pullfrog 0.1.99 → 0.1.101

package/dist/index.js

@@ -64099,7 +64099,7 @@ var require_receiver2 = __commonJS({
             const buffer = this.consume(2);
             const fin = (buffer[0] & 128) !== 0;
             const opcode = buffer[0] & 15;
-            const masked = (buffer[1] & 128) === 128;
+            const masked2 = (buffer[1] & 128) === 128;
             const fragmented = !fin && opcode !== opcodes.CONTINUATION;
             const payloadLength = buffer[1] & 127;
             const rsv1 = buffer[0] & 64;
@@ -64109,7 +64109,7 @@ var require_receiver2 = __commonJS({
               failWebsocketConnection(this.#handler, 1002, "Invalid opcode received");
               return callback();
             }
-            if (masked) {
+            if (masked2) {
               failWebsocketConnection(this.#handler, 1002, "Frame cannot be masked");
               return callback();
             }
@@ -64157,7 +64157,7 @@ var require_receiver2 = __commonJS({
               this.#info.compressed = rsv1 !== 0;
             }
             this.#info.opcode = opcode;
-            this.#info.masked = masked;
+            this.#info.masked = masked2;
             this.#info.fin = fin;
             this.#info.fragmented = fragmented;
           } else if (this.#state === parserStates.PAYLOADLENGTH_16) {
@@ -103526,9 +103526,9 @@ var providers = {
     models: {
       "gemini-pro": {
         displayName: "Gemini Pro",
-        resolve: "google/gemini-3.1-pro-preview",
+        resolve: "google/gemini-4-argon",
         effort: ["low", "medium", "high"],
-        openRouterResolve: "openrouter/google/gemini-3.1-pro-preview",
+        openRouterResolve: "openrouter/google/gemini-4-argon",
         preferred: true
         // Inherit (subagents stay on Pro). Google has no in-between tier;
         // dropping to Flash for review work was a meaningful capability cliff
@@ -103718,7 +103718,7 @@ var providers = {
         displayName: "Kimi K3",
         description: "1M context, but only on Allegretto and above \xB7 Moderato caps it at 256K",
         resolve: "kimi-code-plan-cn/k3",
-        effort: ["low", "high", "max"],
+        effort: ["none", "low", "high", "max"],
         subagentModel: "kimi-k2"
       },
       // `preferred` sits on the 256K variant rather than the 1M flagship, which
@@ -103733,7 +103733,7 @@ var providers = {
         displayName: "Kimi K3 256K",
         description: "Same model at 256K for ~half the quota \xB7 Moderato or above",
         resolve: "kimi-code-plan-cn/k3-256k",
-        effort: ["low", "high", "max"],
+        effort: ["none", "low", "high", "max"],
         preferred: true,
         subagentModel: "kimi-k2"
       },
@@ -103741,9 +103741,10 @@ var providers = {
         displayName: "Kimi K2",
         description: "Included in every Kimi membership tier",
         resolve: "kimi-code-plan-cn/kimi-for-coding",
-        // models.dev published this ladder on 2026-09-14; the catalog gate
-        // mirrors it, so main was red until the alias carried it too.
-        effort: ["low", "high", "max"]
+        // models.dev published `low, high, max` on 2026-09-14 and added `none`
+        // on 2026-10-19; the catalog gate mirrors it, so main was red until the
+        // alias carried it too.
+        effort: ["none", "low", "high", "max"]
       },
       "kimi-k2-highspeed": {
         displayName: "Kimi K2 HighSpeed",
@@ -103913,9 +103914,9 @@ var providers = {
       },
       "gemini-pro": {
         displayName: "Gemini Pro",
-        resolve: "opencode/gemini-3.1-pro",
+        resolve: "opencode/gemini-4-argon",
         effort: ["low", "medium", "high"],
-        openRouterResolve: "openrouter/google/gemini-3.1-pro-preview"
+        openRouterResolve: "openrouter/google/gemini-4-argon"
         // Inherit — see google/gemini-pro for rationale.
       },
       "gemini-flash": {
@@ -104647,8 +104648,8 @@ var providers = {
       },
       "gemini-pro": {
         displayName: "Gemini Pro",
-        resolve: "vercel/google/gemini-3.1-pro-preview",
-        effort: ["low", "high"]
+        resolve: "vercel/google/gemini-4-argon",
+        effort: ["low", "medium", "high"]
       },
       "gemini-flash": {
         displayName: "Gemini Flash",
@@ -104867,6 +104868,13 @@ if (!defaultProxyAlias?.openRouterResolve) {
 }
 var DEFAULT_PROXY_MODEL = defaultProxyAlias.openRouterResolve;
 var defaultProxyDisplayName = defaultProxyAlias.displayName;
+var trialProxyAlias = resolveDisplayAlias("openai/gpt-luna");
+if (!trialProxyAlias?.openRouterResolve) {
+  throw new Error("TRIAL_PROXY_MODEL: openai/gpt-luna has no openRouterResolve");
+}
+var TRIAL_PROXY_MODEL = trialProxyAlias.openRouterResolve;
+var TRIAL_PROXY_DISPLAY_NAME = trialProxyAlias.displayName;
+var TRIAL_FUNDED_USD_LIMIT = 10;
 for (const [name, ladder] of Object.entries({ ...PROVIDER_LADDERS, router: ROUTER_LADDER })) {
   const terminal = /* @__PURE__ */ new Set();
   for (const slug2 of Object.values(ladder)) {
@@ -105574,6 +105582,8 @@ var PROVIDER_ERROR_PATTERNS = [
   },
   // OpenAI's `You have no credits remaining` (#1474).
   { regex: /no credits remaining/i, label: PROVIDER_BILLING_EXHAUSTED_LABEL },
+  // Codex on a ChatGPT workspace: `Your workspace is out of credits. Add credits to continue.`
+  { regex: /workspace is out of credits/i, label: PROVIDER_BILLING_EXHAUSTED_LABEL },
   { regex: /credit balance is too low/i, label: PROVIDER_BILLING_EXHAUSTED_LABEL },
   // "spending cap" (Gemini) and "spending limit" (xAI, #1076) are the same
   // condition in two house styles — a configured ceiling was reached.
@@ -105603,6 +105613,9 @@ var PROVIDER_ERROR_PATTERNS = [
   // succeeds" while the same log held nine of these. Measured on a live account
   // whose ChatGPT subscription was capped.
   { regex: /\bthe usage limit has been reached\b/i, label: PROVIDER_USAGE_LIMIT_LABEL },
+  // the Codex CLI's wording for the same capped plan: `You’ve hit your usage limit. … try
+  // again at 7:58 AM.` Claude's `hit your session limit` names its window and stays out.
+  { regex: /\bhit your usage limit\b/i, label: PROVIDER_USAGE_LIMIT_LABEL },
   // the OpenRouter shapes `isRouterKeylimitExhaustedError` matches. on a Router
   // run those mean the PULLFROG wallet is empty and `renderRunError` returns a
   // `BillingError` before ever reaching this list; on a BYOK run the very same
@@ -105707,7 +105720,8 @@ function isProviderMissingCredential(text) {
   return /API key is missing\. Pass it using the/i.test(text) || /Missing Authentication header/i.test(text);
 }
 function isTransientUpstreamError(text) {
-  return /API Error:\s*5\d\d/i.test(text) || /\bOverloaded\b/.test(text) || /"error_type"\s*:\s*"(?:provider_unavailable|timeout)"/i.test(text) || /Streaming response failed:\s*\[5\d\d\]/i.test(text);
+  return /API Error:\s*5\d\d/i.test(text) || /\bOverloaded\b/.test(text) || /"error_type"\s*:\s*"(?:provider_unavailable|timeout)"/i.test(text) || /Streaming response failed:\s*\[5\d\d\]/i.test(text) || // the Codex CLI's `Selected model is at capacity. Please try a different model.`
+  /\bmodel is at capacity\b/i.test(text);
 }
 function extractProviderId(text) {
   const match3 = text.match(/\bproviderID=([a-z0-9_-]+)/i);
@@ -105768,7 +105782,7 @@ var import_semver = __toESM(require_semver2(), 1);
 // package.json
 var package_default = {
   name: "pullfrog",
-  version: "0.1.99",
+  version: "0.1.101",
   cliContractVersion: "1",
   type: "module",
   bin: {
@@ -110267,9 +110281,20 @@ var SUBSCRIPTION_DATA_DIR_STATE = "subscription_data_dir";
 
 // utils/secretCommands.ts
 var core3 = __toESM(require_core(), 1);
+var masked = /* @__PURE__ */ new Set();
 function maskSecret(value2) {
+  masked.add(value2);
   if (isGitHubActions) core3.setSecret(value2);
 }
+function redactSecrets(text) {
+  let redacted = text;
+  for (const value2 of masked) {
+    for (const part of [value2, ...value2.split("\n").map((line) => line.trim())]) {
+      if (part.length >= 8) redacted = redacted.replaceAll(part, "***");
+    }
+  }
+  return redacted;
+}
 function saveSecretState(name, value2) {
   if (isGitHubActions) core3.saveState(name, value2);
 }
@@ -189091,7 +189116,7 @@ function formatModelLabel(params) {
   }
   const base = alias?.isFree ? `\`${modelName}\` (free)` : `\`${modelName}\``;
   if (params.clamped?.reason === "trial") {
-    return `${base} (model usage covered by Pullfrog)`;
+    return `${base} (free trial credits)`;
   }
   if (params.clamped) {
     const target = isAutoTier(params.clamped.from) ? "the intelligent tier" : `\`${resolveDisplayAlias(params.clamped.from)?.displayName ?? params.clamped.from}\``;
@@ -189102,13 +189127,14 @@ function formatModelLabel(params) {
   }
   return base;
 }
-function buildTrialDisclosure(owner) {
-  const consoleUrl = owner ? `https://pullfrog.com/console/${owner}` : "https://pullfrog.com/console";
+function buildTrialDisclosure(params) {
+  const consoleUrl = params.owner ? `https://pullfrog.com/console/${params.owner}#billing` : "https://pullfrog.com/console";
+  const left = params.creditsLeftUsd === void 0 ? "" : ` ($${Math.max(0, params.creditsLeftUsd).toFixed(2)} of $${TRIAL_FUNDED_USD_LIMIT} left)`;
   return [
     "---",
     "",
     "> [!IMPORTANT]",
-    `> **Pullfrog covered this run's model usage.** \`DeepSeek Flash\` is fast and cheap \u2014 expect lighter work than a frontier model. This model allowance is temporary and separate from your Pullfrog plan. [Connect a model-provider subscription or API key \u2192](${consoleUrl})`
+    `> **This run used your free trial credits**${left} on \`${TRIAL_PROXY_DISPLAY_NAME}\`, a fast, lightweight model. [Connect a provider \u2192](${consoleUrl}) to run the model you choose.`
   ].join("\n");
 }
 function buildPullfrogFooter(params) {
@@ -189131,13 +189157,13 @@ function buildPullfrogFooter(params) {
       `Using ${formatModelLabel({
         model: params.model,
         clamped: params.clamped,
-        unselectedProxyDefault: params.unselectedProxyDefault,
+        unselectedProxyDefault: params.unselectedProxyDefault && !params.failed,
         oss: params.oss
       })}`
     );
   }
-  const allParts = [...parts, "[\u{1D54F}](https://x.com/pullfrogai)"];
-  const disclosure = params.clamped?.reason === "trial" ? `${buildTrialDisclosure(params.owner)}
+  const allParts = params.failed ? parts : [...parts, "[\u{1D54F}](https://x.com/pullfrogai)"];
+  const disclosure = params.clamped?.reason === "trial" && !params.failed ? `${buildTrialDisclosure({ owner: params.owner, creditsLeftUsd: params.clamped.creditsLeftUsd })}
 
 ` : "";
   return `
@@ -189315,7 +189341,8 @@ async function fetchRunContext(params) {
       credentialAccess: data.credentialAccess,
       secretsUnavailable: data.secretsUnavailable,
       routerUnfunded: data.routerUnfunded,
-      trialFallback: data.trialFallback
+      trialFallback: data.trialFallback,
+      trialCreditsLeftUsd: data.trialCreditsLeftUsd
     };
   } catch {
     clearTimeout(timeoutId);
@@ -189429,6 +189456,9 @@ function aggregateUsage(entries) {
   return out;
 }
 
+// utils/leapingComment.ts
+var TODO_SPINNER_URL = "https://uploads.pullfrog.com/Progress%20Indicator.gif";
+
 // mcp/comment.ts
 function isNotFoundError(error49) {
   return error49 instanceof Error && error49.message.includes("Not Found");
@@ -191540,7 +191570,7 @@ function mirrorRolePermissions(role) {
     case "maintain":
     case "write":
     case "triage":
-      return { contents: "read", issues: "write", pull_requests: "write" };
+      return { checks: "read", contents: "read", issues: "write", pull_requests: "write" };
     case "read":
     case "none":
     case void 0:
@@ -194209,6 +194239,40 @@ function subagentDeniedToolNames(ctx, outputSchema) {
   return names;
 }
 
+// utils/failureBody.ts
+function renderFailure(params) {
+  const blocks = [
+    params.detail ? `**${params.headline}** ${params.detail}` : `**${params.headline}**`
+  ];
+  if (params.list) blocks.push(params.list.map((item) => `- ${item}`).join("\n"));
+  if (params.error) blocks.push(fenced(params.error));
+  if (params.details) {
+    blocks.push(
+      `<details><summary>${params.details.summary}</summary>
+
+${fenced(params.details.text)}
+
+</details>`
+    );
+  }
+  if (params.links?.length) {
+    blocks.push(params.links.map((link) => `[${link.label} \u2192](${link.url})`).join(" \xB7 "));
+  }
+  return blocks.join("\n\n");
+}
+function fenced(text) {
+  let longest = 0;
+  for (const match3 of text.matchAll(/`+/g)) longest = Math.max(longest, match3[0].length);
+  const fence = "`".repeat(Math.max(3, longest + 1));
+  return `${fence}
+${text}
+${fence}`;
+}
+var DISCORD_LINK = {
+  label: "Ask in Discord",
+  url: "https://discord.gg/8y96raFg8e"
+};
+
 // utils/providerDashboards.ts
 var PROVIDER_DASHBOARDS = {
   anthropic: {
@@ -194319,134 +194383,145 @@ var PROVIDER_DASHBOARDS = {
 };
 
 // utils/apiKeys.ts
-var MISSING_KEY_MARKER = "no API key found";
-var BYOK_SLUG_MARKER = "env var is required when the model is set to";
-var BYOK_CONFIG_MARKER = "selected but required configuration is missing:";
+var MISSING_KEY_MARKER = "No API key found";
+var BYOK_SLUG_MARKER = "must be set when the model is";
+var BYOK_CONFIG_MARKER = "is missing required settings:";
 var BYOK_SETUP_PATTERN = new RegExp(
-  `^(?:[A-Z][A-Z0-9_]+ ${BYOK_SLUG_MARKER}|[A-Z][\\w-]*(?: [\\w-]+){0,3} ${BYOK_CONFIG_MARKER})`
+  `^(?:\`[A-Z][A-Z0-9_]+\` ${BYOK_SLUG_MARKER}|[A-Z][\\w-]*(?: [\\w-]+){0,3} ${BYOK_CONFIG_MARKER})`
 );
 function isByokSetupError(text) {
   return BYOK_SETUP_PATTERN.test(text);
 }
-var SECRETS_UNAVAILABLE_MARKER = "couldn't load your Pullfrog secrets";
-var ROUTER_UNFUNDED_MARKER = "your Pullfrog Router balance is empty";
+var SECRETS_UNAVAILABLE_MARKER = "couldn't load your stored secrets";
+var ROUTER_UNFUNDED_MARKER = "Your Pullfrog Router balance is empty";
+var TRIAL_SPENT_MARKER = "reached the limit of your free trial credits";
+function buildTrialSpentError(params) {
+  return renderFailure({
+    headline: `You've ${TRIAL_SPENT_MARKER}.`,
+    detail: `Your $${TRIAL_FUNDED_USD_LIMIT} of trial usage credits have been used up, so you'll need to connect a provider to continue using Pullfrog.`,
+    links: [providerLink(params.owner)]
+  });
+}
+function repoConsoleUrl(repo) {
+  return `${getApiUrl()}/console/${repo.owner}/${repo.name}`;
+}
+function pickModelLink(repo) {
+  return { label: "Pick another model", url: repoConsoleUrl(repo) };
+}
+function providerLink(owner) {
+  return { label: "Connect a provider", url: `${getApiUrl()}/console/${owner}#billing` };
+}
 var CREDENTIAL_REJECTED_MARKER = "was rejected by its provider";
 var CREDENTIAL_POOL_REFUSED_MARKER = "No configured credential can serve this run";
 var NoUsableCredentialError = class extends Error {
 };
 function throwKeyError(params) {
-  if (params.secretsUnavailable) throw new Error(buildSecretsUnavailableError(params));
+  if (params.secretsUnavailable) throw new Error(buildSecretsUnavailableError());
   if (params.routerUnfunded) throw new NoUsableCredentialError(buildRouterUnfundedError(params));
   throw new NoUsableCredentialError(buildMissingApiKeyError(params));
 }
 function buildRouterUnfundedError(params) {
-  const billingUrl = `${getApiUrl()}/console/${params.owner}#billing`;
-  const settingsUrl = `${getApiUrl()}/console/${params.owner}/${params.name}`;
-  const modelClause = params.model ? ` \`${params.model}\` never ran.` : " the agent never ran.";
-  return [
-    `**${ROUTER_UNFUNDED_MARKER}**, and this repo has no provider key to fall back on, so${modelClause}`,
-    "",
-    "**To fix, any one of:** add a payment method or top up your Router balance \xB7 add a provider API key (GitHub Actions secret or Pullfrog secret) \xB7 switch this repo to a free model.",
-    "",
-    `[Top up Router \u2192](${billingUrl}) \xB7 [Model settings \u2192](${settingsUrl}) \xB7 [Setup docs \u2192](https://docs.pullfrog.com/keys) \xB7 [Ask in Discord \u2192](https://discord.gg/8y96raFg8e)`
-  ].join("\n");
+  return renderFailure({
+    headline: `${ROUTER_UNFUNDED_MARKER}, and this repo has no API key to fall back on.`,
+    detail: "Add Router credit, or connect your own provider key or subscription.",
+    links: [
+      { label: "Billing and providers", url: `${getApiUrl()}/console/${params.owner}#billing` }
+    ]
+  });
 }
-function buildSecretsUnavailableError(params) {
-  const settingsUrl = `${getApiUrl()}/console/${params.owner}/${params.name}`;
-  const modelClause = params.model ? ` needed for \`${params.model}\`` : "";
-  return [
-    `**Pullfrog ${SECRETS_UNAVAILABLE_MARKER}${modelClause} on this run.** The key is still stored \u2014 the runner just couldn't fetch it, so this is a transient failure on our side, not a missing key.`,
-    "",
-    "**To fix:** re-run the job. If it keeps happening, tell us in Discord.",
-    "",
-    `[Model settings \u2192](${settingsUrl}) \xB7 [Setup docs \u2192](https://docs.pullfrog.com/keys) \xB7 [Ask in Discord \u2192](https://discord.gg/8y96raFg8e)`
-  ].join("\n");
+function buildSecretsUnavailableError() {
+  return renderFailure({
+    headline: `Pullfrog ${SECRETS_UNAVAILABLE_MARKER} for this run.`,
+    detail: "They're still saved; this is a temporary failure on our side. Re-trigger to try again, and tell us in Discord if it keeps happening.",
+    links: [DISCORD_LINK]
+  });
 }
 function buildMissingApiKeyError(params) {
-  const githubSecretsUrl = `https://github.com/${params.owner}/${params.name}/settings/secrets/actions`;
-  const settingsUrl = `${getApiUrl()}/console/${params.owner}/${params.name}`;
   const envVars = params.model?.includes("/") ? getModelEnvVars(params.model) : [];
   const [primary, ...alternates] = envVars;
   const envVarList = primary ? `\`${primary}\`${alternates.length > 0 ? ` (or ${alternates.map((v) => `\`${v}\``).join(" / ")})` : ""}` : void 0;
-  const lead = envVarList ? `**${MISSING_KEY_MARKER}** \u2014 this run used \`${params.model}\`, which needs ${envVarList}, but the runner has no key for it.` : `**${MISSING_KEY_MARKER}** \u2014 Pullfrog needs at least one LLM provider API key (e.g. \`ANTHROPIC_API_KEY\`, \`OPENAI_API_KEY\`, \`GEMINI_API_KEY\`) configured as a GitHub Actions secret.`;
+  const alias = params.model ? resolveDisplayAlias(params.model) ?? modelAliases.find((a) => !a.fallback && a.resolve === params.model) : void 0;
+  const modelName = params.model ? alias?.displayName ?? `\`${params.model}\`` : void 0;
   const unhosted = params.model?.includes("/") ? getModelManagedCredentials(params.model).find((name) => unhostedSubscriptions.has(name)) : void 0;
-  const fix = unhosted ? `**To fix:** your ${SUBSCRIPTION_CREDENTIALS[unhosted]?.label} is stored, but this runner has no passwordless \`sudo\`, which Pullfrog needs to keep it in \`${PULLFROG_DATA_DIR}\`, out of the agent's reach. Allow passwordless \`sudo\` for the runner user, run on a GitHub-hosted runner, or add an API key as a GitHub Actions secret or a Pullfrog secret.` : "**To fix:** add the key as a GitHub Actions secret (referenced from your workflow's `env:` block) or as a Pullfrog secret in the console \u2014 or switch this repo to a different model (free models need no key).";
+  const detail = unhosted ? `Your ${SUBSCRIPTION_CREDENTIALS[unhosted]?.label} is stored, but this runner has no passwordless \`sudo\`, which Pullfrog needs to keep it in \`${PULLFROG_DATA_DIR}\`, out of the agent's reach. Allow passwordless \`sudo\` for the runner user, run on a GitHub-hosted runner, or add an API key.` : envVarList ? `It needs ${envVarList}. Connect it in Pullfrog or add it as a GitHub Actions secret, or pick a model you already have a key for.` : "Pullfrog needs a key or subscription for at least one model provider. Connect one in Pullfrog, or add a key as a GitHub Actions secret.";
+  return renderFailure({
+    headline: envVarList && modelName ? `${MISSING_KEY_MARKER} for ${modelName}.` : `${MISSING_KEY_MARKER}.`,
+    detail,
+    links: [providerLink(params.owner), pickModelLink(params)]
+  });
+}
+function buildSetupError(params) {
+  const missing = params.missing.map((name) => `\`${name}\``).join(", ");
   return [
-    lead,
-    "",
-    fix,
-    "",
-    `[Open repo secrets \u2192](${githubSecretsUrl}) \xB7 [Configure model \u2192](${settingsUrl}) \xB7 [Setup docs \u2192](https://docs.pullfrog.com/keys) \xB7 [Ask in Discord \u2192](https://discord.gg/8y96raFg8e)`
-  ].join("\n");
+    `${params.provider} ${BYOK_CONFIG_MARKER} ${missing}. ${params.where}`,
+    `\`\`\`yaml
+${params.env.join("\n")}
+\`\`\``,
+    `${params.note ? `${params.note} ` : ""}[${params.provider} setup guide](${params.guide})`
+  ].join("\n\n");
+}
+function secretsUrl(params) {
+  return `https://github.com/${params.owner}/${params.name}/settings/secrets/actions`;
 }
 function buildBedrockSetupError(params) {
-  const githubSecretsUrl = `https://github.com/${params.owner}/${params.name}/settings/secrets/actions`;
-  return `Bedrock model ${BYOK_CONFIG_MARKER} ${params.missing.join(", ")}.
-
-add the missing secret(s) to your GitHub repository at ${githubSecretsUrl}, then reference them in your workflow's \`env:\` block:
-
-  AWS_BEARER_TOKEN_BEDROCK: \${{ secrets.AWS_BEARER_TOKEN_BEDROCK }}
-  AWS_REGION: \${{ secrets.AWS_REGION }}
-  ${BEDROCK_MODEL_ID_ENV}: \${{ secrets.${BEDROCK_MODEL_ID_ENV} }}
-
-\`AWS_BEARER_TOKEN_BEDROCK\` may be substituted with \`AWS_ACCESS_KEY_ID\` + \`AWS_SECRET_ACCESS_KEY\` (and optional \`AWS_SESSION_TOKEN\`) if you prefer access keys.
-
-for full setup instructions, see https://docs.pullfrog.com/bedrock`;
+  return buildSetupError({
+    provider: "Amazon Bedrock",
+    missing: params.missing,
+    where: `Add them to [this repo's Actions secrets](${secretsUrl(params)}) and pass them in the workflow's \`env:\` block:`,
+    env: [
+      `AWS_BEARER_TOKEN_BEDROCK: \${{ secrets.AWS_BEARER_TOKEN_BEDROCK }}`,
+      `AWS_REGION: \${{ secrets.AWS_REGION }}`,
+      `${BEDROCK_MODEL_ID_ENV}: \${{ secrets.${BEDROCK_MODEL_ID_ENV} }}`
+    ],
+    note: "`AWS_ACCESS_KEY_ID` and `AWS_SECRET_ACCESS_KEY` (plus `AWS_SESSION_TOKEN` if you use one) can replace the bearer token.",
+    guide: "https://docs.pullfrog.com/bedrock"
+  });
 }
 function buildVertexSetupError(params) {
-  const githubSecretsUrl = `https://github.com/${params.owner}/${params.name}/settings/secrets/actions`;
-  return `Google Vertex AI model ${BYOK_CONFIG_MARKER} ${params.missing.join(", ")}.
-
-add the missing secret(s) to your GitHub repository at ${githubSecretsUrl}, then reference them in your workflow's \`env:\` block:
-
-  ${VERTEX_SERVICE_ACCOUNT_JSON_ENV}: \${{ secrets.${VERTEX_SERVICE_ACCOUNT_JSON_ENV} }}
-  ${GOOGLE_CLOUD_PROJECT_ENV}: my-project
-  ${VERTEX_LOCATION_ENV}: global
-  ${VERTEX_MODEL_ID_ENV}: <vertex-model-id>
-
-for full setup instructions, see https://docs.pullfrog.com/vertex`;
+  return buildSetupError({
+    provider: "Google Vertex AI",
+    missing: params.missing,
+    where: `Add the service account to [this repo's Actions secrets](${secretsUrl(params)}) and set the rest in the workflow's \`env:\` block:`,
+    env: [
+      `${VERTEX_SERVICE_ACCOUNT_JSON_ENV}: \${{ secrets.${VERTEX_SERVICE_ACCOUNT_JSON_ENV} }}`,
+      `${GOOGLE_CLOUD_PROJECT_ENV}: my-project`,
+      `${VERTEX_LOCATION_ENV}: global`,
+      `${VERTEX_MODEL_ID_ENV}: <vertex-model-id>`
+    ],
+    guide: "https://docs.pullfrog.com/vertex"
+  });
 }
 function buildOpenAICompatibleSetupError(params) {
-  const githubSecretsUrl = `https://github.com/${params.owner}/${params.name}/settings/secrets/actions`;
-  return `OpenAI-compatible model ${BYOK_CONFIG_MARKER} ${params.missing.join(", ")}.
-
-only the API key is sensitive \u2014 add it as a secret at ${githubSecretsUrl}. everything else is plain workflow \`env:\`:
-
-  ${OPENAI_COMPATIBLE_BASE_URL_ENV}: https://your-endpoint.example.com/v1
-  ${OPENAI_COMPATIBLE_API_KEY_ENV}: \${{ secrets.${OPENAI_COMPATIBLE_API_KEY_ENV} }}
-  ${OPENAI_COMPATIBLE_MODEL_ENV}: <model-id>
-  ${OPENAI_COMPATIBLE_CONTEXT_ENV}: "128000"
-  ${OPENAI_COMPATIBLE_MAX_OUTPUT_ENV}: "16384"
-
-set the last two to the real limits of the model your endpoint serves. Pullfrog can't
-discover them \u2014 your endpoint owns the model catalog \u2014 and without them completions are
-capped at 32000 tokens (rejected outright by models with a smaller cap) and
-auto-compaction is disabled, so long runs grow until your endpoint refuses them.
-
-for full setup instructions, see https://docs.pullfrog.com/openai-compatible`;
+  return buildSetupError({
+    provider: "OpenAI-compatible endpoint",
+    missing: params.missing,
+    where: `Set them on the OpenAI-compatible provider in [Pullfrog's provider settings](${getApiUrl()}/console/${params.owner}#billing), or in the workflow's \`env:\` block with the key as an [Actions secret](${secretsUrl(params)}):`,
+    env: [
+      `${OPENAI_COMPATIBLE_BASE_URL_ENV}: https://your-endpoint.example.com/v1`,
+      `${OPENAI_COMPATIBLE_API_KEY_ENV}: \${{ secrets.${OPENAI_COMPATIBLE_API_KEY_ENV} }}`,
+      `${OPENAI_COMPATIBLE_MODEL_ENV}: <model-id>`,
+      `${OPENAI_COMPATIBLE_CONTEXT_ENV}: "128000"`,
+      `${OPENAI_COMPATIBLE_MAX_OUTPUT_ENV}: "16384"`
+    ],
+    note: "Use the real context and output limits of the model your endpoint serves: Pullfrog can't discover them, and without them long runs grow until the endpoint refuses them.",
+    guide: "https://docs.pullfrog.com/openai-compatible"
+  });
 }
 function buildAzureSetupError(params) {
-  const githubSecretsUrl = `https://github.com/${params.owner}/${params.name}/settings/secrets/actions`;
-  return `Azure OpenAI ${BYOK_CONFIG_MARKER} ${params.missing.join(", ")}.
-
-only the API key is sensitive \u2014 add it as a secret at ${githubSecretsUrl}. the rest is plain workflow \`env:\`:
-
-  ${AZURE_RESOURCE_NAME_ENV}: <name>
-  ${AZURE_API_KEY_ENV}: \${{ secrets.${AZURE_API_KEY_ENV} }}
-  ${AZURE_DEPLOYMENT_ENV}: <deployment-name>
-  ${AZURE_CONTEXT_ENV}: "400000"
-  ${AZURE_MAX_OUTPUT_ENV}: "128000"
-
-${AZURE_RESOURCE_NAME_ENV} is the \`<name>\` in your endpoint https://<name>.openai.azure.com.
-${AZURE_DEPLOYMENT_ENV} is the name of the deployment, which is not necessarily the name of
-the model it serves \u2014 Azure routes on the deployment name.
-
-set the last two to the real limits of whichever model your deployment serves. Pullfrog can't
-discover them \u2014 a deployment name carries no catalog metadata \u2014 and without them completions
-are capped at 32000 tokens (rejected outright by models with a smaller cap) and auto-compaction
-is disabled, so long runs grow until Azure refuses them.
-
-for full setup instructions, see https://docs.pullfrog.com/azure`;
+  return buildSetupError({
+    provider: "Azure OpenAI",
+    missing: params.missing,
+    where: `Set them on the Azure OpenAI provider in [Pullfrog's provider settings](${getApiUrl()}/console/${params.owner}#billing), or in the workflow's \`env:\` block with the key as an [Actions secret](${secretsUrl(params)}):`,
+    env: [
+      `${AZURE_RESOURCE_NAME_ENV}: <name>`,
+      `${AZURE_API_KEY_ENV}: \${{ secrets.${AZURE_API_KEY_ENV} }}`,
+      `${AZURE_DEPLOYMENT_ENV}: <deployment-name>`,
+      `${AZURE_CONTEXT_ENV}: "400000"`,
+      `${AZURE_MAX_OUTPUT_ENV}: "128000"`
+    ],
+    note: `\`${AZURE_RESOURCE_NAME_ENV}\` is the \`<name>\` in \`https://<name>.openai.azure.com\`, and \`${AZURE_DEPLOYMENT_ENV}\` is the deployment's name, not the model it serves. Use that model's real context and output limits: Pullfrog can't discover them, and without them long runs grow until Azure refuses them.`,
+    guide: "https://docs.pullfrog.com/azure"
+  });
 }
 function hasEnvVar2(name) {
   const value2 = process.env[name];
@@ -194606,7 +194681,7 @@ function isMalformedKeyError(text) {
   return /Header '\d+' has invalid value/i.test(text);
 }
 function isClaudeSubscriptionDisabledError(text) {
-  return /disabled Claude subscription access/i.test(text);
+  return /disabled Claude subscription access/i.test(text) || /OAuth authentication is currently not allowed for this organization/i.test(text);
 }
 function isKimiPlanTierError(text) {
   return /Your current (?:subscription does not have access to|plan supports only)\b/i.test(text);
@@ -194619,138 +194694,179 @@ var SUBSCRIPTION_CREDENTIALS = {
   CLAUDE_CODE_OAUTH_TOKEN: {
     label: "Claude Pro/Max subscription",
     command: "pullfrog auth claude",
-    docs: "https://docs.pullfrog.com/claude-auth"
+    provider: "anthropic"
   },
   CODEX_AUTH_JSON: {
     label: "ChatGPT subscription",
     command: "pullfrog auth codex",
-    docs: "https://docs.pullfrog.com/codex-auth"
+    provider: "openai"
   },
   GROK_AUTH_JSON: {
     label: "Grok subscription",
     command: "pullfrog auth grok",
-    docs: "https://docs.pullfrog.com/grok-auth"
+    provider: "xai"
   }
 };
+function subscriptionFor(model) {
+  const provider2 = model?.split("/")[0];
+  for (const [env2, subscription] of Object.entries(SUBSCRIPTION_CREDENTIALS)) {
+    if (subscription.provider === provider2) return { env: env2, ...subscription };
+  }
+  return void 0;
+}
+var SIGN_IN_AGAIN = (command) => `Sign in again by running \`${command}\` in a terminal`;
+var CLAUDE_ORG_DISABLED = {
+  headline: "Your Claude organization doesn't allow subscription sign-in for Claude Code.",
+  detail: "Ask its admin to allow it in the Claude Console, or connect an Anthropic API key instead."
+};
+function providerDisplayName(id) {
+  for (const [key, provider2] of Object.entries(providers)) {
+    if (key === id) return provider2.displayName;
+  }
+  return void 0;
+}
 function buildRejectedCredentialError(params) {
-  const settingsUrl = `${getApiUrl()}/console/${params.owner}/${params.name}`;
   const subscription = SUBSCRIPTION_CREDENTIALS[params.credential];
-  const detail = params.reason ? ` (\`${params.reason}\`)` : "";
+  const details = params.reason ? { summary: "The provider's response", text: params.reason } : void 0;
   if (subscription) {
-    return [
-      `**Your ${subscription.label} ${CREDENTIAL_REJECTED_MARKER}**${detail}, so the agent never ran.`,
-      "",
-      `**To fix:** re-authenticate with \`${subscription.command}\`. A subscription credential can't be rotated from a provider dashboard \u2014 it has to be re-issued. You can also switch this repo to a model you hold an API key for.`,
-      "",
-      `[Re-authenticate \u2192](${subscription.docs}) \xB7 [Model settings \u2192](${settingsUrl}) \xB7 [Ask in Discord \u2192](https://discord.gg/8y96raFg8e)`
-    ].join("\n");
-  }
-  const where = params.inPullfrogStore ? `[Update it in Pullfrog \u2192](${settingsUrl})` : `[Update the GitHub Actions secret \u2192](https://github.com/${params.owner}/${params.name}/settings/secrets/actions)`;
-  const keysUrl = providerDashboard(params.credential)?.keys;
-  const issue3 = keysUrl ? `[Issue a new key \u2192](${keysUrl}) \xB7 ` : "";
-  return [
-    `**Your \`${params.credential}\` ${CREDENTIAL_REJECTED_MARKER}**${detail}, so the agent never ran.`,
-    "",
-    `**To fix:** issue a new key in your provider dashboard and update the copy Pullfrog uses${params.inPullfrogStore ? " in the console" : " in your repo's GitHub Actions secrets"}.`,
-    "",
-    `${issue3}${where} \xB7 [Model settings \u2192](${settingsUrl}) \xB7 [Setup docs \u2192](https://docs.pullfrog.com/keys) \xB7 [Ask in Discord \u2192](https://discord.gg/8y96raFg8e)`
-  ].join("\n");
-}
-function providerDashboard(credential) {
+    const orgDisabled = params.reason !== void 0 && isClaudeSubscriptionDisabledError(params.reason);
+    return renderFailure({
+      headline: `Your ${subscription.label} ${CREDENTIAL_REJECTED_MARKER}.`,
+      detail: orgDisabled ? `${CLAUDE_ORG_DISABLED.headline} ${CLAUDE_ORG_DISABLED.detail}` : `${SIGN_IN_AGAIN(subscription.command)}, or pick a model you have an API key for.`,
+      details,
+      links: [orgDisabled ? providerLink(params.owner) : pickModelLink(params)]
+    });
+  }
+  const provider2 = credentialProvider(params.credential);
+  const keysUrl = provider2 ? PROVIDER_DASHBOARDS[provider2.id]?.keys : void 0;
+  const update = params.inPullfrogStore ? {
+    label: "Update it in Pullfrog",
+    url: `${getApiUrl()}/console/${params.owner}/${params.name}`
+  } : { label: "Update the Actions secret", url: secretsUrl(params) };
+  return renderFailure({
+    headline: `Your ${provider2 ? `${provider2.displayName} key` : "key"} \`${params.credential}\` ${CREDENTIAL_REJECTED_MARKER}.`,
+    detail: `Issue a new key and update the copy ${params.inPullfrogStore ? "stored in Pullfrog" : "in this repo's GitHub Actions secrets"}.`,
+    details,
+    links: keysUrl ? [{ label: "Issue a new key", url: keysUrl }, update] : [update]
+  });
+}
+function credentialProvider(credential) {
   for (const [id, provider2] of Object.entries(providers)) {
-    if (provider2.envVars.includes(credential)) return PROVIDER_DASHBOARDS[id];
+    if (provider2.envVars.includes(credential)) return { id, displayName: provider2.displayName };
   }
   return void 0;
 }
 function buildCredentialPoolRefusedError(params) {
-  const settingsUrl = `${getApiUrl()}/console/${params.owner}/${params.name}`;
-  return [
-    `**${CREDENTIAL_POOL_REFUSED_MARKER}.** Every credential configured for \`${params.model}\` was rejected or is out of quota, so the agent never ran.`,
-    "",
-    ...params.refused.map(
-      (credential) => `- ${describeRefusal({ ...params, credential, settingsUrl })}`
-    ),
-    "",
-    `[Model settings \u2192](${settingsUrl}) \xB7 [Ask in Discord \u2192](https://discord.gg/8y96raFg8e)`
-  ].join("\n");
+  const [first = "", second, ...rest] = params.refused.map(
+    (credential) => describeRefusal({ credential, owner: params.owner, name: params.name })
+  );
+  return renderFailure({
+    headline: `${CREDENTIAL_POOL_REFUSED_MARKER}.`,
+    detail: second === void 0 ? first : `Every credential for \`${params.model}\` was turned down:`,
+    list: second === void 0 ? void 0 : [first, second, ...rest],
+    details: {
+      summary: "The providers' responses",
+      text: params.refused.map((credential) => `${credential.name}: ${credential.verdict.detail}`).join("\n")
+    },
+    links: [pickModelLink(params)]
+  });
 }
 function describeRefusal(params) {
   const credential = params.credential;
   const verdict = credential.verdict;
-  const workflow = credential.source === "workflow";
-  const head = `\`${credential.name}\` from ${workflow ? "the workflow" : `${credential.source} scope`}: \`${verdict.detail}\` \u2014`;
   const subscription = SUBSCRIPTION_CREDENTIALS[credential.name];
-  const dashboard = providerDashboard(credential.name);
+  const dashboard = PROVIDER_DASHBOARDS[credentialProvider(credential.name)?.id ?? ""];
+  const what = subscription ? `Your ${subscription.label}` : `Your \`${credential.name}\``;
   if (verdict.status === "exhausted" && subscription) {
-    const wait2 = verdict.resetAt ? `it resets at **${verdict.resetAt.toISOString().slice(0, 16).replace("T", " ")} UTC**; re-trigger after that` : "re-trigger after the limit resets";
-    return `${head} ${wait2}, or add an API key for this provider, which Pullfrog falls back to automatically.`;
+    const reset = verdict.resetAt ? `, which resets at **${verdict.resetAt.toISOString().slice(0, 16).replace("T", " ")} UTC**` : "";
+    return `${what} has hit its usage limit${reset}. Re-trigger after it resets, or add an API key for this provider, which Pullfrog falls back to automatically.`;
+  }
+  if (verdict.status === "exhausted") {
+    return `${what} is out of credit or quota. ${dashboard ? `[Add credit](${dashboard.billing})` : "Add credit"} with the provider, or raise its quota.`;
   }
-  if (verdict.status === "exhausted")
-    return `${head} add credit or raise its quota with the provider.${dashboard ? ` [Top up \u2192](${dashboard.billing})` : ""}`;
-  if (subscription)
-    return `${head} re-authenticate with \`${subscription.command}\`, or switch this repo to a model you hold an API key for. [Re-authenticate \u2192](${subscription.docs})`;
-  const where = workflow ? `[Update the GitHub Actions secret \u2192](https://github.com/${params.owner}/${params.name}/settings/secrets/actions)` : `[Update it in Pullfrog \u2192](${params.settingsUrl})`;
-  const issue3 = dashboard?.keys ? `[Issue a new key \u2192](${dashboard.keys}) \xB7 ` : "";
-  return `${head} issue a new key and update the copy Pullfrog uses. ${issue3}${where}`;
+  if (subscription && isClaudeSubscriptionDisabledError(verdict.detail)) {
+    return `${CLAUDE_ORG_DISABLED.headline} ${CLAUDE_ORG_DISABLED.detail}`;
+  }
+  if (subscription) return `${what} was rejected. ${SIGN_IN_AGAIN(subscription.command)}.`;
+  const issue3 = dashboard?.keys ? `[Issue a new key](${dashboard.keys})` : "Issue a new key";
+  const where = credential.source === "workflow" ? `in [this repo's GitHub Actions secrets](${secretsUrl(params)})` : `in [Pullfrog](${getApiUrl()}/console/${params.owner}#billing)`;
+  return `${what} was rejected. ${issue3} and update it ${where}.`;
 }
 function formatApiKeyErrorSummary(params) {
   if (params.raw.includes(MISSING_KEY_MARKER)) {
-    if (params.raw.startsWith(`**${MISSING_KEY_MARKER}**`)) return params.raw;
+    if (params.raw.startsWith(`**${MISSING_KEY_MARKER}`)) return params.raw;
     return buildMissingApiKeyError({ owner: params.owner, name: params.name });
   }
-  const githubSecretsUrl = `https://github.com/${params.owner}/${params.name}/settings/secrets/actions`;
-  const settingsUrl = `${getApiUrl()}/console/${params.owner}/${params.name}`;
+  const details = params.output ? { summary: "The provider's response", text: params.output } : void 0;
+  const subscription = subscriptionFor(params.model);
   if (isClaudeSessionLimitError(params.raw)) {
     const reset = CLAUDE_SESSION_LIMIT_PATTERN.exec(params.raw)?.[1]?.trim();
-    const resets = reset ? ` It resets at **${reset}**.` : "";
-    return [
-      `**Your Claude subscription has hit its usage limit.**${resets} Re-trigger Pullfrog after the reset, or add an \`ANTHROPIC_API_KEY\` repo secret \u2014 Pullfrog routes around an exhausted subscription automatically when one is present.`,
-      "",
-      `[Add repo secret \u2192](${githubSecretsUrl}) \xB7 [Model settings \u2192](${settingsUrl}) \xB7 [Setup docs \u2192](https://docs.pullfrog.com/keys) \xB7 [Ask in Discord \u2192](https://discord.gg/8y96raFg8e)`
-    ].join("\n");
+    return renderFailure({
+      headline: "Your Claude Pro/Max subscription has hit its usage limit.",
+      detail: `${reset ? `It resets at **${reset}**. ` : ""}Re-trigger after that, or connect an Anthropic API key, which Pullfrog falls back to automatically.`,
+      details,
+      links: [providerLink(params.owner)]
+    });
   }
   if (isMalformedKeyError(params.raw)) {
-    return [
-      "**Your stored API key can't be sent as an HTTP header.** It contains a line break or control character \u2014 usually a key pasted across several lines. Re-save it as a single line; the key itself is likely fine.",
-      "",
-      `[Pullfrog secrets \u2192](${getApiUrl()}/console/${params.owner}) \xB7 [Repo secrets \u2192](${githubSecretsUrl}) \xB7 [Ask in Discord \u2192](https://discord.gg/8y96raFg8e)`
-    ].join("\n");
+    return renderFailure({
+      headline: "Your stored API key can't be sent as an HTTP header.",
+      detail: "It contains a line break or control character, usually from a key pasted across several lines. Re-save it as a single line; the key itself is likely fine.",
+      links: [
+        {
+          label: "Pullfrog provider settings",
+          url: `${getApiUrl()}/console/${params.owner}#billing`
+        },
+        { label: "GitHub Actions secrets", url: secretsUrl(params) }
+      ]
+    });
   }
   if (isClaudeSubscriptionDisabledError(params.raw)) {
-    return [
-      `**Your organization has disabled Claude subscription access for Claude Code.** Ask your Claude organization's admin to re-enable it in the Claude Console, or set an \`ANTHROPIC_API_KEY\` for this repo instead, then re-trigger the run.`,
-      "",
-      `[Add repo secret \u2192](${githubSecretsUrl}) \xB7 [Model settings \u2192](${settingsUrl}) \xB7 [Setup docs \u2192](https://docs.pullfrog.com/keys) \xB7 [Ask in Discord \u2192](https://discord.gg/8y96raFg8e)`
-    ].join("\n");
+    return renderFailure({
+      ...CLAUDE_ORG_DISABLED,
+      details,
+      links: [providerLink(params.owner)]
+    });
   }
   if (isKimiPlanTierError(params.raw)) {
-    return [
-      "**Your Kimi membership doesn't include the model this run asked for.** Kimi K3 needs a Moderato plan or above, and K3's 1M context and Kimi K2 HighSpeed need Allegretto or above. Upgrade the membership, or switch this repo to **Kimi K2**, which every tier includes.",
-      "",
-      `[Kimi plans \u2192](https://www.kimi.com/membership/pricing) \xB7 [Model settings \u2192](${settingsUrl}) \xB7 [Setup docs \u2192](https://docs.pullfrog.com/kimi-code) \xB7 [Ask in Discord \u2192](https://discord.gg/8y96raFg8e)`
-    ].join("\n");
+    return renderFailure({
+      headline: "Your Kimi membership doesn't include the model this run asked for.",
+      detail: "Kimi K3 needs a Moderato plan or above, and K3's 1M context and Kimi K2 HighSpeed need Allegretto or above. Upgrade the membership, or switch this repo to **Kimi K2**, which every tier includes.",
+      details,
+      links: [
+        { label: "Kimi plans", url: "https://www.kimi.com/membership/pricing" },
+        pickModelLink(params)
+      ]
+    });
   }
   if (isOAuthCredentialExpiredError(params.raw)) {
-    return [
-      `**Your provider OAuth credential has expired or been revoked.** Re-authenticate the provider connection (e.g. \`pullfrog auth claude\` / \`pullfrog auth codex\` / \`pullfrog auth grok\`), then re-trigger the run.`,
-      "",
-      `[Claude subscription \u2192](https://docs.pullfrog.com/claude-auth) \xB7 [ChatGPT subscription \u2192](https://docs.pullfrog.com/codex-auth) \xB7 [Model settings \u2192](${settingsUrl}) \xB7 [Ask in Discord \u2192](https://discord.gg/8y96raFg8e)`
-    ].join("\n");
-  }
-  const subscription = Object.keys(SUBSCRIPTION_CREDENTIALS).find(hasEnvVar2);
-  if (subscription && !hasEnvVar2("ANTHROPIC_API_KEY")) {
-    const details = SUBSCRIPTION_CREDENTIALS[subscription];
-    return [
-      `**Your ${details?.label} was rejected during this run.** Re-authenticate with \`${details?.command}\` and re-trigger \u2014 a subscription credential can't be rotated from a provider dashboard.`,
-      "",
-      `[Re-authenticate \u2192](${details?.docs}) \xB7 [Model settings \u2192](${settingsUrl}) \xB7 [Ask in Discord \u2192](https://discord.gg/8y96raFg8e)`
-    ].join("\n");
-  }
-  return [
-    `**Your LLM provider API key was rejected.** Rotate the key in your provider dashboard, then update the copy Pullfrog uses \u2014 wherever you saved it.`,
-    "",
-    `[Pullfrog secrets \u2192](${getApiUrl()}/console/${params.owner}) \xB7 [Repo secrets \u2192](${githubSecretsUrl}) \xB7 [Model settings \u2192](${settingsUrl}) \xB7 [Setup docs \u2192](https://docs.pullfrog.com/keys) \xB7 [Ask in Discord \u2192](https://discord.gg/8y96raFg8e)`
-  ].join("\n");
+    return renderFailure({
+      headline: subscription ? `Your ${subscription.label}'s sign-in has expired or been revoked.` : "Your provider sign-in has expired or been revoked.",
+      detail: subscription ? `${SIGN_IN_AGAIN(subscription.command)}, then re-trigger.` : "Sign in again with `pullfrog auth claude`, `pullfrog auth codex` or `pullfrog auth grok` in a terminal, whichever this repo uses, then re-trigger.",
+      details,
+      links: [pickModelLink(params)]
+    });
+  }
+  if (subscription && hasEnvVar2(subscription.env) && params.credential !== "api_key") {
+    return renderFailure({
+      headline: `Your ${subscription.label} was rejected during this run.`,
+      detail: `${SIGN_IN_AGAIN(subscription.command)}, then re-trigger.`,
+      details,
+      links: [pickModelLink(params)]
+    });
+  }
+  return renderFailure({
+    headline: `Your ${providerDisplayName(params.model?.split("/")[0]) ?? "model provider"} API key was rejected.`,
+    detail: "Issue a new key with the provider, then update the copy Pullfrog uses, in Pullfrog or in this repo's GitHub Actions secrets.",
+    details,
+    links: [
+      {
+        label: "Pullfrog provider settings",
+        url: `${getApiUrl()}/console/${params.owner}#billing`
+      },
+      { label: "GitHub Actions secrets", url: secretsUrl(params) }
+    ]
+  });
 }
 
 // utils/agent.ts
@@ -194776,7 +194892,7 @@ function resolveSlug(slug2) {
     const bedrockId = process.env[BEDROCK_MODEL_ID_ENV]?.trim();
     if (!bedrockId) {
       throw new Error(
-        `${BEDROCK_MODEL_ID_ENV} ${BYOK_SLUG_MARKER} "${slug2}". set it to an AWS Bedrock model ID from the Bedrock console. see https://docs.pullfrog.com/bedrock for setup.`
+        `\`${BEDROCK_MODEL_ID_ENV}\` ${BYOK_SLUG_MARKER} \`${slug2}\`. Set it in the workflow's \`env:\` block to a Bedrock model ID from the AWS console. [Amazon Bedrock setup guide](https://docs.pullfrog.com/bedrock)`
       );
     }
     return bedrockId;
@@ -194785,7 +194901,7 @@ function resolveSlug(slug2) {
     const vertexId = process.env[VERTEX_MODEL_ID_ENV]?.trim();
     if (!vertexId) {
       throw new Error(
-        `${VERTEX_MODEL_ID_ENV} ${BYOK_SLUG_MARKER} "${slug2}". set it to a Google Vertex AI model ID from Model Garden. see https://docs.pullfrog.com/vertex for setup.`
+        `\`${VERTEX_MODEL_ID_ENV}\` ${BYOK_SLUG_MARKER} \`${slug2}\`. Set it in the workflow's \`env:\` block to a Vertex AI model ID from Model Garden. [Google Vertex AI setup guide](https://docs.pullfrog.com/vertex)`
       );
     }
     return vertexId;
@@ -194794,7 +194910,7 @@ function resolveSlug(slug2) {
     const deployment = process.env[AZURE_DEPLOYMENT_ENV]?.trim();
     if (!deployment) {
       throw new Error(
-        `${AZURE_DEPLOYMENT_ENV} ${BYOK_SLUG_MARKER} "${slug2}". set it to the name of your Azure OpenAI deployment (not the model it serves \u2014 Azure routes on the deployment name). see https://docs.pullfrog.com/azure for setup.`
+        `\`${AZURE_DEPLOYMENT_ENV}\` ${BYOK_SLUG_MARKER} \`${slug2}\`. Set it to your deployment's name, not the model it serves, on the Azure OpenAI provider in Pullfrog or in the workflow's \`env:\` block. [Azure OpenAI setup guide](https://docs.pullfrog.com/azure)`
       );
     }
     return `${AZURE_PROVIDER}/${deployment}`;
@@ -194803,7 +194919,7 @@ function resolveSlug(slug2) {
     const modelId = process.env[OPENAI_COMPATIBLE_MODEL_ENV]?.trim();
     if (!modelId) {
       throw new Error(
-        `${OPENAI_COMPATIBLE_MODEL_ENV} ${BYOK_SLUG_MARKER} "${slug2}". set it to the model ID served by your OpenAI-compatible endpoint (e.g. a Cloudflare AI Gateway or DashScope model). see https://docs.pullfrog.com/openai-compatible for setup.`
+        `\`${OPENAI_COMPATIBLE_MODEL_ENV}\` ${BYOK_SLUG_MARKER} \`${slug2}\`. Set it to the model ID your endpoint serves, on the OpenAI-compatible provider in Pullfrog or in the workflow's \`env:\` block. [OpenAI-compatible setup guide](https://docs.pullfrog.com/openai-compatible)`
       );
     }
     return `${OPENAI_COMPATIBLE_PROVIDER}/${modelId}`;
@@ -194875,9 +194991,12 @@ var BillingError = class extends Error {
   }
 };
 var TransientError = class extends Error {
-  constructor(message2) {
+  /** the customer-facing follow-up to `message`, which is the headline. */
+  detail;
+  constructor(message2, detail = "This is on our side, and nothing was billed. The next run should succeed; if it keeps failing, check [status.pullfrog.com](https://status.pullfrog.com).") {
     super(message2);
     this.name = "TransientError";
+    this.detail = detail;
   }
 };
 function billingConsoleUrl(owner) {
@@ -194912,41 +195031,34 @@ function formatCommercialGateSummary(params) {
   });
 }
 function formatBillingErrorSummary(error49, owner) {
+  const billing = { label: "Add credit", url: billingConsoleUrl(owner) };
   if (error49.code === "router_requires_card") {
-    return [
-      "**Your Pullfrog Router balance is empty.**",
-      "",
-      "Add a card to top up your Router balance, or bring your own key. Router usage is billed at provider cost with no platform markup.",
-      "",
-      `[Add a card to top up \u2192](${billingConsoleUrl(owner)}) \xB7 [Bring your own key \u2192](${billingConsoleUrl(owner)})`
-    ].join("\n");
+    return renderFailure({
+      headline: "Your Pullfrog Router balance is empty.",
+      detail: "Add a card to top it up, or connect your own provider key. Router usage is billed at provider cost with no markup.",
+      links: [{ label: "Billing and providers", url: billingConsoleUrl(owner) }]
+    });
   }
   if (error49.code === "router_balance_exhausted") {
-    return [
-      "**Your Pullfrog Router balance is exhausted.**",
-      "",
-      "You have a payment method on file but auto-reload is disabled, so runs paused once your balance went past the overdraft buffer.",
-      "",
-      `[Top up balance \u2192](${billingConsoleUrl(owner)}) \xB7 [Enable auto-reload \u2192](${billingConsoleUrl(owner)})`
-    ].join("\n");
+    return renderFailure({
+      headline: "Your Pullfrog Router balance is used up.",
+      detail: "Auto-reload is off, so runs paused once the balance passed its overdraft buffer. Add credit or turn on auto-reload.",
+      links: [billing]
+    });
   }
   if (error49.code === "router_keylimit_exhausted") {
-    return [
-      "**This run was cut short: your Pullfrog Router balance ran out mid-run.**",
-      "",
-      "OpenRouter stopped the agent because the per-run budget was exhausted. Your wallet is now negative; top up or enable auto-reload to keep runs flowing.",
-      "",
-      `[Top up balance \u2192](${billingConsoleUrl(owner)}) \xB7 [Enable auto-reload \u2192](${billingConsoleUrl(owner)})`
-    ].join("\n");
+    return renderFailure({
+      headline: "Your Pullfrog Router balance ran out partway through this run.",
+      detail: "Add credit or turn on auto-reload to keep runs going.",
+      links: [billing]
+    });
   }
   if (error49.code === "router_monthly_limit") {
-    return [
-      "**Pullfrog Router is out of credit, and the monthly spend limit blocks the next auto-reload.**",
-      "",
-      "Top up by hand, ask your admin to raise the cap, or wait for it to reset at 00:00 UTC on the 1st.",
-      "",
-      `[Top up balance \u2192](${billingConsoleUrl(owner)}) \xB7 [Adjust limit \u2192](${billingConsoleUrl(owner)})`
-    ].join("\n");
+    return renderFailure({
+      headline: "Your Pullfrog Router balance is empty, and the monthly spend limit blocks the next auto-reload.",
+      detail: "Add credit by hand, ask an org owner to raise the limit, or wait for it to reset at 00:00 UTC on the 1st.",
+      links: [billing]
+    });
   }
   if (error49.code === "commercial_plan_required") {
     return formatCommercialGateSummary({
@@ -194968,39 +195080,27 @@ function formatBillingErrorSummary(error49, owner) {
   }
   if (error49.needsReauthentication) {
     const code = error49.declineCode ?? "authentication_required";
-    return [
-      `**Your card issuer requires 3D Secure on every charge** (\`${code}\`).`,
-      "",
-      "Pullfrog can't complete a 3DS challenge from inside a workflow. Top up your Router balance once in Stripe Checkout, subsequent runs draw from the prepaid balance without re-triggering 3DS.",
-      "",
-      `[Top up balance \u2192](${billingConsoleUrl(owner)})`
-    ].join("\n");
+    return renderFailure({
+      headline: `Your card issuer requires 3D Secure on every charge (\`${code}\`).`,
+      detail: "Pullfrog can't complete a 3D Secure check from inside a workflow. Add credit once by hand, and later runs draw on that balance without another check.",
+      links: [billing]
+    });
   }
   if (error49.declineCode) {
-    return [
-      `**Your card was declined** (\`${error49.declineCode}\`).`,
-      "",
-      "Update your payment method and Pullfrog will retry on the next run.",
-      "",
-      `[Update payment method \u2192](${billingConsoleUrl(owner)})`
-    ].join("\n");
+    return renderFailure({
+      headline: `Your card was declined (\`${error49.declineCode}\`).`,
+      detail: "Update your payment method, and Pullfrog will retry on the next run.",
+      links: [{ label: "Update payment method", url: billingConsoleUrl(owner) }]
+    });
   }
-  return [
-    "**Your Pullfrog balance is empty.**",
-    "",
-    "Top up your balance or enable auto-reload to keep runs flowing.",
-    "",
-    `[Manage billing \u2192](${billingConsoleUrl(owner)})`
-  ].join("\n");
+  return renderFailure({
+    headline: "Your Pullfrog balance is empty.",
+    detail: "Add credit or turn on auto-reload to keep runs going.",
+    links: [billing]
+  });
 }
-function formatTransientErrorSummary(error49, owner) {
-  return [
-    "**Pullfrog billing is temporarily unavailable.**",
-    "",
-    error49.message,
-    "",
-    `Usually transient; the next dispatch should succeed. If it persists, check [status.pullfrog.com](https://status.pullfrog.com) or [your console](${billingConsoleUrl(owner)}).`
-  ].join("\n");
+function formatTransientErrorSummary(error49) {
+  return renderFailure({ headline: error49.message, detail: error49.detail });
 }
 
 // utils/credentialCheck.ts
@@ -195373,10 +195473,7 @@ var select = mutation({
       signal: ctx.signal
     });
     if (response.status === 404) return null;
-    if (!response.ok)
-      throw new Error("could not load a configured credential; no fallback was charged", {
-        cause: response.status
-      });
+    if (!response.ok) throw new Error(buildSecretsUnavailableError(), { cause: response.status });
     return selectedCredentialSchema.parse(await response.json());
   },
   retry: (error49, attempt) => error49 instanceof Error && typeof error49.cause === "number" && error49.cause >= 400 && error49.cause < 500 ? -1 : delay2([250, 1e3], attempt),
@@ -196190,26 +196287,16 @@ function ossAllowedLabels() {
   return ossFundedModelNames().map((name) => `\`${name}\``).join(", ");
 }
 function buildModelAccessError(input) {
-  const settingsUrl = `${getApiUrl()}/console/${input.owner}/${input.name}`;
-  const secretsUrl = `https://github.com/${input.owner}/${input.name}/settings/secrets/actions`;
-  const docsUrl = "https://docs.pullfrog.com/keys";
-  const headline = `**The ${MODEL_ACCESS_MARKER}: \`${input.model}\`.**`;
-  const branch = {
-    oss: {
-      why: `This repo runs on Pullfrog's OSS subsidy, which funds a set of pre-approved models: ${ossAllowedLabels()}. Pick one of those, or add your own provider key to run a different one.`,
-      cta: `[Configure model \u2192](${settingsUrl}) \xB7 [Add a provider key \u2192](${secretsUrl}) \xB7 [Setup docs \u2192](${docsUrl})`
-    },
-    byok_no_key: {
-      why: `No provider key for \`${input.model}\` is present in this run's environment. Add the matching provider key as a GitHub Actions secret, or pick a model you already have a key for.`,
-      cta: `[Open repo secrets \u2192](${secretsUrl}) \xB7 [Configure model \u2192](${settingsUrl}) \xB7 [Setup docs \u2192](${docsUrl})`
-    },
-    router: {
-      why: "Pullfrog Router can't serve this model. Pick a Router-supported model, or add your own provider key to run it directly.",
-      cta: `[Configure model \u2192](${settingsUrl}) \xB7 [Add a provider key \u2192](${secretsUrl})`
-    }
+  const why = {
+    oss: `This repo runs on Pullfrog's OSS subsidy, which funds a set of pre-approved models: ${ossAllowedLabels()}. Pick one of those, or connect your own provider to run a different one.`,
+    byok_no_key: `This run has no API key for \`${input.model}\`. Connect one, or pick a model you already have a key for.`,
+    router: "Pullfrog Router can't serve this model. Pick a Router-supported model, or connect your own provider to run it directly."
   };
-  const { why, cta } = branch[input.reason];
-  return [headline, "", why, "", cta].join("\n");
+  return renderFailure({
+    headline: `The ${MODEL_ACCESS_MARKER}: \`${input.model}\`.`,
+    detail: why[input.reason],
+    links: [pickModelLink(input), providerLink(input.owner)]
+  });
 }
 
 // utils/overrides.ts
@@ -196766,9 +196853,6 @@ async function revokeGitHubInstallationToken(token) {
 
 // utils/errorReport.ts
 async function reportErrorToComment(ctx) {
-  const formattedError = ctx.title ? `${ctx.title}
-
-${ctx.error}` : ctx.error;
   const repoContext = parseRepoContext();
   const octokit = createOctokit(getGitHubInstallationToken(), getMcpTokenRefresh());
   const runId = process.env.GITHUB_RUN_ID ? Number.parseInt(process.env.GITHUB_RUN_ID, 10) : void 0;
@@ -196787,9 +196871,10 @@ ${ctx.error}` : ctx.error;
     clamped: ctx.toolState.modelClamped,
     unselectedProxyDefault: ctx.toolState.unselectedProxyDefault,
     oss: ctx.toolState.oss,
-    owner: repoContext.owner
+    owner: repoContext.owner,
+    failed: true
   });
-  const body = `${formattedError}${footer}`;
+  const body = `${redactSecrets(ctx.error)}${footer}`;
   const comment = ctx.toolState.progressComment;
   if (comment) {
     await updateProgressComment(
@@ -196829,8 +196914,9 @@ async function mintProxyKey(ctx) {
         const r = await apiFetch({ path: "/api/proxy-token", method: "POST", headers });
         if (r.status >= 500) {
           const body = await r.json().catch(() => null);
+          log.warning(`proxy key mint: ${r.status} ${body?.error ?? ""}`);
           throw new TransientError(
-            body?.error ?? "billing service temporarily unavailable \u2014 retry shortly"
+            "Pullfrog's billing service is temporarily unavailable, so this run didn't start."
           );
         }
         return r;
@@ -196848,7 +196934,8 @@ async function mintProxyKey(ctx) {
     }
     if (response.status === 404) {
       throw new TransientError(
-        "Pullfrog couldn't match this repository to its account \u2014 it may have just been renamed or transferred. The link refreshes automatically on the next run; if it keeps failing, reinstall the GitHub App on the repo's current owner."
+        "Pullfrog couldn't match this repository to its account.",
+        "It may have just been renamed or transferred, and the link refreshes on the next run. If it keeps failing, reinstall the GitHub App on the repository's current owner."
       );
     }
     if (!response.ok) {
@@ -196957,7 +197044,7 @@ async function runProxyResolution(ctx) {
       throw error49;
     }
     if (error49 instanceof TransientError) {
-      const summary3 = formatTransientErrorSummary(error49, ctx.repo.owner);
+      const summary3 = formatTransientErrorSummary(error49);
       await writeSummary(summary3).catch(() => {
       });
       await reportErrorToComment({
@@ -196982,13 +197069,14 @@ async function resolveTrialFallback(ctx) {
   if (!key) return false;
   process.env.OPENROUTER_API_KEY = key;
   maskSecret(key);
-  ctx.payload.proxyModel = DEFAULT_PROXY_MODEL;
-  ctx.toolState.model = DEFAULT_PROXY_MODEL;
+  ctx.payload.proxyModel = TRIAL_PROXY_MODEL;
+  ctx.toolState.model = TRIAL_PROXY_MODEL;
   ctx.toolState.modelClamped = {
-    from: ctx.configuredModel ?? DEFAULT_PROXY_MODEL,
-    reason: "trial"
+    from: ctx.configuredModel ?? TRIAL_PROXY_MODEL,
+    reason: "trial",
+    creditsLeftUsd: ctx.creditsLeftUsd
   };
-  log.info(`\xBB proxy: trial \u2192 ${DEFAULT_PROXY_MODEL}`);
+  log.info(`\xBB proxy: trial \u2192 ${TRIAL_PROXY_MODEL}`);
   return true;
 }
 
@@ -197101,14 +197189,27 @@ ${collapsible}` : output;
         return { success: true, output: ctx.result.output || "" };
       } catch (writeError) {
         const error50 = `failed to deliver agent result: ${getErrorMessage2(writeError)}`;
-        await reportErrorToComment({ toolState, error: error50, title: "Error" }).catch(() => {
+        await reportErrorToComment({
+          toolState,
+          error: renderFailure({
+            headline: "Pullfrog couldn't post its answer to GitHub.",
+            detail: "GitHub refused the write; its error is below. Re-trigger to try again.",
+            error: getErrorMessage2(writeError)
+          })
+        }).catch(() => {
         });
         return { success: false, error: error50, output: ctx.result.output || "" };
       }
     }
     const error49 = ctx.result.error || "agent completed without reporting progress";
     try {
-      await reportErrorToComment({ toolState, error: error49, title: "Error" });
+      await reportErrorToComment({
+        toolState,
+        error: renderFailure({
+          headline: "The agent finished without posting anything.",
+          detail: "Re-trigger to try again."
+        })
+      });
     } catch {
     }
     return { success: false, error: error49, output: ctx.result.output || "" };
@@ -197169,63 +197270,57 @@ async function resolveRunContextData(params) {
     // outcome as the server-side failure: the run never sees stored secrets.
     secretsUnavailable: runContext.secretsUnavailable || !!process.env.ACTIONS_ID_TOKEN_REQUEST_URL && oidcToken === void 0,
     routerUnfunded: runContext.routerUnfunded,
-    trialFallback: runContext.trialFallback
+    trialFallback: runContext.trialFallback,
+    trialCreditsLeftUsd: runContext.trialCreditsLeftUsd
   };
 }
 
 // utils/agentHangReport.ts
 var MAX_STDERR_BYTES = 3e3;
 function formatAgentHangBody(input) {
-  if (!input.diagnostic) return null;
-  if (input.diagnostic.lastProviderError === "provider billing exhausted") {
-    return formatBillingExhaustedBody(input.diagnostic);
-  }
-  const verb = input.isHang ? "stalled" : "failed";
-  const cause = input.diagnostic.lastProviderError ? ` \u2014 likely cause: \`${input.diagnostic.lastProviderError}\`` : "";
-  const headline = `**${input.diagnostic.label} ${verb}**${cause}`;
-  const explanation = formatExplanation({
-    isHang: input.isHang,
-    errorMessage: input.errorMessage,
-    idleSec: input.diagnostic.idleSec
-  });
-  const parts = [headline, "", `${explanation} ${formatEventsPart(input.diagnostic)}`];
-  const tail = renderStderrTail(input.diagnostic.recentStderr);
-  if (tail) {
-    const fence = pickFence(tail);
-    parts.push(
-      "",
-      "<details><summary>Recent agent stderr</summary>",
-      "",
-      fence,
-      tail,
-      fence,
-      "",
-      "</details>"
-    );
+  const diagnostic = input.diagnostic;
+  if (!diagnostic) return null;
+  const output = renderStderrTail(diagnostic.recentStderr);
+  const details = output ? { summary: "Last agent output", text: output } : void 0;
+  const idle = formatIdle(diagnostic.idleSec ?? parseIdleSec(input.errorMessage));
+  if (diagnostic.lastProviderError === PROVIDER_BILLING_EXHAUSTED_LABEL) {
+    const billingUrl = extractBillingUrl(diagnostic.recentStderr);
+    return renderFailure({
+      headline: "Your model provider's account is out of credit.",
+      detail: "The provider kept refusing the request, so Pullfrog stopped the run. Top up the account, then re-trigger.",
+      details,
+      links: billingUrl ? [{ label: "Top up", url: billingUrl }] : []
+    });
   }
-  return parts.join("\n");
-}
-function formatExplanation(input) {
-  if (!input.isHang) return `The agent exited unexpectedly: ${input.errorMessage}`;
-  const idleSec = input.idleSec ?? parseIdleSec(input.errorMessage);
-  if (idleSec === void 0) {
-    return "The agent stopped emitting events and was killed by the activity-timeout watchdog.";
+  if (diagnostic.lastProviderError) {
+    return renderFailure({
+      headline: "The model provider kept returning errors, so Pullfrog stopped this run.",
+      detail: `The last one was \`${diagnostic.lastProviderError}\`. Re-trigger to try again.`,
+      details
+    });
+  }
+  if (!diagnostic.sawModelOutput) {
+    return renderFailure({
+      headline: `The model never responded, so Pullfrog stopped this run${idle ? ` after ${idle}` : ""}.`,
+      detail: "The request went out but nothing came back. This is usually temporary, so re-trigger to try again.",
+      details
+    });
   }
-  return `The agent stopped emitting events for ${idleSec}s and was killed by the activity-timeout watchdog.`;
+  return renderFailure({
+    headline: `The agent went quiet${idle ? ` for ${idle}` : ""}, so Pullfrog stopped this run.`,
+    detail: "Re-trigger to try again.",
+    details
+  });
+}
+function formatIdle(seconds) {
+  if (seconds === void 0) return void 0;
+  if (seconds < 90) return `${seconds} seconds`;
+  return `${Math.round(seconds / 60)} minutes`;
 }
 function parseIdleSec(message2) {
   const match3 = /no output for (\d+)s/.exec(message2);
   return match3 ? Number(match3[1]) : void 0;
 }
-function formatEventsPart(diagnostic) {
-  if (diagnostic.lastProviderError) {
-    return `${diagnostic.eventCount} events were processed before the failure.`;
-  }
-  if (!diagnostic.sawModelOutput) {
-    return "The model produced no output at all before the stall \u2014 the request was sent but nothing came back. This is usually transient; re-running often succeeds.";
-  }
-  return `${diagnostic.eventCount} events were processed before the failure.`;
-}
 function renderStderrTail(lines) {
   if (lines.length === 0) return "";
   const joined = lines.join("\n");
@@ -197233,13 +197328,6 @@ function renderStderrTail(lines) {
   return `... (older lines truncated)
 ${joined.slice(-MAX_STDERR_BYTES)}`;
 }
-function pickFence(content) {
-  let max = 0;
-  for (const match3 of content.matchAll(/`+/g)) {
-    if (match3[0].length > max) max = match3[0].length;
-  }
-  return "`".repeat(Math.max(3, max + 1));
-}
 function extractBillingUrl(lines) {
   const urlPattern = /https:\/\/(?:opencode\.ai\/[^\s"]*billing[^\s"]*|console\.anthropic\.com[^\s"]*|console\.cloud\.google\.com[^\s"]*billing[^\s"]*)/i;
   for (let i = lines.length - 1; i >= 0; i--) {
@@ -197248,28 +197336,6 @@ function extractBillingUrl(lines) {
   }
   return void 0;
 }
-function formatBillingExhaustedBody(diagnostic) {
-  const headline = `**${diagnostic.label} stopped** \u2014 your model provider returned a billing-exhausted response.`;
-  const billingUrl = extractBillingUrl(diagnostic.recentStderr);
-  const cta = billingUrl ? `Top up your provider balance, then re-run: [${billingUrl}](${billingUrl})` : "Top up your model-provider balance (or rotate to a key with remaining credits) and re-run.";
-  const explanation = "The agent kept retrying the request because the provider marked the failure as transient. Pullfrog's activity-timeout watchdog ended the run after no further events were emitted.";
-  const parts = [headline, "", explanation, "", cta];
-  const tail = renderStderrTail(diagnostic.recentStderr);
-  if (tail) {
-    const fence = pickFence(tail);
-    parts.push(
-      "",
-      "<details><summary>Recent agent stderr</summary>",
-      "",
-      fence,
-      tail,
-      fence,
-      "",
-      "</details>"
-    );
-  }
-  return parts.join("\n");
-}
 
 // utils/runErrorRenderer.ts
 function isProviderModelNotFoundError(message2) {
@@ -197284,84 +197350,9 @@ function isNoProviderAvailableError(message2) {
 function isZenFreeTierGateError(message2) {
   return /free tier can only be used from within OpenCode/i.test(message2);
 }
-function formatZenFreeTierGateSummary(input) {
-  const settingsUrl = `${getApiUrl()}/console/${input.owner}/${input.name}`;
-  return [
-    "**Zen's free tier refused a request this run made.** OpenCode Zen currently rejects free-model requests whose tool list is missing one of the built-in tools it expects ([upstream issue](https://github.com/anomalyco/opencode/issues/49587)). Pullfrog sends all of them, but opencode's mid-run context-compaction request carries no tools at all, and a repo-level `opencode.json` that denies `bash`, `glob`, `grep` or `read` strips that tool from every request.",
-    "",
-    'Pick a paid model for this repo, drop any `"deny"` on `bash`, `glob`, `grep` or `read` from the repo\'s `opencode.json` if it sets one, or split the PR so the run stays under the compaction threshold and re-trigger.',
-    "",
-    `[Model settings \u2192](${settingsUrl}) \xB7 [Ask in Discord \u2192](https://discord.gg/8y96raFg8e)`,
-    "",
-    `\`\`\`
-${input.raw}
-\`\`\``
-  ].join("\n");
-}
-function formatNoProviderAvailableSummary(input) {
-  const settingsUrl = `${getApiUrl()}/console/${input.owner}/${input.name}`;
-  return [
-    "**The provider refused to serve this model.** It's listed in the catalog, but the account this run used has no access to it \u2014 so the request was accepted and then declined.",
-    "",
-    "This often happens when Pullfrog auto-selects a model your account can't reach. Pin an explicit model for this repo, or add credentials for the provider that was picked.",
-    "",
-    `[Model settings \u2192](${settingsUrl}) \xB7 [Setup docs \u2192](https://docs.pullfrog.com/keys) \xB7 [Ask in Discord \u2192](https://discord.gg/8y96raFg8e)`,
-    "",
-    `\`\`\`
-${input.raw}
-\`\`\``
-  ].join("\n");
-}
-function isRunTimeoutError(message2) {
-  return message2.startsWith("agent run timed out after");
-}
-function formatRunTimeoutSummary(input) {
-  const settingsUrl = `${getApiUrl()}/console/${input.owner}/${input.name}`;
-  return [
-    "**This run hit its time limit while still working, so it stopped before finishing.**",
-    "",
-    "Give runs longer with `--timeout=2h` (or `--notimeout`) in this repo's instructions \u2014 or raise the workflow's `timeout` input if it sets one, since that input wins. A smaller PR or a lower effort also finishes sooner.",
-    "",
-    `[Repo settings \u2192](${settingsUrl}) \xB7 [Flags \u2192](https://docs.pullfrog.com/flags)`,
-    "",
-    `\`\`\`
-${input.raw}
-\`\`\``
-  ].join("\n");
-}
-function formatContextOverflowSummary(input) {
-  const settingsUrl = `${getApiUrl()}/console/${input.owner}/${input.name}`;
-  return [
-    "**This run exceeded the model's context window.** Pullfrog read more than the model could hold, so it stopped before finishing.",
-    "",
-    `Pick a model with a larger context window, or split this PR into smaller ones and re-trigger.`,
-    "",
-    `[Model settings \u2192](${settingsUrl}) \xB7 [Ask in Discord \u2192](https://discord.gg/8y96raFg8e)`,
-    "",
-    `\`\`\`
-${input.raw}
-\`\`\``
-  ].join("\n");
-}
-function formatGenericFailure(errorMessage) {
-  return [
-    "Pullfrog ran into an unexpected error and couldn't finish this run. The underlying error is below \u2014 re-trigger Pullfrog to try again, and reach out to support if it keeps happening.",
-    "",
-    "```",
-    errorMessage,
-    "```"
-  ].join("\n");
-}
-function formatMinimalFailureComment(repo) {
-  const runId = process.env.GITHUB_RUN_ID;
-  if (!runId) return "**Run failed.**";
-  const server = process.env.GITHUB_SERVER_URL ?? "https://github.com";
-  const url4 = `${server}/${repo.owner}/${repo.name}/actions/runs/${runId}`;
-  return `**Run failed.** [View the logs \u2192](${url4})`;
-}
-var PROVIDER_BILLING_URLS = Object.fromEntries(
-  Object.entries(PROVIDER_DASHBOARDS).map(([id, dashboard]) => [id, dashboard.billing])
-);
+var RUN_TIMEOUT_PATTERN = /^agent run timed out after (\S+)/;
+var STOP_SCRIPT_PATTERN = /^stop hook failed \(exit code (-?\d+)\): ([\s\S]*)$/;
+var UNSUBMITTED_REVIEW_PATTERN = /^\w+ mode finished without calling /;
 function detectProviderId(message2) {
   const harnessId = extractProviderId(message2);
   if (harnessId) return harnessId;
@@ -197373,292 +197364,242 @@ function detectProviderId(message2) {
   if (/platform\.openai\.com/i.test(message2)) return "openai";
   return null;
 }
-var OPENROUTER_PRIVACY_URL = "https://openrouter.ai/settings/privacy";
-function formatProviderBillingExhausted(input) {
-  const providerId = detectProviderId(input.errorMessage);
-  const dashboardUrl = providerId ? PROVIDER_BILLING_URLS[providerId] : void 0;
-  if (isOpenRouterKeyLimitExceeded(input.errorMessage)) {
-    return [
-      "**Your OpenRouter key's total limit is too low for this request.**",
-      "",
-      "OpenRouter refused the request against the key's own spending ceiling, not your account balance \u2014 raising or removing that limit is the fix, and topping up credits alone may not be.",
-      "",
-      `[Raise the key's limit \u2192](${PROVIDER_DASHBOARDS.openrouter.keys}) \xB7 [Add credits \u2192](${PROVIDER_BILLING_URLS.openrouter})`,
-      "",
-      `\`\`\`
-${input.errorMessage}
-\`\`\``
-    ].join("\n");
-  }
-  const spendCap = findAnthropicSpendCap(input.errorMessage);
-  if (spendCap) {
-    const regains = spendCap.regainAt ? ` Access returns on **${spendCap.regainAt}**.` : "";
-    return [
-      `**Your \`anthropic\` account has reached its configured API usage limit.**${regains}`,
-      "",
-      "Anthropic refused the request against a spend limit set in your Console, not an empty balance \u2014 raise or remove that limit to run before it resets.",
-      "",
-      `[Anthropic billing settings \u2192](${PROVIDER_BILLING_URLS.anthropic})`,
-      "",
-      `\`\`\`
-${input.errorMessage}
-\`\`\``
-    ].join("\n");
+function resolveAccount(input) {
+  const subscription = input.credential === "subscription" ? subscriptionFor(input.model) : void 0;
+  if (subscription) {
+    const plan = Object.values(PROVIDER_DASHBOARDS).find(
+      (dashboard2) => dashboard2.credential === subscription.env
+    );
+    return {
+      name: plan?.name ?? null,
+      phrase: subscription.label,
+      billingUrl: plan?.billing,
+      subscription: true
+    };
   }
-  const headline = providerId ? `**Your \`${providerId}\` account is out of credit.**` : "**Your provider account is out of credit.**";
-  const cta = dashboardUrl ? `[Top up \`${providerId}\` \u2192](${dashboardUrl})` : "Top up your provider account, then re-trigger Pullfrog.";
-  return [
-    headline,
-    "",
-    "Pullfrog detected a billing-exhausted response from your provider \u2014 the agent stopped before completing this run.",
-    "",
-    cta,
-    "",
-    `\`\`\`
-${input.errorMessage}
-\`\`\``
-  ].join("\n");
+  const id = detectProviderId(input.errorMessage) ?? input.model?.split("/")[0] ?? null;
+  const dashboard = id ? PROVIDER_DASHBOARDS[id] : void 0;
+  const name = dashboard?.name ?? providerDisplayName(id) ?? null;
+  return {
+    name,
+    phrase: name ? `${name} account` : "model provider account",
+    billingUrl: dashboard?.billing,
+    subscription: false
+  };
 }
-function formatTransientUpstreamBody(errorMessage) {
-  const providerId = detectProviderId(errorMessage);
-  const who = providerId ? `\`${providerId}\`` : "the model provider";
-  return [
-    `**${who} had a temporary upstream failure.**`,
-    "",
-    "The provider refused or dropped the request mid-run \u2014 nothing in your repo or your credentials is at fault. Re-trigger Pullfrog; if it keeps happening, check the provider's status page.",
-    "",
-    `\`\`\`
-${errorMessage}
-\`\`\``
-  ].join("\n");
+function providerResponse(ctx) {
+  return {
+    summary: ctx.account.name ? `${ctx.account.name}'s response` : "The provider's response",
+    text: ctx.errorMessage
+  };
 }
-function formatProviderNoRoutableEndpoints(input) {
-  return [
-    "**OpenRouter can't route this model anywhere your account allows.**",
-    "",
-    "Your OpenRouter data policy excludes every provider currently serving the configured model, so the request was refused before any model work happened. Allow more providers, or pick a model your policy already covers.",
-    "",
-    `[OpenRouter data policy \u2192](${OPENROUTER_PRIVACY_URL}) \xB7 [Configure model \u2192](${getApiUrl()}/console/${input.owner}/${input.name})`,
-    "",
-    `\`\`\`
-${input.errorMessage}
-\`\`\``
-  ].join("\n");
+function formatProviderBillingExhausted(ctx) {
+  if (isOpenRouterKeyLimitExceeded(ctx.errorMessage)) {
+    const openrouter = PROVIDER_DASHBOARDS.openrouter;
+    return renderFailure({
+      headline: "Your OpenRouter key's spending limit is too low for this request.",
+      detail: "OpenRouter checks the key's own limit as well as your balance, so raise or remove the limit; adding credit alone may not be enough.",
+      details: providerResponse(ctx),
+      links: openrouter?.keys ? [
+        { label: "Raise the key's limit", url: openrouter.keys },
+        { label: "Add credit", url: openrouter.billing }
+      ] : []
+    });
+  }
+  const spendCap = findAnthropicSpendCap(ctx.errorMessage);
+  if (spendCap) {
+    const regains = spendCap.regainAt ? `Access returns on **${spendCap.regainAt}**. ` : "";
+    const anthropic = PROVIDER_DASHBOARDS.anthropic;
+    return renderFailure({
+      headline: "Your Anthropic account has reached its API spend limit.",
+      detail: `${regains}This is a limit set in your Anthropic Console, not an empty balance; raise or remove it to run before then.`,
+      details: providerResponse(ctx),
+      links: anthropic ? [{ label: "Anthropic billing settings", url: anthropic.billing }] : []
+    });
+  }
+  return renderFailure({
+    headline: `Your ${ctx.account.phrase} is out of credit.`,
+    detail: "Top it up, then re-trigger Pullfrog.",
+    details: providerResponse(ctx),
+    links: ctx.account.billingUrl ? [{ label: `Top up ${ctx.account.name}`, url: ctx.account.billingUrl }] : []
+  });
+}
+function formatProviderUsageLimit(ctx) {
+  const tryAgainAt = /try again at (\d{1,2}:\d{2}\s*[AP]M)/i.exec(ctx.errorMessage)?.[1];
+  const resets = tryAgainAt ? `${ctx.account.name ?? "The provider"} says to try again at ${tryAgainAt}. ` : "";
+  return renderFailure({
+    headline: `Your ${ctx.account.phrase} has hit its usage limit.`,
+    detail: ctx.account.subscription ? `${resets}It resets on its own, so re-trigger after that, or connect an API key, which Pullfrog falls back to automatically.` : `${resets}Raise the limit with the provider, or re-trigger once it resets.`,
+    details: providerResponse(ctx),
+    links: [providerLink(ctx.repo.owner), pickModelLink(ctx.repo)]
+  });
+}
+function formatTransientUpstreamBody(ctx) {
+  if (/\bmodel is at capacity\b/i.test(ctx.errorMessage)) {
+    return renderFailure({
+      headline: `${ctx.account.name ? `${ctx.account.name}'s model` : "The model"} is at capacity right now.`,
+      detail: "Re-trigger in a few minutes, or pick another model.",
+      details: providerResponse(ctx),
+      links: [pickModelLink(ctx.repo)]
+    });
+  }
+  return renderFailure({
+    headline: `${ctx.account.name ?? "The model provider"} had a temporary failure.`,
+    detail: "Nothing on your side is at fault. Re-trigger to try again; if it keeps happening, check the provider's status page.",
+    details: providerResponse(ctx)
+  });
+}
+function formatProviderNoRoutableEndpoints(ctx) {
+  return renderFailure({
+    headline: "OpenRouter can't route this model anywhere your account allows.",
+    detail: "Your OpenRouter data policy excludes every provider serving it, so nothing ran and nothing was billed. Allow more providers, or pick a model your policy covers.",
+    details: providerResponse(ctx),
+    links: [
+      { label: "OpenRouter data policy", url: "https://openrouter.ai/settings/privacy" },
+      pickModelLink(ctx.repo)
+    ]
+  });
 }
-function formatProviderMissingCredential(input) {
-  return [
-    "**No credential reached the model provider.**",
-    "",
-    "The run started without a key for the provider it ended up using, so the request was refused before any model work happened. Nothing was billed, and no key of yours was rejected \u2014 add a provider key, or pick a model you already have one for.",
-    "",
-    `[Configure model \u2192](${getApiUrl()}/console/${input.owner}/${input.name})`,
-    "",
-    `\`\`\`
-${input.errorMessage}
-\`\`\``
-  ].join("\n");
+function formatProviderMissingCredential(ctx) {
+  return renderFailure({
+    headline: "No credential reached the model provider.",
+    detail: "The run used a provider it had no key for, so nothing was billed and no key of yours was rejected. Connect a key for that provider, or pick a model you have one for.",
+    details: providerResponse(ctx),
+    links: [providerLink(ctx.repo.owner), pickModelLink(ctx.repo)]
+  });
 }
-function formatByokSetupSummary(input) {
-  return [
-    "**This repo's model isn't fully set up yet.**",
-    "",
-    input.raw,
-    "",
-    `[Configure model \u2192](${getApiUrl()}/console/${input.owner}/${input.name})`
-  ].join("\n");
+function formatProviderModelNotFound(ctx) {
+  const model = /Model not found: (\S+?)\.?(?:\s|$)/.exec(ctx.errorMessage)?.[1];
+  const suggestions = /Did you mean: ([^?\n]+)\?/.exec(ctx.errorMessage)?.[1]?.split(",").map((id) => `\`${id.trim()}\``);
+  const suggested = suggestions?.length ? ` OpenCode suggests ${suggestions.slice(0, -1).join(", ")}${suggestions.length > 1 ? " or " : ""}${suggestions.at(-1)}.` : "";
+  return renderFailure({
+    headline: model ? `\`${model}\` isn't in OpenCode's catalog.` : "This repo's model isn't in OpenCode's catalog.",
+    detail: `Pick another model wherever this repo sets it: the Pullfrog console, the workflow's \`model\` input or the \`PULLFROG_MODEL\` variable.${suggested}`,
+    details: { summary: "OpenCode's response", text: ctx.errorMessage },
+    links: [pickModelLink(ctx.repo)]
+  });
 }
-function formatProviderModelNotFoundSummary(input) {
-  return `The configured model is not in OpenCode's catalog. Pick a different model for \`${input.owner}/${input.name}\` where it is set \u2014 the Pullfrog console, the workflow's \`model\` input, or the \`PULLFROG_MODEL\` variable \u2014 or contact support if this persists.
-
-\`\`\`
-${input.raw}
-\`\`\``;
+function formatNoProviderAvailable(ctx) {
+  return renderFailure({
+    headline: "The provider won't serve this model to this account.",
+    detail: "It's in the catalog, but this account's plan can't reach it, which often happens when Pullfrog auto-selects it. Pin a model for this repo, or connect the provider that was picked.",
+    details: providerResponse(ctx),
+    links: [pickModelLink(ctx.repo), providerLink(ctx.repo.owner)]
+  });
 }
-function formatProviderUsageLimit(input) {
-  return [
-    "**The provider's usage limit for this account has been reached.**",
-    "",
-    "A subscription window resets on its own, so re-trigger after it does; a limit set on a pay-as-you-go workspace has to be raised. A model on another provider can run in the meantime.",
-    "",
-    `[Model settings \u2192](${getApiUrl()}/console/${input.owner}/${input.name}) \xB7 [Ask in Discord \u2192](https://discord.gg/8y96raFg8e)`,
-    "",
-    `\`\`\`
-${input.raw}
-\`\`\``
-  ].join("\n");
+function formatZenFreeTierGate(ctx) {
+  return renderFailure({
+    headline: "OpenCode Zen's free tier refused a request from this run.",
+    detail: "Zen rejects free-model requests that don't list its built-in tools, and OpenCode's mid-run context compaction sends none ([upstream issue](https://github.com/anomalyco/opencode/issues/49587)). Pick a paid model, or split the PR so the run finishes before compaction. If this repo's `opencode.json` denies `bash`, `glob`, `grep` or `read`, remove that too.",
+    details: { summary: "OpenCode Zen's response", text: ctx.errorMessage },
+    links: [pickModelLink(ctx.repo)]
+  });
 }
-function formatProviderErrorBody(input) {
-  return [
-    "**The model provider returned an error, so this run stopped.**",
-    "",
-    "The error is below. If it names your key, plan or balance, fix that with the provider or pick another model before re-triggering.",
-    "",
-    `[Model settings \u2192](${getApiUrl()}/console/${input.owner}/${input.name}) \xB7 [Ask in Discord \u2192](https://discord.gg/8y96raFg8e)`,
-    "",
-    `\`\`\`
-${input.raw}
-\`\`\``
-  ].join("\n");
+function formatUnrecognized(ctx) {
+  return renderFailure({
+    headline: "An unrecognized error occurred.",
+    detail: "The error is below.",
+    error: ctx.errorMessage,
+    links: [DISCORD_LINK]
+  });
 }
-function renderRunError(input) {
-  const billingError = input.routerActive && isRouterKeylimitExhaustedError(input.errorMessage) ? new BillingError(input.errorMessage, { code: "router_keylimit_exhausted" }) : null;
-  if (billingError) {
-    const body = formatBillingErrorSummary(billingError, input.repo.owner);
-    return { summary: body, comment: body };
-  }
-  if (input.errorMessage.includes(MODEL_ACCESS_MARKER)) {
-    return { summary: input.errorMessage, comment: input.errorMessage };
-  }
-  if (input.errorMessage.includes(SECRETS_UNAVAILABLE_MARKER)) {
-    return { summary: input.errorMessage, comment: input.errorMessage };
-  }
-  if (input.errorMessage.includes(ROUTER_UNFUNDED_MARKER)) {
-    return { summary: input.errorMessage, comment: input.errorMessage };
-  }
-  if (input.errorMessage.includes(CREDENTIAL_REJECTED_MARKER) || input.errorMessage.includes(CREDENTIAL_POOL_REFUSED_MARKER)) {
-    return { summary: input.errorMessage, comment: input.errorMessage };
-  }
-  const isHang = input.errorMessage.startsWith("activity timeout") || input.errorMessage.startsWith("agent still pending");
-  const hangBody = isHang ? formatAgentHangBody({
-    diagnostic: input.agentDiagnostic,
-    isHang: true,
-    errorMessage: input.errorMessage
-  }) : null;
-  if (isProviderBillingExhausted(input.errorMessage)) {
-    const body = formatProviderBillingExhausted({ errorMessage: input.errorMessage });
-    return { summary: `### \u274C Pullfrog failed
-
-${body}`, comment: body };
-  }
-  if (isProviderNoRoutableEndpoints(input.errorMessage)) {
-    const body = formatProviderNoRoutableEndpoints({
-      owner: input.repo.owner,
-      name: input.repo.name,
-      errorMessage: input.errorMessage
-    });
-    return { summary: `### \u274C Pullfrog failed
-
-${body}`, comment: body };
-  }
-  if (isProviderUsageLimit(input.errorMessage)) {
-    const body = formatProviderUsageLimit({
-      owner: input.repo.owner,
-      name: input.repo.name,
-      raw: input.errorMessage
-    });
-    return { summary: `### \u274C Pullfrog failed
-
-${body}`, comment: body };
+function renderRunErrorBody(ctx) {
+  const message2 = ctx.errorMessage;
+  if (ctx.trial && isRouterKeylimitExhaustedError(message2)) {
+    return buildTrialSpentError({ owner: ctx.repo.owner });
   }
-  if (isProviderMissingCredential(input.errorMessage)) {
-    const body = formatProviderMissingCredential({
-      owner: input.repo.owner,
-      name: input.repo.name,
-      errorMessage: input.errorMessage
-    });
-    return { summary: `### \u274C Pullfrog failed
-
-${body}`, comment: body };
+  if (ctx.routerActive && isRouterKeylimitExhaustedError(message2)) {
+    return formatBillingErrorSummary(
+      new BillingError(message2, { code: "router_keylimit_exhausted" }),
+      ctx.repo.owner
+    );
   }
-  if (isByokSetupError(input.errorMessage)) {
-    const body = formatByokSetupSummary({
-      owner: input.repo.owner,
-      name: input.repo.name,
-      raw: input.errorMessage
+  if ([
+    MODEL_ACCESS_MARKER,
+    SECRETS_UNAVAILABLE_MARKER,
+    ROUTER_UNFUNDED_MARKER,
+    TRIAL_SPENT_MARKER,
+    CREDENTIAL_REJECTED_MARKER,
+    CREDENTIAL_POOL_REFUSED_MARKER
+  ].some((marker) => message2.includes(marker))) {
+    return message2;
+  }
+  const isHang = message2.startsWith("activity timeout") || message2.startsWith("agent still pending");
+  const hangBody = isHang ? formatAgentHangBody({ diagnostic: ctx.agentDiagnostic, errorMessage: message2 }) : null;
+  if (isProviderBillingExhausted(message2)) return formatProviderBillingExhausted(ctx);
+  if (isProviderNoRoutableEndpoints(message2)) return formatProviderNoRoutableEndpoints(ctx);
+  if (isProviderUsageLimit(message2)) return formatProviderUsageLimit(ctx);
+  if (isProviderMissingCredential(message2)) return formatProviderMissingCredential(ctx);
+  if (isByokSetupError(message2)) {
+    return renderFailure({
+      headline: "This repo's model isn't fully set up yet.",
+      detail: message2
+    });
+  }
+  const apiKeySource = hangBody ?? message2;
+  if (isApiKeyAuthError(apiKeySource)) {
+    return formatApiKeyErrorSummary({
+      owner: ctx.repo.owner,
+      name: ctx.repo.name,
+      raw: apiKeySource,
+      model: ctx.model,
+      credential: ctx.credential,
+      output: hangBody ? void 0 : message2
+    });
+  }
+  if (isProviderModelNotFoundError(message2)) return formatProviderModelNotFound(ctx);
+  if (isNoProviderAvailableError(message2)) return formatNoProviderAvailable(ctx);
+  if (isZenFreeTierGateError(message2)) return formatZenFreeTierGate(ctx);
+  if (isContextOverflowError(message2)) {
+    return renderFailure({
+      headline: "This run outgrew the model's context window.",
+      detail: "Pick a model with a larger context window, or split the PR into smaller ones and re-trigger.",
+      links: [pickModelLink(ctx.repo)]
+    });
+  }
+  const timeout = RUN_TIMEOUT_PATTERN.exec(message2)?.[1];
+  if (timeout) {
+    return renderFailure({
+      headline: `This run hit its ${timeout} time limit while still working.`,
+      detail: "Give runs longer with `--timeout=2h` (or `--notimeout`) in this repo's instructions, or raise the workflow's `timeout` input if it sets one, since that input wins. A smaller PR or a lower effort also finishes sooner.",
+      links: [
+        { label: "Repo settings", url: repoConsoleUrl(ctx.repo) },
+        { label: "Flags", url: "https://docs.pullfrog.com/flags" }
+      ]
     });
-    return { summary: `### \u274C Pullfrog failed
-
-${body}`, comment: body };
-  }
-  const apiKeySource = hangBody ?? input.errorMessage;
-  const apiKeyErrorSummary = isApiKeyAuthError(apiKeySource) ? formatApiKeyErrorSummary({
-    owner: input.repo.owner,
-    name: input.repo.name,
-    raw: apiKeySource
-  }) : null;
-  if (apiKeyErrorSummary) {
-    return { summary: apiKeyErrorSummary, comment: apiKeyErrorSummary };
   }
-  if (isProviderModelNotFoundError(input.errorMessage)) {
-    const body = formatProviderModelNotFoundSummary({
-      owner: input.repo.owner,
-      name: input.repo.name,
-      raw: input.errorMessage
+  const stopScript = STOP_SCRIPT_PATTERN.exec(message2);
+  if (stopScript) {
+    return renderFailure({
+      headline: "This repo's stop script failed, so the run ended without finishing.",
+      detail: `It exited with code ${stopScript[1]}. Fix the script in this repo's settings, or re-trigger if the failure was temporary.`,
+      details: stopScript[2]?.trim() ? { summary: "Script output", text: stopScript[2].trim() } : void 0,
+      links: [{ label: "Repo settings", url: repoConsoleUrl(ctx.repo) }]
     });
-    return { summary: body, comment: body };
   }
-  if (isNoProviderAvailableError(input.errorMessage)) {
-    const body = formatNoProviderAvailableSummary({
-      owner: input.repo.owner,
-      name: input.repo.name,
-      raw: input.errorMessage
+  if (UNSUBMITTED_REVIEW_PATTERN.test(message2)) {
+    return renderFailure({
+      headline: "The agent finished without posting its review.",
+      detail: "It was reminded and still didn't, so the run stopped. Re-trigger to try again."
     });
-    return { summary: `### \u274C Pullfrog failed
-
-${body}`, comment: body };
   }
-  if (isZenFreeTierGateError(input.errorMessage)) {
-    const body = formatZenFreeTierGateSummary({
-      owner: input.repo.owner,
-      name: input.repo.name,
-      raw: input.errorMessage
+  if (isTransientUpstreamError(message2)) return formatTransientUpstreamBody(ctx);
+  if (hangBody) return hangBody;
+  if (message2.startsWith("provider error: ")) {
+    return renderFailure({
+      headline: `${ctx.account.name ?? "The model provider"} returned an error, so this run stopped.`,
+      detail: "If it names your key, plan or balance, fix that with the provider or pick another model.",
+      error: message2.slice("provider error: ".length),
+      links: [pickModelLink(ctx.repo)]
     });
-    return { summary: `### \u274C Pullfrog failed
-
-${body}`, comment: body };
   }
-  if (isContextOverflowError(input.errorMessage)) {
-    const body = formatContextOverflowSummary({
-      owner: input.repo.owner,
-      name: input.repo.name,
-      raw: input.errorMessage
-    });
-    return { summary: `### \u274C Pullfrog failed
-
-${body}`, comment: body };
-  }
-  if (isRunTimeoutError(input.errorMessage)) {
-    const body = formatRunTimeoutSummary({
-      owner: input.repo.owner,
-      name: input.repo.name,
-      raw: input.errorMessage
-    });
-    return { summary: `### \u274C Pullfrog failed
-
-${body}`, comment: body };
-  }
-  if (isTransientUpstreamError(input.errorMessage)) {
-    const body = formatTransientUpstreamBody(input.errorMessage);
-    return { summary: `### \u274C Pullfrog failed
-
-${body}`, comment: body };
-  }
-  if (hangBody) {
-    const explained = input.agentDiagnostic?.lastProviderError !== void 0 || input.agentDiagnostic?.sawModelOutput === false;
-    return {
-      summary: `### \u274C Pullfrog failed
-
-${hangBody}`,
-      comment: explained ? hangBody : formatMinimalFailureComment(input.repo)
-    };
-  }
-  if (input.errorMessage.startsWith("provider error: ")) {
-    const body = formatProviderErrorBody({
-      owner: input.repo.owner,
-      name: input.repo.name,
-      raw: input.errorMessage
-    });
-    return { summary: `### \u274C Pullfrog failed
+  return formatUnrecognized(ctx);
+}
+function renderRunError(input) {
+  const body = renderRunErrorBody({ ...input, account: resolveAccount(input) });
+  return { summary: `### \u274C Pullfrog failed
 
 ${body}`, comment: body };
-  }
-  const genericBody = formatGenericFailure(input.errorMessage);
-  return {
-    summary: `### \u274C Pullfrog failed
-
-${genericBody}`,
-    comment: formatMinimalFailureComment(input.repo)
-  };
 }
 
 // utils/runLifecycle.ts
@@ -198084,7 +198025,10 @@ async function finalizeSuccessRun(input) {
     errorMessage: input.result.error || "agent run failed",
     repo: input.repo,
     agentDiagnostic: input.toolState.agentDiagnostic,
-    routerActive: !!input.toolContext.payload.proxyModel
+    routerActive: !!input.toolContext.payload.proxyModel,
+    model: input.toolState.model,
+    credential: input.toolState.credential,
+    trial: input.toolState.modelClamped?.reason === "trial"
   }) : null;
   if (rendered) {
     await reportErrorToComment({
@@ -198245,7 +198189,7 @@ function renderTodoMarkdown(todos) {
       case "cancelled":
         return `- ~~${todo.content}~~`;
       case "in_progress":
-        return `- [ ] <img src="https://uploads.pullfrog.com/Progress%20Indicator.gif"  width="11" style="visibility: visible; max-width: 100%;" />  ${todo.content}`;
+        return `- [ ] <img src="${TODO_SPINNER_URL}"  width="11" style="visibility: visible; max-width: 100%;" />  ${todo.content}`;
       case "pending":
         return `- [ ] ${todo.content}`;
       default:
@@ -198632,10 +198576,15 @@ async function main() {
             const funded = runContext.trialFallback && missingKey instanceof NoUsableCredentialError ? await resolveTrialFallback({
               payload,
               configuredModel: effectiveModel,
+              creditsLeftUsd: runContext.trialCreditsLeftUsd,
               oidcCredentials,
               repo: runContext.repo,
               toolState
             }) : false;
+            const trialSpent = runContext.trialCreditsLeftUsd !== void 0 && runContext.trialCreditsLeftUsd <= 0;
+            if (!funded && trialSpent && missingKey instanceof NoUsableCredentialError) {
+              throw new Error(buildTrialSpentError({ owner: runContext.repo.owner }));
+            }
             if (!funded) throw missingKey;
             agent2 = resolveAgent2({
               model: resolvedModel,
@@ -198966,7 +198915,10 @@ ${instructions.user}` : null,
         errorMessage,
         repo: runContext.repo,
         agentDiagnostic: toolState.agentDiagnostic,
-        routerActive: !!payload.proxyModel
+        routerActive: !!payload.proxyModel,
+        model: toolState.model,
+        credential: toolState.credential,
+        trial: toolState.modelClamped?.reason === "trial"
       });
       await writeRunErrorOutputs({ rendered, toolState });
       if (toolContext) {