harness: point a missing gated model at the access form

Cargo.toml

@@ -5,7 +5,7 @@
 [package]
 name = "wally"
 # Must equal [product] version in versions.toml (scripts/ci/check-versions.py).
-version = "0.8.16"
+version = "0.8.17"
 edition = "2021"
 rust-version = "1.93"
 license = "Apache-2.0"

Formula/wally.rb

@@ -3,15 +3,15 @@
 class Wally < Formula
   desc "Run models on your machine or your RunAnywhere account"
   homepage "https://github.com/RunanywhereAI/wally"
-  version "0.8.16"
+  version "0.8.17"
   license "MIT"
 
   # macOS arm64 ships the Swift MLX host
   # (llama.cpp + ONNX + Sherpa + MLX). Linux is not in this cut.
   on_macos do
     on_arm do
-      url "https://github.com/RunanywhereAI/wally/releases/download/v0.8.16/wally-0.8.16-macos-arm64.tar.gz"
-      # Placeholder -- the v0.8.16 release has not published a wally-named asset
+      url "https://github.com/RunanywhereAI/wally/releases/download/v0.8.17/wally-0.8.17-macos-arm64.tar.gz"
+      # Placeholder -- the v0.8.17 release has not published a wally-named asset
       # yet. scripts/release/update-tap.sh re-stamps this from the real release
       # checksum; a stale value here fails brew install's own hash check
       # rather than installing something unverified.

docs/EDITORS.md

@@ -411,8 +411,8 @@ account.
 
 Some models need approval before an account can use them. If a model is not on
 your account's list, wally says so. That can also mean a mistyped or nonexistent
-id: check the id against `GET /v1/models` first, and request access in the
-console only if the model is gated.
+id: check the id against `GET /v1/models` first, and request access at
+https://runwally.com/security/request only if the model is gated.
 
 ## Security tools
 

skills/runanywhere/SKILL.md

@@ -130,9 +130,9 @@ harness; those surfaces refuse it and point back here.
 ## When something is wrong
 
 - **"not signed in"** — `wally account login`.
-- **"not available on this account" or "not on your account's model list"** —
-  that model may need approval. Check the model id first; if it is right and the
-  model is gated, request access in the console. Do not log in again.
+- **"not available on this account"** — that model may need approval. Check
+  the model id first; if it is right and the model is gated, request access at
+  https://runwally.com/security/request. Do not log in again.
 - **DeepSec or VVAH prerequisites missing** — install Node 18+ (DeepSec) or Python 3.11–3.14 (VVAH); see `docs/EDITORS.md`.
 - **"that key is not valid"** — the key was revoked or expired; `wally account login` again.
 - **opencode not installed** — `npm i -g opencode-ai`.

src/harness/harness.rs

@@ -1063,13 +1063,13 @@ pub fn report_not_signed_in() {
     ));
 }
 
-/// What a person is told when a hosted model is not on their account's list:
-/// a model that needs approval is asked for in the console, so this never
-/// sends them to log in again.
+/// What a person is told when a hosted model is not on their account's list.
+/// A model that needs approval is requested on the form, so this never sends
+/// them to log in again.
 pub fn not_on_account_message(model: &str) -> String {
     format!(
-        "'{model}' is not on your account's model list. If it needs approval, request access \
-         in the console."
+        "'{model}' is not available on this account. Request access at \
+         https://runwally.com/security/request"
     )
 }
 
@@ -1489,8 +1489,8 @@ mod tests {
         let message = not_on_account_message("some-model");
         assert_eq!(
             message,
-            "'some-model' is not on your account's model list. If it needs approval, request \
-             access in the console."
+            "'some-model' is not available on this account. Request access at \
+             https://runwally.com/security/request"
         );
         assert!(!message.contains("log in") && !message.contains("login"));
     }

src/harness/hosted.rs

@@ -123,8 +123,8 @@ pub fn hosted_access(console: &ConsoleClient, tool: &str) -> Option<Hosted> {
 
 pub fn not_available_message(model: &str) -> String {
     format!(
-        "'{model}' is not available on this account. If it needs approval, request access in \
-         the console."
+        "'{model}' is not available on this account. Request access at \
+         https://runwally.com/security/request"
     )
 }
 

src/harness/shannon.rs

@@ -90,8 +90,8 @@ then run this again.";
 /// What a person is told when `-m` names a model their account does not have.
 pub fn not_available_message(model: &str) -> String {
     format!(
-        "'{model}' is not available on this account. If it needs approval, request access in \
-         the console."
+        "'{model}' is not available on this account. Request access at \
+         https://runwally.com/security/request"
     )
 }
 
@@ -1141,8 +1141,8 @@ mod tests {
         let models = [model("glm-5.3-flash", 1, 1, false)];
         assert_eq!(
             choose_model(&models, Some("gated-model"), "glm-5.3-flash").unwrap_err(),
-            "'gated-model' is not available on this account. If it needs approval, request \
-             access in the console."
+            "'gated-model' is not available on this account. Request access at \
+             https://runwally.com/security/request"
         );
         assert_eq!(
             choose_model(&models, Some("glm-5.3-flash"), "x").unwrap(),

versions.toml

@@ -7,7 +7,7 @@
 
 [product]
 # wally's own release version; git tag is v<version> (auto-tag.yml reads it here).
-version = "0.8.16"
+version = "0.8.17"
 
 [contracts]
 # Vendored from InferenceInfra at this exact revision.