From 155d982821e58008738c46d1795ff1b648af6ad8 Mon Sep 17 00:00:00 2001
From: ryan-crabbe-berri <ryan@berri.ai>
Date: Sun, 13 Sep 2026 16:17:45 -0700
Subject: [PATCH] ci(duplicate-check): require DUPLICATE_CHECK_MODEL instead of
 defaulting to gpt-5.6

The baked-in default meant a repo that never set the variable silently
got the most expensive candidate. Cost per issue spans roughly 20x
across the models this can run on, so the workflow now fails with a
clear message rather than picking one.
---
 .github/workflows/duplicate_issue_check.yml | 10 ++++++++--
 1 file changed, 8 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/duplicate_issue_check.yml b/.github/workflows/duplicate_issue_check.yml
index 8b5e0877539..b12f894328e 100644
--- a/.github/workflows/duplicate_issue_check.yml
+++ b/.github/workflows/duplicate_issue_check.yml
@@ -66,9 +66,10 @@ jobs:
           gh issue view "${ISSUE_NUMBER}" --repo "${GITHUB_REPOSITORY}" \
             --json number,title,body,createdAt > issue.json
 
-      - name: Require the LiteLLM endpoint
+      - name: Require the LiteLLM endpoint and model
         env:
           LITELLM_API_BASE: ${{ vars.LITELLM_API_BASE }}
+          DUPLICATE_CHECK_MODEL: ${{ vars.DUPLICATE_CHECK_MODEL }}
         run: |
           set -euo pipefail
           if [ -z "${LITELLM_API_BASE}" ]; then
@@ -76,6 +77,11 @@ jobs:
             echo "Without it the LiteLLM virtual key would be sent to api.openai.com and rejected." >&2
             exit 1
           fi
+          if [ -z "${DUPLICATE_CHECK_MODEL}" ]; then
+            echo "Set the DUPLICATE_CHECK_MODEL repo variable to a model your LiteLLM deployment serves." >&2
+            echo "There is no default on purpose: the cost per issue varies by 20x across candidates." >&2
+            exit 1
+          fi
 
       - name: Run Codex
         id: codex
@@ -90,7 +96,7 @@ jobs:
           sandbox: read-only
           # read-only denies network, and the whole method is searching the tracker with gh
           codex-args: '["-c", "sandbox_permissions=[\"network-full-access\"]"]'
-          model: ${{ vars.DUPLICATE_CHECK_MODEL || 'gpt-5.6' }}
+          model: ${{ vars.DUPLICATE_CHECK_MODEL }}
           # Issue authors have no write access and the action refuses them by default; the
           # prompt is fixed, the sandbox read-only, and the only token is read-only on a public repo
           allow-users: "*"