pullfrog 0.1.99 → 0.1.101

package/dist/internal/index.d.ts

@@ -6,7 +6,7 @@ export { CLI_CONTRACT_HEADER, CLI_CONTRACT_VERSION, CLI_UPGRADE_MESSAGE } from "
 export type { ConfigField, ConfigScope, ConfigValue } from "../configuration.ts";
 export { configEntrySchema, configFields, configResponseSchema, configValueSchema, } from "../configuration.ts";
 export type { AuthorPermission, AutoTier, EffortPosition, ModelAlias, ModelProvider, Payload, PayloadEvent, PayloadRouting, ProviderConfig, PushPermission, RouterSource, RouterTier, ShellPermission, ToolPermission, WriteablePayload, XrepoConfig, } from "../external.ts";
-export { AUTO_EFFICIENT, AUTO_INTELLIGENT, AUTO_ROUTER, autoLadder, autoRoutedSlug, DEFAULT_EFFORT_POSITION, DEFAULT_PROXY_MODEL, defaultAutoTier, EFFORT_ALIASES, getAutoSelectHintModel, getModelEffortLevels, getModelEnvVars, getModelManagedCredentials, getModelProvider, getProviderDisplayName, isAutoRouted, isAutoSlug, isAutoTier, isCardGatedModel, isEffortPosition, isOssAllowedModel, isRouterTier, ladderRungs, modelAliases, modelHasStoredAuth, modelIdLabel, OSS_MODEL_ALLOWLIST, OSS_RECOMMENDED_MODEL, offeredRungs, ossFundedModelNames, PROVIDER_GATEWAY_URL_ENV, parseEffortPosition, parseModel, providers, pullfrogMcpName, ROUTED_PROVIDERS, ROUTER_LADDER, ROUTER_TIERS, resolveAutoTier, resolveCliModel, resolveDisplayAlias, resolveModelRung, resolveModelSlug, resolveOpenRouterModel, resolvePickModel, resolveRoutedModel, resolveRung, routerProxyOptOut, rungLabel, rungPosition, SUBSIDY_RUNG, } from "../external.ts";
+export { AUTO_EFFICIENT, AUTO_INTELLIGENT, AUTO_ROUTER, autoLadder, autoRoutedSlug, DEFAULT_EFFORT_POSITION, DEFAULT_PROXY_MODEL, defaultAutoTier, EFFORT_ALIASES, getAutoSelectHintModel, getModelEffortLevels, getModelEnvVars, getModelManagedCredentials, getModelProvider, getProviderDisplayName, isAutoRouted, isAutoSlug, isAutoTier, isCardGatedModel, isEffortPosition, isOssAllowedModel, isRouterTier, ladderRungs, modelAliases, modelHasStoredAuth, modelIdLabel, OSS_MODEL_ALLOWLIST, OSS_RECOMMENDED_MODEL, offeredRungs, ossFundedModelNames, PROVIDER_GATEWAY_URL_ENV, parseEffortPosition, parseModel, providers, pullfrogMcpName, ROUTED_PROVIDERS, ROUTER_LADDER, ROUTER_TIERS, resolveAutoTier, resolveCliModel, resolveDisplayAlias, resolveModelRung, resolveModelSlug, resolveOpenRouterModel, resolvePickModel, resolveRoutedModel, resolveRung, routerProxyOptOut, rungLabel, rungPosition, SUBSIDY_RUNG, TRIAL_FUNDED_USD_LIMIT, } from "../external.ts";
 export type { Mode } from "../modes.ts";
 export { modes } from "../modes.ts";
 export { type CommercialRefusal, commercialPaywallBody } from "../utils/billingErrors.ts";
@@ -16,9 +16,10 @@ export type { CodexAuthBody } from "../utils/codexOAuth.ts";
 export { decodeJwtExpMs, OAuthInvalidGrantError, parseCodexAuthBody, refreshCodexAuthBody, stringifyCodexAuthBody, } from "../utils/codexOAuth.ts";
 export type { CredentialVerdict } from "../utils/credentialCheck.ts";
 export { isCredentialProbeable, verifyCredential } from "../utils/credentialCheck.ts";
+export { renderFailure } from "../utils/failureBody.ts";
 export type { ResourceUsage, UsageSummary } from "../utils/github.ts";
 export { isPullfrog } from "../utils/isPullfrog.ts";
-export { isLeapingIntoActionCommentBody, LEAPING_INTO_ACTION_PREFIX, } from "../utils/leapingComment.ts";
+export { isLeapingIntoActionCommentBody, isLiveChecklistCommentBody, LEAPING_INTO_ACTION_PREFIX, } from "../utils/leapingComment.ts";
 export { MAX_LEARNINGS_LENGTH, truncateAtLineBoundary } from "../utils/learningsTruncate.ts";
 export { countOutstandingPullfrogThreads } from "../utils/outstandingThreads.ts";
 export type { CreateProgressCommentTarget, ProgressComment, ProgressCommentType, } from "../utils/progressComment.ts";

package/dist/internal.js

@@ -8,7 +8,7 @@ var __export = (target, all) => {
 // package.json
 var package_default = {
   name: "pullfrog",
-  version: "0.1.99",
+  version: "0.1.101",
   cliContractVersion: "1",
   type: "module",
   bin: {
@@ -14475,9 +14475,9 @@ var providers = {
     models: {
       "gemini-pro": {
         displayName: "Gemini Pro",
-        resolve: "google/gemini-3.1-pro-preview",
+        resolve: "google/gemini-4-argon",
         effort: ["low", "medium", "high"],
-        openRouterResolve: "openrouter/google/gemini-3.1-pro-preview",
+        openRouterResolve: "openrouter/google/gemini-4-argon",
         preferred: true
         // Inherit (subagents stay on Pro). Google has no in-between tier;
         // dropping to Flash for review work was a meaningful capability cliff
@@ -14667,7 +14667,7 @@ var providers = {
         displayName: "Kimi K3",
         description: "1M context, but only on Allegretto and above \xB7 Moderato caps it at 256K",
         resolve: "kimi-code-plan-cn/k3",
-        effort: ["low", "high", "max"],
+        effort: ["none", "low", "high", "max"],
         subagentModel: "kimi-k2"
       },
       // `preferred` sits on the 256K variant rather than the 1M flagship, which
@@ -14682,7 +14682,7 @@ var providers = {
         displayName: "Kimi K3 256K",
         description: "Same model at 256K for ~half the quota \xB7 Moderato or above",
         resolve: "kimi-code-plan-cn/k3-256k",
-        effort: ["low", "high", "max"],
+        effort: ["none", "low", "high", "max"],
         preferred: true,
         subagentModel: "kimi-k2"
       },
@@ -14690,9 +14690,10 @@ var providers = {
         displayName: "Kimi K2",
         description: "Included in every Kimi membership tier",
         resolve: "kimi-code-plan-cn/kimi-for-coding",
-        // models.dev published this ladder on 2026-09-14; the catalog gate
-        // mirrors it, so main was red until the alias carried it too.
-        effort: ["low", "high", "max"]
+        // models.dev published `low, high, max` on 2026-09-14 and added `none`
+        // on 2026-10-19; the catalog gate mirrors it, so main was red until the
+        // alias carried it too.
+        effort: ["none", "low", "high", "max"]
       },
       "kimi-k2-highspeed": {
         displayName: "Kimi K2 HighSpeed",
@@ -14862,9 +14863,9 @@ var providers = {
       },
       "gemini-pro": {
         displayName: "Gemini Pro",
-        resolve: "opencode/gemini-3.1-pro",
+        resolve: "opencode/gemini-4-argon",
         effort: ["low", "medium", "high"],
-        openRouterResolve: "openrouter/google/gemini-3.1-pro-preview"
+        openRouterResolve: "openrouter/google/gemini-4-argon"
         // Inherit — see google/gemini-pro for rationale.
       },
       "gemini-flash": {
@@ -15596,8 +15597,8 @@ var providers = {
       },
       "gemini-pro": {
         displayName: "Gemini Pro",
-        resolve: "vercel/google/gemini-3.1-pro-preview",
-        effort: ["low", "high"]
+        resolve: "vercel/google/gemini-4-argon",
+        effort: ["low", "medium", "high"]
       },
       "gemini-flash": {
         displayName: "Gemini Flash",
@@ -15865,6 +15866,13 @@ if (!defaultProxyAlias?.openRouterResolve) {
 }
 var DEFAULT_PROXY_MODEL = defaultProxyAlias.openRouterResolve;
 var defaultProxyDisplayName = defaultProxyAlias.displayName;
+var trialProxyAlias = resolveDisplayAlias("openai/gpt-luna");
+if (!trialProxyAlias?.openRouterResolve) {
+  throw new Error("TRIAL_PROXY_MODEL: openai/gpt-luna has no openRouterResolve");
+}
+var TRIAL_PROXY_MODEL = trialProxyAlias.openRouterResolve;
+var TRIAL_PROXY_DISPLAY_NAME = trialProxyAlias.displayName;
+var TRIAL_FUNDED_USD_LIMIT = 10;
 for (const [name, ladder] of Object.entries({ ...PROVIDER_LADDERS, router: ROUTER_LADDER })) {
   const terminal = /* @__PURE__ */ new Set();
   for (const slug of Object.values(ladder)) {
@@ -16306,6 +16314,36 @@ ${PR_SUMMARY_FORMAT}`
 }
 var modes = computeModes("opencode");
 
+// utils/failureBody.ts
+function renderFailure(params) {
+  const blocks = [
+    params.detail ? `**${params.headline}** ${params.detail}` : `**${params.headline}**`
+  ];
+  if (params.list) blocks.push(params.list.map((item) => `- ${item}`).join("\n"));
+  if (params.error) blocks.push(fenced(params.error));
+  if (params.details) {
+    blocks.push(
+      `<details><summary>${params.details.summary}</summary>
+
+${fenced(params.details.text)}
+
+</details>`
+    );
+  }
+  if (params.links?.length) {
+    blocks.push(params.links.map((link) => `[${link.label} \u2192](${link.url})`).join(" \xB7 "));
+  }
+  return blocks.join("\n\n");
+}
+function fenced(text) {
+  let longest = 0;
+  for (const match of text.matchAll(/`+/g)) longest = Math.max(longest, match[0].length);
+  const fence = "`".repeat(Math.max(3, longest + 1));
+  return `${fence}
+${text}
+${fence}`;
+}
+
 // utils/billingErrors.ts
 function commercialPaywallBody(params) {
   let action;
@@ -16347,7 +16385,7 @@ function formatModelLabel(params) {
   }
   const base = alias?.isFree ? `\`${modelName}\` (free)` : `\`${modelName}\``;
   if (params.clamped?.reason === "trial") {
-    return `${base} (model usage covered by Pullfrog)`;
+    return `${base} (free trial credits)`;
   }
   if (params.clamped) {
     const target = isAutoTier(params.clamped.from) ? "the intelligent tier" : `\`${resolveDisplayAlias(params.clamped.from)?.displayName ?? params.clamped.from}\``;
@@ -16358,13 +16396,14 @@ function formatModelLabel(params) {
   }
   return base;
 }
-function buildTrialDisclosure(owner) {
-  const consoleUrl = owner ? `https://pullfrog.com/console/${owner}` : "https://pullfrog.com/console";
+function buildTrialDisclosure(params) {
+  const consoleUrl = params.owner ? `https://pullfrog.com/console/${params.owner}#billing` : "https://pullfrog.com/console";
+  const left = params.creditsLeftUsd === void 0 ? "" : ` ($${Math.max(0, params.creditsLeftUsd).toFixed(2)} of $${TRIAL_FUNDED_USD_LIMIT} left)`;
   return [
     "---",
     "",
     "> [!IMPORTANT]",
-    `> **Pullfrog covered this run's model usage.** \`DeepSeek Flash\` is fast and cheap \u2014 expect lighter work than a frontier model. This model allowance is temporary and separate from your Pullfrog plan. [Connect a model-provider subscription or API key \u2192](${consoleUrl})`
+    `> **This run used your free trial credits**${left} on \`${TRIAL_PROXY_DISPLAY_NAME}\`, a fast, lightweight model. [Connect a provider \u2192](${consoleUrl}) to run the model you choose.`
   ].join("\n");
 }
 function buildPullfrogFooter(params) {
@@ -16387,13 +16426,13 @@ function buildPullfrogFooter(params) {
       `Using ${formatModelLabel({
         model: params.model,
         clamped: params.clamped,
-        unselectedProxyDefault: params.unselectedProxyDefault,
+        unselectedProxyDefault: params.unselectedProxyDefault && !params.failed,
         oss: params.oss
       })}`
     );
   }
-  const allParts = [...parts, "[\u{1D54F}](https://x.com/pullfrogai)"];
-  const disclosure = params.clamped?.reason === "trial" ? `${buildTrialDisclosure(params.owner)}
+  const allParts = params.failed ? parts : [...parts, "[\u{1D54F}](https://x.com/pullfrogai)"];
+  const disclosure = params.clamped?.reason === "trial" && !params.failed ? `${buildTrialDisclosure({ owner: params.owner, creditsLeftUsd: params.clamped.creditsLeftUsd })}
 
 ` : "";
   return `
@@ -16641,6 +16680,10 @@ function isLeapingIntoActionCommentBody(body) {
   const firstLine = content.split(/\r?\n/, 1)[0]?.trimEnd() ?? "";
   return new RegExp(`(^|\\s)${LEAPING_INTO_ACTION_PREFIX}(\\.\\.\\.)?$`).test(firstLine);
 }
+var TODO_SPINNER_URL = "https://uploads.pullfrog.com/Progress%20Indicator.gif";
+function isLiveChecklistCommentBody(body) {
+  return body.includes(TODO_SPINNER_URL);
+}
 
 // utils/learningsTruncate.ts
 var MAX_LEARNINGS_LENGTH = 1e5;
@@ -16925,6 +16968,8 @@ var PROVIDER_ERROR_PATTERNS = [
   },
   // OpenAI's `You have no credits remaining` (#1474).
   { regex: /no credits remaining/i, label: PROVIDER_BILLING_EXHAUSTED_LABEL },
+  // Codex on a ChatGPT workspace: `Your workspace is out of credits. Add credits to continue.`
+  { regex: /workspace is out of credits/i, label: PROVIDER_BILLING_EXHAUSTED_LABEL },
   { regex: /credit balance is too low/i, label: PROVIDER_BILLING_EXHAUSTED_LABEL },
   // "spending cap" (Gemini) and "spending limit" (xAI, #1076) are the same
   // condition in two house styles — a configured ceiling was reached.
@@ -16954,6 +16999,9 @@ var PROVIDER_ERROR_PATTERNS = [
   // succeeds" while the same log held nine of these. Measured on a live account
   // whose ChatGPT subscription was capped.
   { regex: /\bthe usage limit has been reached\b/i, label: PROVIDER_USAGE_LIMIT_LABEL },
+  // the Codex CLI's wording for the same capped plan: `You’ve hit your usage limit. … try
+  // again at 7:58 AM.` Claude's `hit your session limit` names its window and stays out.
+  { regex: /\bhit your usage limit\b/i, label: PROVIDER_USAGE_LIMIT_LABEL },
   // the OpenRouter shapes `isRouterKeylimitExhaustedError` matches. on a Router
   // run those mean the PULLFROG wallet is empty and `renderRunError` returns a
   // `BillingError` before ever reaching this list; on a BYOK run the very same
@@ -17481,6 +17529,7 @@ export {
   SUBSIDY_RUNG,
   SubscriptionCredentialError,
   TIMEOUT_DISABLED,
+  TRIAL_FUNDED_USD_LIMIT,
   autoLadder,
   autoRoutedSlug,
   buildPullfrogFooter,
@@ -17513,6 +17562,7 @@ export {
   isCredentialProbeable,
   isEffortPosition,
   isLeapingIntoActionCommentBody,
+  isLiveChecklistCommentBody,
   isOssAllowedModel,
   isPullfrog,
   isRouterTier,
@@ -17534,6 +17584,7 @@ export {
   pullfrogMcpName,
   refreshCodexAuthBody,
   refreshXaiAuthBody,
+  renderFailure,
   resolveAutoTier,
   resolveCliModel,
   resolveDisplayAlias,

package/dist/models.d.ts

@@ -354,6 +354,10 @@ export declare function resolveModelRung(params: {
     useOpenRouter: boolean;
 }): string | undefined;
 export declare const DEFAULT_PROXY_MODEL: string;
+export declare const TRIAL_PROXY_MODEL: string;
+export declare const TRIAL_PROXY_DISPLAY_NAME: string;
+/** lifetime cap, in USD, on the model usage Pullfrog funds for an account's trial runs. */
+export declare const TRIAL_FUNDED_USD_LIMIT = 10;
 /**
  * the models Pullfrog is willing to fund on the OSS program. an accepted OSS
  * repo may pick any of these and run-context honors the pick; anything else

package/dist/toolState.d.ts

@@ -1,6 +1,7 @@
 import type { AgentCredential, AgentUsage } from "./agents/shared.ts";
 import type { PrepResult } from "./prep/types.ts";
 import type { AgentDiagnostic } from "./utils/agentHangReport.ts";
+import type { ModelClamp } from "./utils/buildPullfrogFooter.ts";
 import type { DiffCoverageState } from "./utils/diffCoverage.ts";
 import { type ProgressComment, type ProgressCommentType } from "./utils/progressComment.ts";
 import type { TodoTracker } from "./utils/todoTracking.ts";
@@ -140,10 +141,7 @@ export interface ToolState {
     agent?: string | undefined;
     credential?: AgentCredential | undefined;
     unselectedProxyDefault?: boolean | undefined;
-    modelClamped?: {
-        from: string;
-        reason: "card" | "noRouterPath" | "oss" | "trial";
-    } | undefined;
+    modelClamped?: ModelClamp | undefined;
     oss?: boolean | undefined;
     todoTracker?: TodoTracker | undefined;
     agentDiagnostic?: AgentDiagnostic | undefined;

package/dist/utils/agentHangReport.d.ts

@@ -33,19 +33,15 @@ export type AgentDiagnostic = {
     sawModelOutput: boolean;
 };
 /**
- * Build a user-facing markdown body for an agent hang or failure.
+ * The body for a run the activity watchdog ended. Rendered into both the PR
+ * progress comment and the job summary; `null` when the harness left no
+ * diagnostic, so the caller falls back to its bare-error rendering.
  *
- * Rendered into both the PR progress comment and the GitHub Actions job
- * summary. Returns `null` when no diagnostic is available, which signals to
- * the caller to fall back to its bare-error rendering.
- *
- * `errorMessage` is the underlying timer / spawn reject string (e.g.
- * `activity timeout: no output for 301s`). The idle seconds are parsed out
- * of it for the hang explanation — total runtime would overstate the stall
- * for runs that streamed for a long time before going quiet.
+ * The headline says whose side went quiet, because a silent run is nearly
+ * always the provider's and "Pullfrog stalled" read as ours. The agent's last
+ * output goes in a collapsed section for whoever wants it.
  */
 export declare function formatAgentHangBody(input: {
     diagnostic: AgentDiagnostic | undefined;
-    isHang: boolean;
     errorMessage: string;
 }): string | null;

package/dist/utils/apiKeys.d.ts

@@ -1,9 +1,10 @@
+import { type FailureLink } from "./failureBody.ts";
 import type { CredentialCandidate } from "./subscriptionCredentials.ts";
 import type { ProbeVerdict } from "./subscriptionProbe.ts";
 /** shared sentence in the four `resolveSlug` routing-slug throws. */
-export declare const BYOK_SLUG_MARKER = "env var is required when the model is set to";
+export declare const BYOK_SLUG_MARKER = "must be set when the model is";
 /** shared sentence in the four `validate*Setup` throws. */
-export declare const BYOK_CONFIG_MARKER = "selected but required configuration is missing:";
+export declare const BYOK_CONFIG_MARKER = "is missing required settings:";
 /**
  * A BYOK provider setup is incomplete, at either of the two points that catch it:
  * `resolveSlug` refusing a routing slug whose backing env var is unset, and the
@@ -28,14 +29,35 @@ export declare function isByokSetupError(text: string): boolean;
  * `MODEL_ACCESS_MARKER`) because blaming the user for a transient fetch failure
  * on our side is the wrong CTA — their key is configured and still stored.
  */
-export declare const SECRETS_UNAVAILABLE_MARKER = "couldn't load your Pullfrog secrets";
+export declare const SECRETS_UNAVAILABLE_MARKER = "couldn't load your stored secrets";
 /**
  * marker for the "your Router wallet is empty AND you have no provider key"
  * body. its own marker rather than the missing-key one because
  * `formatApiKeyErrorSummary` rebuilds any body carrying `MISSING_KEY_MARKER`
  * that doesn't start with it, which would silently discard this copy.
  */
-export declare const ROUTER_UNFUNDED_MARKER = "your Pullfrog Router balance is empty";
+export declare const ROUTER_UNFUNDED_MARKER = "Your Pullfrog Router balance is empty";
+/**
+ * marker for the body a trial account gets once its funded credits are spent:
+ * at the late fallback, or when the funded key runs out mid-run. Without it the
+ * first is told to add an API key and the second that a Router wallet it never
+ * had went negative, and neither mentions the trial.
+ */
+export declare const TRIAL_SPENT_MARKER = "reached the limit of your free trial credits";
+export declare function buildTrialSpentError(params: {
+    owner: string;
+}): string;
+/** the repo's console page: its model, instructions and scripts. */
+export declare function repoConsoleUrl(repo: {
+    owner: string;
+    name: string;
+}): string;
+export declare function pickModelLink(repo: {
+    owner: string;
+    name: string;
+}): FailureLink;
+/** the account console's billing card: provider keys, subscriptions and Router credit. */
+export declare function providerLink(owner: string): FailureLink;
 /**
  * marker for a credential the provider explicitly REJECTED before the agent
  * started. needs a verbatim guard for the same reason as its three siblings,
@@ -76,6 +98,7 @@ export declare const CREDENTIAL_POOL_REFUSED_MARKER = "No configured credential
  */
 export declare class NoUsableCredentialError extends Error {
 }
+export declare function buildSecretsUnavailableError(): string;
 /**
  * Validate that the resolved model can actually be served by the chosen
  * agent. For routing slugs (Bedrock / Vertex) the auth shape is multi-var
@@ -160,6 +183,8 @@ export declare function isMalformedKeyError(text: string): boolean;
  * Anthropic entitlement denial for Claude Pro/Max subscription auth (#1072):
  * an org admin turned off Claude Code subscription access. no credential the
  * user controls fixes it, so it gets its own copy instead of the re-auth CTA.
+ * The probe sees the same denial as a 403, `OAuth authentication is currently
+ * not allowed for this organization`, which used to be answered "sign in again".
  */
 export declare function isClaudeSubscriptionDisabledError(text: string): boolean;
 /**
@@ -178,6 +203,15 @@ export declare function isClaudeSubscriptionDisabledError(text: string): boolean
  */
 export declare function isKimiPlanTierError(text: string): boolean;
 export declare function isClaudeSessionLimitError(text: string): boolean;
+/** the subscription that serves `model`'s provider, named by the env var that carries it. */
+export declare function subscriptionFor(model: string | undefined): {
+    label: string;
+    command: string;
+    provider: string;
+    env: string;
+} | undefined;
+/** a provider id's display name, e.g. `openai` → OpenAI. */
+export declare function providerDisplayName(id: string | null | undefined): string | undefined;
 /**
  * The provider rejected a credential we checked before the agent started, and
  * nothing else on the account can serve this run. Names the credential and the
@@ -201,8 +235,8 @@ export type RefusedCredential = {
 };
 /**
  * The credential pool probed every credential configured for the model and
- * none can serve it. One bullet per credential: the probe's own verdict, quoted,
- * plus the remedy its kind and status call for — never inferred from the prose.
+ * none can serve it. One sentence per credential, from its kind and status —
+ * never inferred from the prose — with the probe's own verdicts collapsed below.
  */
 export declare function buildCredentialPoolRefusedError(params: {
     model: string;
@@ -213,10 +247,16 @@ export declare function buildCredentialPoolRefusedError(params: {
 /**
  * Friendly Markdown summary for both the missing-key and invalid-key cases.
  * Used in the catch / result-failure paths in `main.ts` to overwrite the raw
- * agent error before it's posted to the PR progress comment.
+ * agent error before it's posted to the PR progress comment. `model` names the
+ * subscription in play — guessing it from the env once told a GPT run its Claude
+ * subscription was rejected — and `output`, the provider's own words, is
+ * collapsed under the copy.
  */
 export declare function formatApiKeyErrorSummary(params: {
     owner: string;
     name: string;
     raw: string;
+    model?: string | undefined;
+    credential?: string | undefined;
+    output?: string | undefined;
 }): string;

package/dist/utils/billingErrors.d.ts

@@ -41,7 +41,9 @@ export declare class BillingError extends Error {
  * GH Actions apply whatever retry policy the workflow has configured.
  */
 export declare class TransientError extends Error {
-    constructor(message: string);
+    /** the customer-facing follow-up to `message`, which is the headline. */
+    detail: string;
+    constructor(message: string, detail?: string);
 }
 /**
  * Why the org commercial gate refused a run (billing model v2), resolved by
@@ -114,6 +116,7 @@ export declare function formatBillingErrorSummary(error: BillingError, owner: st
 /**
  * Render a TransientError as user-facing markdown. Distinct framing from
  * BillingError so the user doesn't read an alarm and assume their card
- * failed, this branch is "our fault, retry shortly", not theirs.
+ * failed, this branch is "our fault, retry shortly", not theirs. Both parts are
+ * ours and customer-ready; the server's own wording goes to the log.
  */
-export declare function formatTransientErrorSummary(error: TransientError, owner: string): string;
+export declare function formatTransientErrorSummary(error: TransientError): string;

package/dist/utils/buildPullfrogFooter.d.ts

@@ -1,4 +1,18 @@
 export declare const PULLFROG_DIVIDER = "<!-- PULLFROG_DIVIDER_DO_NOT_REMOVE_PLZ -->";
+/**
+ * A run whose configured model was swapped for one Pullfrog could fund. `trial`
+ * carries the account's remaining trial credits, as run-context counted them
+ * when the run started, so the disclosure can say how much is left; undefined
+ * when the server predates the figure.
+ */
+export type ModelClamp = {
+    from: string;
+    reason: "card" | "noRouterPath" | "oss";
+} | {
+    from: string;
+    reason: "trial";
+    creditsLeftUsd: number | undefined;
+};
 export interface WorkflowRunFooterInfo {
     owner: string;
     repo: string;
@@ -27,10 +41,7 @@ export interface BuildPullfrogFooterParams {
      * provider-key nudge — so the downgrade is visible rather than silently
      * presenting Kimi as the pick.
      */
-    clamped?: {
-        from: string;
-        reason: "card" | "noRouterPath" | "oss" | "trial";
-    } | undefined;
+    clamped?: ModelClamp | undefined;
     /**
      * true when the run used the default proxy model only because no model was
      * selected (Router billing + "auto"). the footer appends a note nudging the
@@ -47,6 +58,8 @@ export interface BuildPullfrogFooterParams {
     /** repo owner, used to deep-link the trial disclosure at that account's own
      * console rather than the generic landing page. */
     owner?: string | undefined;
+    /** a failure comment: no 𝕏 link, model nudge or trial disclosure under an error. */
+    failed?: boolean | undefined;
 }
 /**
  * build a pullfrog footer with configurable parts

package/dist/utils/errorReport.d.ts

@@ -2,7 +2,6 @@ import { type ToolState } from "../toolState.ts";
 interface ReportErrorParams {
     toolState: ToolState;
     error: string;
-    title?: string;
     /**
      * When the run has no pre-existing progress comment to update (silent
      * IncrementalReview / pull_request_synchronize, mode-less polls), create

package/dist/utils/failureBody.d.ts

@@ -0,0 +1,27 @@
+export type FailureLink = {
+    label: string;
+    url: string;
+};
+/**
+ * The one shape every failure comment takes: a bold, sentence-case headline that
+ * names the cause, then at most a short paragraph or a list of two or more, then
+ * the error or the tool's own output, then at most two links. Built here rather
+ * than per message so those rules hold for every message at once.
+ *
+ * `error` is shown open, for when the error IS the explanation (an unrecognized
+ * failure). `details` is collapsed, for output that backs up a headline we
+ * already wrote. Free of imports: `billingErrors.ts` reaches client bundles
+ * through `action/internal`.
+ */
+export declare function renderFailure(params: {
+    headline: string;
+    detail?: string | undefined;
+    list?: [string, string, ...string[]] | undefined;
+    error?: string | undefined;
+    details?: {
+        summary: string;
+        text: string;
+    } | undefined;
+    links?: [] | [FailureLink] | [FailureLink, FailureLink] | undefined;
+}): string;
+export declare const DISCORD_LINK: FailureLink;

package/dist/utils/leapingComment.d.ts

@@ -9,3 +9,12 @@
  */
 export declare const LEAPING_INTO_ACTION_PREFIX = "Leaping into action";
 export declare function isLeapingIntoActionCommentBody(body: string): boolean;
+/** the spinner on a to-do list's in-progress item. */
+export declare const TODO_SPINNER_URL = "https://uploads.pullfrog.com/Progress%20Indicator.gif";
+/**
+ * A live to-do list: one item still carries the spinner. Every finished body — a
+ * final summary, a salvaged answer, an error report — renders with in-progress
+ * items completed, so the spinner is only ever on a list whose run is still going
+ * or died without writing again.
+ */
+export declare function isLiveChecklistCommentBody(body: string): boolean;

package/dist/utils/proxy.d.ts

@@ -61,6 +61,7 @@ export declare function runProxyResolution(ctx: {
 export declare function resolveTrialFallback(ctx: {
     payload: ResolvedPayload;
     configuredModel: string | undefined;
+    creditsLeftUsd: number | undefined;
     oidcCredentials: OidcCredentials | null;
     repo: {
         owner: string;

package/dist/utils/roleMirror.d.ts

@@ -42,8 +42,9 @@ import type { GitHubAppPermissions } from "./github.ts";
  *   wiki/autonomous-maintenance.md's "no injected instruction can cause a
  *   merge" still true. Legitimate pushes go through `push_branch`, which
  *   enforces the branch rules.
- * - `checks` is absent for the same class of reason: no human role grants it,
- *   and it would let the agent post its own passing `pullfrog-approval` status
+ * - `checks` is `read`, never `write`, for the same class of reason: every role
+ *   can read a PR's check runs, but no human role can write one, and write would
+ *   let the agent post its own passing `pullfrog-approval` status
  *   (see wiki/review-approval.md).
  * - Every qualifying role therefore receives the SAME set. The role decides
  *   whether a token is minted at all, not how wide it is — `admin`, `maintain`

package/dist/utils/runContext.d.ts

@@ -100,6 +100,9 @@ export interface RunContext {
      * run — the runner may mint a subsidized efficient-tier key if, and only if,
      * its own key search comes up dry. see the run-context route. */
     trialFallback?: boolean | undefined;
+    /** the trial account's remaining funded credits, in USD, when it is inside its
+     * trial at all. zero or below means the credits are used up. */
+    trialCreditsLeftUsd?: number | undefined;
 }
 /**
  * fetch run context from Pullfrog API

package/dist/utils/runContextData.d.ts

@@ -29,6 +29,8 @@ export interface RunContextData {
      * own key search comes up dry. a permission, not a routing decision — the
      * server cannot see workflow `env:` keys. see `RunContext.trialFallback`. */
     trialFallback?: boolean | undefined;
+    /** see `RunContext.trialCreditsLeftUsd`. */
+    trialCreditsLeftUsd?: number | undefined;
 }
 interface ResolveRunContextDataParams {
     octokit: OctokitWithPlugins;