, CLAUDE_DENY_RULES);
   const base = {
     permissions: {
       deny: [
-        // native exec tools — the authoritative, bypass-immune deny.
+        // CLAUDE_DENIED_TOOLS — the authoritative, bypass-immune deny.
         // `--disallowedTools` (a cliArg-source deny) leaked under
         // `--dangerously-skip-permissions`; policySettings denies survive
         // bypassPermissions mode. covers top-level + Agent(...) subagent use.
@@ -112165,7 +112233,6 @@ var claude = agent({
 });
 
 // agents/codex.ts
-var core3 = __toESM(require_core(), 1);
 import { existsSync as existsSync5, mkdirSync as mkdirSync6, readFileSync as readFileSync3, writeFileSync as writeFileSync5 } from "node:fs";
 import { join as join6 } from "node:path";
 import { performance as performance6 } from "node:perf_hooks";
@@ -112451,6 +112518,15 @@ async function apiFetch(options) {
 // utils/oauthWriteback.ts
 var OAUTH_WRITEBACK_STATE = "oauth_writeback";
 
+// utils/secretCommands.ts
+var core3 = __toESM(require_core(), 1);
+function maskSecret(value2) {
+  if (isGitHubActions) core3.setSecret(value2);
+}
+function saveSecretState(name, value2) {
+  if (isGitHubActions) core3.saveState(name, value2);
+}
+
 // utils/secrets.ts
 var SENSITIVE_PATTERNS = [
   /_KEY$/i,
@@ -112799,8 +112875,8 @@ function toTodoWriteInput(item) {
 }
 var CODEX_MODEL_PRICING = {
   "gpt-6-astra": { input: 10, cacheRead: 1, cacheWrite: 12.5, output: 50 },
-  "gpt-5.6-sol": { input: 5, cacheRead: 0.5, cacheWrite: 6.25, output: 30 },
-  "gpt-5.6-luna": { input: 0.2, cacheRead: 0.02, cacheWrite: 0.25, output: 1.2 },
+  "gpt-6-sol": { input: 2, cacheRead: 0.2, cacheWrite: 2.5, output: 10 },
+  "gpt-6-luna": { input: 0.1, cacheRead: 0.01, cacheWrite: 0.125, output: 0.5 },
   "gpt-5.6-terra": { input: 2, cacheRead: 0.2, cacheWrite: 2.5, output: 12 }
 };
 function codexCostUsd(params) {
@@ -113038,7 +113114,7 @@ var codex = agent({
       gatewayUrl: codexHomeAuth ? void 0 : getProviderGatewayUrl("openai/")
     });
     if (codexHomeAuth) {
-      core3.saveState(
+      saveSecretState(
         OAUTH_WRITEBACK_STATE,
         JSON.stringify({
           apiToken: ctx.apiToken,
@@ -113123,7 +113199,6 @@ var codex = agent({
 });
 
 // agents/opencode.ts
-var core4 = __toESM(require_core(), 1);
 import { spawn as nodeSpawn2 } from "node:child_process";
 import { mkdirSync as mkdirSync7, writeFileSync as writeFileSync6 } from "node:fs";
 import { join as join7 } from "node:path";
@@ -118695,6 +118770,11 @@ export default async function pullfrogSubagentGatePlugin() {
       // pick a different action.
       const sessionID = typeof input?.sessionID === "string" ? input.sessionID : "";
       const tool = typeof input?.tool === "string" ? input.tool : "";
+      // above the sessionID check: the bash block must never depend on a
+      // session id being present.
+      if (tool === "bash") {
+        throw new Error("the native bash tool is disabled in Pullfrog runs.");
+      }
       if (!sessionID || !tool) return;
       if (orchestratorSessionID === undefined) orchestratorSessionID = sessionID;
       if (sessionID === orchestratorSessionID) return;
@@ -118907,7 +118987,11 @@ var installCli = () => installOpencodeCli({ binPath: "bin/opencode.exe" });
 function buildSecurityConfig(ctx, model) {
   const config3 = {
     permission: {
-      bash: "deny",
+      // listed but never run: Zen's free tier 403s a tool list missing `bash`,
+      // `glob`, `grep` or `read` (2026-09-17), so the gate plugin throws on
+      // every bash call and "ask" (no responder in serve mode) fails closed.
+      // never switch one of those four to "deny". see wiki/security.md.
+      bash: "ask",
       edit: "allow",
       read: "allow",
       webfetch: "allow",
@@ -119556,7 +119640,7 @@ var opencode = agent({
       });
     }
     if (writebacks.length > 0) {
-      core4.saveState(
+      saveSecretState(
         OAUTH_WRITEBACK_STATE,
         JSON.stringify({ apiToken: ctx.apiToken, entries: writebacks })
       );
@@ -130651,7 +130735,7 @@ var Hono2 = class extends Hono {
   }
 };
 
-// node_modules/.pnpm/mcp-proxy@6.7.11/node_modules/mcp-proxy/dist/startStdioServer-C4sEMMHS.mjs
+// node_modules/.pnpm/mcp-proxy@6.7.12/node_modules/mcp-proxy/dist/startStdioServer-C9HzKfjR.mjs
 import { createRequire } from "node:module";
 import { randomUUID as randomUUID2, timingSafeEqual } from "node:crypto";
 
@@ -140424,7 +140508,7 @@ var require_core$2 = /* @__PURE__ */ __commonJSMin(((exports) => {
   Object.defineProperty(exports, "__esModule", { value: true });
   const id_1 = require_id2();
   const ref_1 = require_ref2();
-  const core12 = [
+  const core8 = [
     "$schema",
     "$id",
     "$defs",
@@ -140434,7 +140518,7 @@ var require_core$2 = /* @__PURE__ */ __commonJSMin(((exports) => {
     id_1.default,
     ref_1.default
   ];
-  exports.default = core12;
+  exports.default = core8;
 }));
 var require_limitNumber2 = /* @__PURE__ */ __commonJSMin(((exports) => {
   Object.defineProperty(exports, "__esModule", { value: true });
@@ -142572,7 +142656,7 @@ var require_json_schema_2019_09 = /* @__PURE__ */ __commonJSMin(((exports) => {
   const metaSchema = require_schema$1();
   const applicator = require_applicator$1();
   const content = require_content$1();
-  const core12 = require_core$1();
+  const core8 = require_core$1();
   const format2 = require_format3();
   const metadata = require_meta_data$1();
   const validation = require_validation$1();
@@ -142582,7 +142666,7 @@ var require_json_schema_2019_09 = /* @__PURE__ */ __commonJSMin(((exports) => {
       metaSchema,
       applicator,
       content,
-      core12,
+      core8,
       with$data(this, format2),
       metadata,
       with$data(this, validation)
@@ -143022,7 +143106,7 @@ var require_json_schema_2020_12 = /* @__PURE__ */ __commonJSMin(((exports) => {
   const applicator = require_applicator2();
   const unevaluated = require_unevaluated();
   const content = require_content();
-  const core12 = require_core4();
+  const core8 = require_core4();
   const format2 = require_format_annotation();
   const metadata = require_meta_data();
   const validation = require_validation2();
@@ -143033,7 +143117,7 @@ var require_json_schema_2020_12 = /* @__PURE__ */ __commonJSMin(((exports) => {
       applicator,
       unevaluated,
       content,
-      core12,
+      core8,
       with$data(this, format2),
       metadata,
       with$data(this, validation)
@@ -146250,7 +146334,7 @@ function createMcpHandler(factory, options = {}) {
   };
 }
 
-// node_modules/.pnpm/mcp-proxy@6.7.11/node_modules/mcp-proxy/dist/startStdioServer-C4sEMMHS.mjs
+// node_modules/.pnpm/mcp-proxy@6.7.12/node_modules/mcp-proxy/dist/startStdioServer-C9HzKfjR.mjs
 import http from "http";
 import { Http2ServerRequest } from "http2";
 import { Readable } from "stream";
@@ -154475,7 +154559,7 @@ var require_core$22 = /* @__PURE__ */ __commonJSMin2(((exports) => {
   Object.defineProperty(exports, "__esModule", { value: true });
   const id_1 = require_id3();
   const ref_1 = require_ref3();
-  const core12 = [
+  const core8 = [
     "$schema",
     "$id",
     "$defs",
@@ -154485,7 +154569,7 @@ var require_core$22 = /* @__PURE__ */ __commonJSMin2(((exports) => {
     id_1.default,
     ref_1.default
   ];
-  exports.default = core12;
+  exports.default = core8;
 }));
 var require_limitNumber3 = /* @__PURE__ */ __commonJSMin2(((exports) => {
   Object.defineProperty(exports, "__esModule", { value: true });
@@ -156623,7 +156707,7 @@ var require_json_schema_2019_092 = /* @__PURE__ */ __commonJSMin2(((exports) =>
   const metaSchema = require_schema$12();
   const applicator = require_applicator$12();
   const content = require_content$12();
-  const core12 = require_core$12();
+  const core8 = require_core$12();
   const format2 = require_format4();
   const metadata = require_meta_data$12();
   const validation = require_validation$12();
@@ -156633,7 +156717,7 @@ var require_json_schema_2019_092 = /* @__PURE__ */ __commonJSMin2(((exports) =>
       metaSchema,
       applicator,
       content,
-      core12,
+      core8,
       with$data(this, format2),
       metadata,
       with$data(this, validation)
@@ -157073,7 +157157,7 @@ var require_json_schema_2020_122 = /* @__PURE__ */ __commonJSMin2(((exports) =>
   const applicator = require_applicator3();
   const unevaluated = require_unevaluated2();
   const content = require_content2();
-  const core12 = require_core5();
+  const core8 = require_core5();
   const format2 = require_format_annotation2();
   const metadata = require_meta_data2();
   const validation = require_validation3();
@@ -157084,7 +157168,7 @@ var require_json_schema_2020_122 = /* @__PURE__ */ __commonJSMin2(((exports) =>
       applicator,
       unevaluated,
       content,
-      core12,
+      core8,
       with$data(this, format2),
       metadata,
       with$data(this, validation)
@@ -157655,7 +157739,7 @@ var SseError = class extends Error {
   }
 };
 
-// node_modules/.pnpm/mcp-proxy@6.7.11/node_modules/mcp-proxy/dist/startStdioServer-C4sEMMHS.mjs
+// node_modules/.pnpm/mcp-proxy@6.7.12/node_modules/mcp-proxy/dist/startStdioServer-C9HzKfjR.mjs
 var __create4 = Object.create;
 var __defProp$1 = Object.defineProperty;
 var __getOwnPropDesc4 = Object.getOwnPropertyDescriptor;
@@ -174668,6 +174752,10 @@ var applyCorsHeaders = (req, res, corsOptions) => {
     console.error("[mcp-proxy] error parsing origin", error62);
   }
 };
+var canServeModernRoute = (server) => {
+  const target = server instanceof McpServer ? server.server : server;
+  return Array.isArray(target._supportedProtocolVersions);
+};
 var createModernLeg = ({ createServer: createServer4, onClose, onConnect, onListenSubscriptions }) => {
   const requestContext = new AsyncLocalStorage2();
   const createInstance = async ({ authResult, body, req }) => {
@@ -174687,6 +174775,18 @@ var createModernLeg = ({ createServer: createServer4, onClose, onConnect, onList
     };
     target.onclose = teardown;
     try {
+      if (!canServeModernRoute(server)) throw new Response(JSON.stringify({
+        error: {
+          code: -32e3,
+          data: { reason: "server_missing_modern_protocol_support" },
+          message: "Unsupported protocol version: the server instance cannot serve the 2026-07-28 protocol revision. It was built by the 1.x MCP SDK (e.g. fastmcp <=4.x pulling mcp-proxy through its `^6.4.6` range), which does not declare `_supportedProtocolVersions`. Upgrade the framework that builds it, or serve only 2025-era clients (`modern: false`)."
+        },
+        id: getRequestId(body),
+        jsonrpc: "2.0"
+      }), {
+        headers: { "content-type": "application/json" },
+        status: 400
+      });
       if (onListenSubscriptions) {
         const listenUris = readListenSubscriptions(body);
         if (listenUris.length > 0) releaseSubscriptions = await onListenSubscriptions(listenUris);
@@ -187789,7 +187889,7 @@ this usually means your local branch has commits that were never pushed \u2014 s
 }
 
 // utils/github.ts
-var core5 = __toESM(require_core(), 1);
+var core4 = __toESM(require_core(), 1);
 import { createSign } from "node:crypto";
 import { rename, writeFile } from "node:fs/promises";
 import { dirname as dirname3, join as join12 } from "node:path";
@@ -192038,9 +192138,7 @@ async function fetchIdTokenFromStash(creds) {
   if (!body.value) {
     throw new Error("ID token response has no value field");
   }
-  if (isGitHubActions) {
-    core5.setSecret(body.value);
-  }
+  maskSecret(body.value);
   return body.value;
 }
 function translateIdTokenError(error62) {
@@ -192052,7 +192150,7 @@ function translateIdTokenError(error62) {
 var mintIdToken = op(
   async () => {
     try {
-      return await core5.getIDToken(OIDC_AUDIENCE);
+      return await core4.getIDToken(OIDC_AUDIENCE);
     } catch (error62) {
       throw translateIdTokenError(error62);
     }
@@ -193390,6 +193488,15 @@ function buildImplementPlanLink(ctx, issueNumber, commentId) {
   const apiUrl = getApiUrl();
   return `[Implement plan \u2794](${apiUrl}/trigger/${ctx.repo.owner}/${ctx.repo.name}/${issueNumber}?action=implement&comment_id=${commentId})`;
 }
+function buildEnrichmentLinks(ctx) {
+  const event = ctx.payload.event;
+  if (event.trigger !== "issues_opened" || event.is_pr || ctx.payload.prompt || ctx.toolState.selectedMode === "Build") {
+    return [];
+  }
+  return [
+    `[Implement a fix \u2794](${getApiUrl()}/trigger/${ctx.repo.owner}/${ctx.repo.name}/${event.issue_number}?action=build)`
+  ];
+}
 function addFooter(ctx, body) {
   if (/<br\s*\/?>[ \t]*\n(?!\s*\n)/i.test(body)) {
     throw new Error(
@@ -193426,13 +193533,14 @@ function CreateCommentTool(ctx) {
       if (issueNumber === ctx.payload.event.issue_number) {
         ctx.toolState.standaloneCommentId = result.data.id;
       }
-      if (commentType === "Plan") {
-        if (result.data.node_id) {
+      const enrichmentLinks = issueNumber === ctx.payload.event.issue_number ? buildEnrichmentLinks(ctx) : [];
+      if (commentType === "Plan" || enrichmentLinks.length > 0) {
+        if (commentType === "Plan" && result.data.node_id) {
           await patchWorkflowRunFields(ctx, { planCommentNodeId: result.data.node_id });
         }
-        const customParts = [buildImplementPlanLink(ctx, issueNumber, result.data.id)];
+        const customParts = commentType === "Plan" ? [buildImplementPlanLink(ctx, issueNumber, result.data.id)] : enrichmentLinks;
         const footer = buildCommentFooter(ctx, customParts);
-        const bodyWithPlanLink = `${stripExistingFooter(body)}${footer}`;
+        const bodyWithPlanLink = `${stripExistingFooter(bodyWithFooter)}${footer}`;
         const updateResult = await ctx.octokit.rest.issues.updateComment({
           owner: ctx.repo.owner,
           repo: ctx.repo.name,
@@ -193504,6 +193612,7 @@ async function reportProgress(ctx, params) {
   }
   const issueNumber = ctx.payload.event.issue_number ?? primaryRepoState(ctx.toolState).issueNumber;
   const isPlanMode = ctx.toolState.selectedMode === "Plan";
+  const enrichmentLinks = params.liveProgress ? [] : buildEnrichmentLinks(ctx);
   const apiCtx = { octokit: ctx.octokit, owner: ctx.repo.owner, repo: ctx.repo.name };
   if (target_plan_comment === true && ctx.toolState.existingPlanCommentId === void 0) {
     log.warning("target_plan_comment requested but no existingPlanCommentId in tool state");
@@ -193511,7 +193620,7 @@ async function reportProgress(ctx, params) {
   if (target_plan_comment === true && ctx.toolState.existingPlanCommentId !== void 0) {
     const commentId = ctx.toolState.existingPlanCommentId;
     const customParts = issueNumber !== void 0 ? [buildImplementPlanLink(ctx, issueNumber, commentId)] : void 0;
-    const bodyWithoutFooter = stripExistingFooter(body);
+    const bodyWithoutFooter = stripExistingFooter(fixDoubleEscapedString(body));
     const footer = buildCommentFooter(ctx, customParts);
     const bodyWithFooter = `${bodyWithoutFooter}${footer}`;
     const result = await updateProgressComment(
@@ -193532,8 +193641,8 @@ async function reportProgress(ctx, params) {
   }
   const existingComment = ctx.toolState.progressComment;
   if (existingComment) {
-    const customParts = isPlanMode && issueNumber !== void 0 ? [buildImplementPlanLink(ctx, issueNumber, existingComment.id)] : void 0;
-    const bodyWithoutFooter = stripExistingFooter(body);
+    const customParts = isPlanMode && issueNumber !== void 0 ? [buildImplementPlanLink(ctx, issueNumber, existingComment.id)] : enrichmentLinks;
+    const bodyWithoutFooter = stripExistingFooter(fixDoubleEscapedString(body));
     const footer = buildCommentFooter(ctx, customParts);
     const bodyWithFooter = `${bodyWithoutFooter}${footer}`;
     let result;
@@ -193585,13 +193694,13 @@ async function reportProgress(ctx, params) {
   );
   ctx.toolState.progressComment = created.comment;
   if (!params.liveProgress) ctx.toolState.wasUpdated = true;
-  if (isPlanMode) {
-    const customParts = [buildImplementPlanLink(ctx, issueNumber, created.comment.id)];
-    const bodyWithoutFooter = stripExistingFooter(body);
+  if (isPlanMode || enrichmentLinks.length > 0) {
+    const customParts = isPlanMode ? [buildImplementPlanLink(ctx, issueNumber, created.comment.id)] : enrichmentLinks;
+    const bodyWithoutFooter = stripExistingFooter(initialBody);
     const footer = buildCommentFooter(ctx, customParts);
     const bodyWithPlanLink = `${bodyWithoutFooter}${footer}`;
     const updateResult = await updateProgressComment(apiCtx, created.comment, bodyWithPlanLink);
-    if (updateResult.node_id) {
+    if (isPlanMode && updateResult.node_id) {
       await patchWorkflowRunFields(ctx, { planCommentNodeId: updateResult.node_id });
     }
     return {
@@ -197506,6 +197615,37 @@ function ResolveReviewThreadTool(ctx) {
   });
 }
 
+// mcp/searchIssues.ts
+var SearchIssues = type({
+  terms: type.string.matching(/^[\p{L}\p{N}_./-]+$/u).atMostLength(40).array().atLeastLength(1).atMostLength(5).describe("1-5 keywords from the issue; no GitHub qualifiers or query operators")
+});
+function SearchIssuesTool(ctx) {
+  return tool({
+    name: "search_issues",
+    description: "Find open or closed issues in this repository by keyword. Inspect promising matches with get_issue before deciding whether they are duplicates or related. Results are bounded, not an exhaustive duplicate check.",
+    parameters: SearchIssues,
+    execute: execute(async (params) => {
+      const repoPath = `/repos/${ctx.repo.owner}/${ctx.repo.name}`.toLowerCase();
+      const terms = params.terms.map((term) => `"${term}"`).join(" ");
+      const response = await ctx.octokit.rest.search.issuesAndPullRequests({
+        q: `repo:${ctx.repo.owner}/${ctx.repo.name} is:issue ${terms}`,
+        per_page: 20
+      });
+      return {
+        incomplete: response.data.incomplete_results || response.data.total_count > 20,
+        issues: response.data.items.filter(
+          (issue3) => new URL(issue3.repository_url).pathname.toLowerCase() === repoPath && !issue3.pull_request && issue3.number !== ctx.payload.event.issue_number
+        ).map((issue3) => ({
+          number: issue3.number,
+          title: issue3.title,
+          url: issue3.html_url,
+          state: issue3.state
+        }))
+      };
+    })
+  });
+}
+
 // mcp/selectMode.ts
 var SelectModeParams = type({
   mode: type.string.describe(
@@ -197920,6 +198060,9 @@ function buildCommonTools(ctx, outputSchema) {
   if (hasSimilarIssues({ repoIntelligence: ctx.repoIntelligence, event: ctx.payload.event })) {
     tools.push(SimilarIssuesTool(ctx));
   }
+  if (ctx.payload.event.issue_number !== void 0 && !ctx.payload.event.is_pr) {
+    tools.push(SearchIssuesTool(ctx));
+  }
   const isStandalone = ctx.payload.event.trigger === "unknown";
   if (isStandalone || outputSchema) {
     tools.push(SetOutputTool(ctx, outputSchema));
@@ -199645,7 +199788,6 @@ function buildModelAccessError(input2) {
 }
 
 // utils/normalizeEnv.ts
-var core6 = __toESM(require_core(), 1);
 function hasControlCharacter(value2) {
   return [...value2].some((ch) => {
     const code = ch.charCodeAt(0);
@@ -199671,7 +199813,7 @@ function sanitizeSecret(key, value2) {
       `\xBB stripped whitespace from ${key} (whitespace in secret values breaks GitHub Actions log masking)`
     );
   }
-  core6.setSecret(trimmed);
+  maskSecret(trimmed);
   return trimmed;
 }
 function normalizeEnv() {
@@ -199715,7 +199857,6 @@ function normalizeEnv() {
 }
 
 // utils/overrides.ts
-var core7 = __toESM(require_core(), 1);
 var DENIED_OVERRIDE_NAMES = /* @__PURE__ */ new Set([
   "GITHUB_TOKEN",
   "GH_TOKEN",
@@ -199761,7 +199902,7 @@ function applyOverrides(params) {
       denied.push(key);
       continue;
     }
-    if (value2.length > 0) core7.setSecret(value2);
+    if (value2.length > 0) maskSecret(value2);
     params.env[key] = value2;
     applied.push(key);
   }
@@ -199770,7 +199911,7 @@ function applyOverrides(params) {
 }
 
 // utils/payload.ts
-var core8 = __toESM(require_core(), 1);
+var core5 = __toESM(require_core(), 1);
 import { readFileSync as readFileSync7 } from "node:fs";
 import { isAbsolute as isAbsolute2, resolve as resolve2 } from "node:path";
 
@@ -199913,8 +200054,8 @@ function assertDispatchPayloadIntact(promptInput) {
   );
 }
 function resolvePromptInput() {
-  const promptInput = core8.getInput("prompt");
-  const promptFile = core8.getInput("prompt_file");
+  const promptInput = core5.getInput("prompt");
+  const promptFile = core5.getInput("prompt_file");
   if (promptInput && promptFile) {
     throw new Error("set exactly one of 'prompt' or 'prompt_file' inputs, not both.");
   }
@@ -199948,7 +200089,7 @@ function resolvePromptFile(input2) {
 }
 function warnIfDeprecatedStatusChecks(value2) {
   if (value2 !== void 0) {
-    core8.warning(
+    core5.warning(
       "`status_checks` is deprecated. Both checks are now repository settings \u2014 open the Pullfrog console for this repo (Automations \u2192 Review PRs) and set them there, then remove `status_checks` from your workflow. It keeps working until you do."
     );
   }
@@ -199956,15 +200097,15 @@ function warnIfDeprecatedStatusChecks(value2) {
 }
 function resolveNonPromptInputs() {
   return Inputs.omit("prompt", "prompt_file").assert({
-    model: core8.getInput("model") || void 0,
-    effort: core8.getInput("effort") || void 0,
-    debug: core8.getInput("debug") || void 0,
-    timeout: core8.getInput("timeout") || void 0,
-    cwd: core8.getInput("cwd") || void 0,
-    push: core8.getInput("push") || void 0,
-    shell: core8.getInput("shell") || void 0,
-    status_checks: warnIfDeprecatedStatusChecks(core8.getInput("status_checks") || void 0),
-    progress_comments: core8.getInput("progress_comments") || void 0
+    model: core5.getInput("model") || void 0,
+    effort: core5.getInput("effort") || void 0,
+    debug: core5.getInput("debug") || void 0,
+    timeout: core5.getInput("timeout") || void 0,
+    cwd: core5.getInput("cwd") || void 0,
+    push: core5.getInput("push") || void 0,
+    shell: core5.getInput("shell") || void 0,
+    status_checks: warnIfDeprecatedStatusChecks(core5.getInput("status_checks") || void 0),
+    progress_comments: core5.getInput("progress_comments") || void 0
   });
 }
 function resolvePayload(resolvedPromptInput, repoSettings) {
@@ -200035,7 +200176,7 @@ function resolvePayload(resolvedPromptInput, repoSettings) {
   };
 }
 function resolveOutputSchema() {
-  const raw2 = core8.getInput("output_schema");
+  const raw2 = core5.getInput("output_schema");
   if (!raw2) return void 0;
   let parsed2;
   try {
@@ -200050,11 +200191,8 @@ function resolveOutputSchema() {
   return parsed2;
 }
 
-// utils/proxy.ts
-var core10 = __toESM(require_core(), 1);
-
 // utils/token.ts
-var core9 = __toESM(require_core(), 1);
+var core6 = __toESM(require_core(), 1);
 import assert2 from "node:assert/strict";
 var mcpTokenValue;
 var refreshMcpTokenFn;
@@ -200062,7 +200200,7 @@ function getMcpTokenRefresh() {
   return refreshMcpTokenFn;
 }
 function getJobToken() {
-  const inputToken = core9.getInput("token");
+  const inputToken = core6.getInput("token");
   if (inputToken) {
     return inputToken;
   }
@@ -200077,9 +200215,7 @@ async function resolveTokens(params) {
   const externalToken = process.env.GH_TOKEN;
   if (externalToken) {
     mcpTokenValue = externalToken;
-    if (isGitHubActions) {
-      core9.setSecret(externalToken);
-    }
+    maskSecret(externalToken);
     log.info("\xBB using external GH_TOKEN for both git and MCP");
     return {
       gitToken: externalToken,
@@ -200101,9 +200237,7 @@ async function resolveTokens(params) {
     xrepoGrant: params.xrepoGrant,
     permissions: gitPermissions
   });
-  if (isGitHubActions) {
-    core9.setSecret(gitToken);
-  }
+  maskSecret(gitToken);
   log.info(
     `\xBB acquired git token (${Object.entries(gitPermissions).map((e) => e.join(":")).join(", ")})`
   );
@@ -200122,9 +200256,7 @@ async function resolveTokens(params) {
     xrepoGrant: params.xrepoGrant,
     permissions: mcpPermissions
   });
-  if (isGitHubActions) {
-    core9.setSecret(mcpToken);
-  }
+  maskSecret(mcpToken);
   log.info(
     `\xBB acquired scoped MCP token (${Object.entries(mcpPermissions).map((e) => e.join(":")).join(", ")})`
   );
@@ -200132,7 +200264,7 @@ async function resolveTokens(params) {
   let ghToken;
   if (ghPermissions) {
     ghToken = await acquireNewToken({ permissions: ghPermissions });
-    if (isGitHubActions) core9.setSecret(ghToken);
+    maskSecret(ghToken);
     log.info(
       `\xBB acquired gh token mirroring ${params.authorPermission} (${formatPermissions(ghPermissions)})`
     );
@@ -200144,7 +200276,7 @@ async function resolveTokens(params) {
       xrepoGrant: params.xrepoGrant,
       permissions: { contents: "read" }
     });
-    if (isGitHubActions) core9.setSecret(readToken);
+    maskSecret(readToken);
     log.info(`\xBB acquired cross-repo read token (contents:read, ${params.xrepo.read.length} repos)`);
   }
   mcpTokenValue = mcpToken;
@@ -200163,9 +200295,7 @@ async function resolveTokens(params) {
       permissions: mcpPermissions,
       oidc: params.oidc ?? void 0
     }).then((fresh) => {
-      if (isGitHubActions) {
-        core9.setSecret(fresh);
-      }
+      maskSecret(fresh);
       mcpTokenValue = fresh;
       currentMcpToken = fresh;
       log.warning("\xBB GitHub rejected the MCP token; re-acquired a fresh scoped MCP token");
@@ -200186,7 +200316,7 @@ async function resolveTokens(params) {
         permissions: gitPermissions,
         oidc: params.oidc ?? void 0
       }).then((fresh) => {
-        if (isGitHubActions) core9.setSecret(fresh);
+        maskSecret(fresh);
         void revokeGitHubInstallationToken(currentGitToken);
         currentGitToken = fresh;
         log.warning("\xBB GitHub rejected the git token; re-acquired a fresh git token");
@@ -200204,7 +200334,7 @@ async function resolveTokens(params) {
         permissions: { contents: "read" },
         oidc: params.oidc ?? void 0
       }).then((fresh) => {
-        if (isGitHubActions) core9.setSecret(fresh);
+        maskSecret(fresh);
         void revokeGitHubInstallationToken(read2);
         currentReadToken = fresh;
         log.warning("\xBB GitHub rejected the read token; re-acquired a fresh read token");
@@ -200418,7 +200548,7 @@ async function resolveProxyModel(ctx) {
   });
   if (!key) return;
   process.env.OPENROUTER_API_KEY = key;
-  core10.setSecret(key);
+  maskSecret(key);
   ctx.payload.proxyModel = ctx.proxyModel;
   ctx.toolState.model = ctx.proxyModel;
   const label = ctx.oss ? "oss" : "router";
@@ -200496,7 +200626,7 @@ async function resolveTrialFallback(ctx) {
   });
   if (!key) return false;
   process.env.OPENROUTER_API_KEY = key;
-  core10.setSecret(key);
+  maskSecret(key);
   ctx.payload.proxyModel = DEFAULT_PROXY_MODEL;
   ctx.toolState.model = DEFAULT_PROXY_MODEL;
   ctx.toolState.modelClamped = {
@@ -200647,6 +200777,7 @@ var defaultSettings = {
   push: "restricted",
   shell: "restricted",
   prApproveEnabled: false,
+  reviewDrafts: false,
   autoMergeEnabled: false,
   codexAgent: false,
   signedCommits: false,
@@ -200893,6 +201024,23 @@ function isContextOverflowError(message) {
 function isNoProviderAvailableError(message) {
   return /\bNo provider available\b/i.test(message);
 }
+function isZenFreeTierGateError(message) {
+  return /free tier can only be used from within OpenCode/i.test(message);
+}
+function formatZenFreeTierGateSummary(input2) {
+  const settingsUrl = `${getApiUrl()}/console/${input2.owner}/${input2.name}`;
+  return [
+    "**Zen's free tier refused a request this run made.** OpenCode Zen currently rejects free-model requests whose tool list is missing one of the built-in tools it expects ([upstream issue](https://github.com/anomalyco/opencode/issues/49587)). Pullfrog sends all of them, but opencode's mid-run context-compaction request carries no tools at all, and a repo-level `opencode.json` that denies `bash`, `glob`, `grep` or `read` strips that tool from every request.",
+    "",
+    'Pick a paid model for this repo, drop any `"deny"` on `bash`, `glob`, `grep` or `read` from the repo\'s `opencode.json` if it sets one, or split the PR so the run stays under the compaction threshold and re-trigger.',
+    "",
+    `[Model settings \u2192](${settingsUrl}) \xB7 [Ask in Discord \u2192](https://discord.gg/8y96raFg8e)`,
+    "",
+    `\`\`\`
+${input2.raw}
+\`\`\``
+  ].join("\n");
+}
 function formatNoProviderAvailableSummary(input2) {
   const settingsUrl = `${getApiUrl()}/console/${input2.owner}/${input2.name}`;
   return [
@@ -201136,6 +201284,16 @@ ${body}`, comment: body };
     });
     return { summary: `### \u274C Pullfrog failed
 
+${body}`, comment: body };
+  }
+  if (isZenFreeTierGateError(input2.errorMessage)) {
+    const body = formatZenFreeTierGateSummary({
+      owner: input2.repo.owner,
+      name: input2.repo.name,
+      raw: input2.errorMessage
+    });
+    return { summary: `### \u274C Pullfrog failed
+
 ${body}`, comment: body };
   }
   if (isContextOverflowError(input2.errorMessage)) {
@@ -201173,7 +201331,7 @@ ${genericBody}`,
 }
 
 // utils/runLifecycle.ts
-var core11 = __toESM(require_core(), 1);
+var core7 = __toESM(require_core(), 1);
 
 // utils/autoMerge.ts
 function hasBlockingHumanReview(reviews) {
@@ -201317,7 +201475,7 @@ async function dispatchFollowUpReReview(ctx, reviewedSha) {
   });
   if (pr.data.head.sha === reviewedSha) return;
   if (pr.data.state !== "open") return;
-  if (pr.data.draft) return;
+  if (pr.data.draft && !ctx.reviewDrafts) return;
   log.info(
     `safety net: pr HEAD moved from ${reviewedSha.slice(0, 7)} to ${pr.data.head.sha.slice(0, 7)} and agent did not review inline \u2014 dispatching follow-up re-review`
   );
@@ -201569,7 +201727,7 @@ async function finalizeSuccessRun(input2) {
   }
   if (input2.toolState.output) {
     log.info(`::pullfrog-output::${Buffer.from(input2.toolState.output).toString("base64")}`);
-    core11.setOutput("result", input2.toolState.output);
+    core7.setOutput("result", input2.toolState.output);
   }
   if (input2.result.success) {
     await approveAfterFix(input2.toolContext).catch((error62) => {
@@ -202150,6 +202308,7 @@ async function main() {
           postCheckoutScript: runContext.repoSettings.postCheckoutScript,
           prepushScript: runContext.repoSettings.prepushScript,
           prApproveEnabled: runContext.repoSettings.prApproveEnabled,
+          reviewDrafts: runContext.repoSettings.reviewDrafts,
           autoMergeEnabled: runContext.repoSettings.autoMergeEnabled,
           signedCommits: runContext.repoSettings.signedCommits,
           repoIntelligence: runContext.repoSettings.repoIntelligence,
@@ -202481,7 +202640,7 @@ ieee754/index.js:
   * MIT Licensed
   *)
 
-mcp-proxy/dist/startStdioServer-C4sEMMHS.mjs:
+mcp-proxy/dist/startStdioServer-C9HzKfjR.mjs:
   (*!
   * content-type
   * Copyright(c) 2015 Douglas Christopher Wilson