@aibridge/cli 0.7.0 → 0.9.0

package/README.md

@@ -39,7 +39,7 @@ npx -y @aibridge/cli subagent --model xai-grok/grok-4.6 "summarize the architect
 |---|---|
 | `aibridge plan --model xai-grok/grok-4.6 --out plan.md "<task>"` | You want a delegate model to study the repo and expand a task into a detailed, reviewable **plan file** before any code is written |
 | `aibridge implement --model google-antigravity/gemini-3.7-flash <plan.md>` | You have an approved plan file and want it executed in place — with your project's **real typecheck and tests** run until green |
-| `aibridge review --model xai-grok/grok-4.6 --out review.md [--plan <plan.md>]` | You want a **different model** to pressure-test the working-tree diff against the plan contract (over-reach is a finding) — or to review the plan itself before implementing |
+| `aibridge review --model xai-grok/grok-4.6 --out review.md [--plan <plan.md>]` | You want a **different model** to pressure-test a diff against the plan contract, where over-reach is a finding. `--base <ref>` reviews any commit range, not just the working tree. On a clean tree it reviews the plan itself |
 | `aibridge subagent --model xai-grok/grok-4.6 "<task>"` | A self-contained task deserves a concurrent delegate, a cross-model second opinion, or a red-team pass |
 | `aibridge image-gen --model openai-codex/gpt-5.6-sol --out out.png "<prompt>"` | You need a real raster image — on a Codex, Antigravity, or Grok seat, with render verification |
 | `aibridge models [--json]` | You need the exact facts for every registered model seat (accepted efforts, image format, pinned model ID) |

package/dist/cli.mjs

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { r as runCli, t as buildContext } from "./context-DJtEcg6f.mjs";
+import { r as runCli, t as buildContext } from "./context-BQgclUqy.mjs";
 //#region src/cli.ts
 await runCli(buildContext(process), process.argv.slice(2));
 //#endregion

package/dist/{context-DJtEcg6f.mjs → context-BQgclUqy.mjs}

@@ -312,6 +312,123 @@ function getDriver(backend) {
 	return driver;
 }
 //#endregion
+//#region src/quotaPreflight.ts
+function evaluateAgyPreflight(snapshot, backendModel) {
+	const quota = findModelQuota(snapshot, backendModel);
+	if (!quota) return {
+		ok: true,
+		warning: `model "${backendModel}" not in quota snapshot; proceeding`
+	};
+	if (quota.exhausted) {
+		let resetAt = quota.resetTime;
+		if (!resetAt) {
+			for (const group of snapshot.groups) if (group.displayName.includes("Gemini")) {
+				for (const bucket of group.buckets) if (bucket.resetTime) {
+					if (!resetAt || new Date(bucket.resetTime).getTime() < new Date(resetAt).getTime()) resetAt = bucket.resetTime;
+				}
+			}
+		}
+		return {
+			ok: false,
+			kind: "quota",
+			message: `agy model "${backendModel}" is quota-exhausted`,
+			resetAt
+		};
+	}
+	return { ok: true };
+}
+function evaluateCodexPreflight(snapshot) {
+	if (snapshot.limitReached) return {
+		ok: false,
+		kind: "quota",
+		message: "codex quota limit reached",
+		resetAt: snapshot.windows.find((w) => w.resetAt)?.resetAt
+	};
+	const exhaustedWindow = snapshot.windows.find((w) => w.usedPercent >= 100);
+	if (exhaustedWindow) return {
+		ok: false,
+		kind: "quota",
+		message: "codex quota limit reached",
+		resetAt: exhaustedWindow.resetAt
+	};
+	return { ok: true };
+}
+function evaluateGrokPreflight(snapshot) {
+	if (snapshot.usedPercent !== void 0 && snapshot.usedPercent >= 100) return {
+		ok: false,
+		kind: "quota",
+		message: "grok credit quota exhausted",
+		resetAt: snapshot.periodEnd
+	};
+	return { ok: true };
+}
+async function preflightModel(resolved) {
+	if (resolved.spec.backend === "codex") return preflightCodex();
+	if (resolved.spec.backend === "grok") return preflightGrok();
+	if (resolved.spec.backend !== "agy") return { ok: true };
+	try {
+		return evaluateAgyPreflight(await fetchAgyQuota(), backendModelId(resolved));
+	} catch (err) {
+		if (isAuthExpired(err)) return {
+			ok: false,
+			kind: "auth",
+			message: err.message,
+			resetAt: void 0
+		};
+		return {
+			ok: true,
+			warning: `quota preflight failed (${err.message}); proceeding`
+		};
+	}
+}
+async function preflightCodex() {
+	try {
+		return evaluateCodexPreflight(await fetchCodexQuota());
+	} catch (err) {
+		if (isAuthExpired(err)) return {
+			ok: false,
+			kind: "auth",
+			message: err.message,
+			resetAt: void 0
+		};
+		return {
+			ok: true,
+			warning: `quota preflight failed (${err.message}); proceeding`
+		};
+	}
+}
+async function preflightGrok() {
+	try {
+		return evaluateGrokPreflight(await fetchGrokQuota());
+	} catch (err) {
+		if (isAuthExpired(err)) return {
+			ok: false,
+			kind: "auth",
+			message: err.message,
+			resetAt: void 0
+		};
+		return {
+			ok: true,
+			warning: `quota preflight failed (${err.message}); proceeding`
+		};
+	}
+}
+function formatReset$1(resetTime) {
+	if (!resetTime) return "-";
+	const ms = new Date(resetTime).getTime() - Date.now();
+	if (Number.isNaN(ms)) return resetTime;
+	if (ms <= 0) return "now";
+	const mins = Math.round(ms / 6e4);
+	const rel = mins < 60 ? `${mins}m` : `${Math.floor(mins / 60)}h${mins % 60}m`;
+	return `${new Date(resetTime).toLocaleTimeString()} (in ${rel})`;
+}
+function renderPreflightRefusal(cmd, verdict) {
+	if (verdict.kind === "auth") return `aibridge ${cmd}: refusing — ${verdict.message}. Running with --no-preflight would only fail unauthenticated later. Or use a different --model.`;
+	const resetClause = verdict.resetAt ? ` Resets ${formatReset$1(verdict.resetAt)}.` : "";
+	const fallback = cmd === "image-gen" ? "Use --no-preflight to override, or another image seat (--model openai-codex/gpt-5.6-sol | google-antigravity/gemini-3.7-flash | xai-grok/grok-4.6)." : "Use --no-preflight to override, or a claude-backend fallback (subagent --model sonnet|opus — bills the Claude subscription).";
+	return `aibridge ${cmd}: refusing — ${verdict.message}.${resetClause} ${fallback}`;
+}
+//#endregion
 //#region src/transparency.ts
 const CHROMA_CLAUSE = "The entire background must be a perfectly flat solid #00ff00 chroma-key green. The background must be one uniform colour with no shadows, gradients, texture, reflections, or lighting variation. Keep the subject fully separated from the background with crisp edges. Do not use #00ff00 or any similar green anywhere on the subject. No cast shadow, no contact shadow, no reflection.";
 const NATIVE_ALPHA_CLAUSE = "Render the subject on a fully transparent background — PNG with a real alpha channel, no backdrop, no canvas colour, no cast shadow.";
@@ -419,6 +536,15 @@ async function imageGen$1(flags, prompt) {
 	}
 	const driver = getDriver(model.spec.backend);
 	if (!driver.generateImage) return fail(formatImageGenModelError(inputSlug, model));
+	if (flags.preflight) {
+		const verdict = await preflightModel(model);
+		if (!verdict.ok) {
+			this.process.stderr.write(`${renderPreflightRefusal("image-gen", verdict)}\n`);
+			this.process.exitCode = 3;
+			return;
+		}
+		if (verdict.warning) this.process.stderr.write(`aibridge image-gen: ${verdict.warning}\n`);
+	}
 	const minBytes = model.spec.backend === "codex" ? MIN_REAL_BYTES_CODEX : MIN_REAL_BYTES_TOOL;
 	const work = mkdtempSync(join(tmpdir(), "aibridge-imagegen-"));
 	const effectivePrompt = flags.transparent ? `${prompt} ${alpha === "chroma" ? CHROMA_CLAUSE : NATIVE_ALPHA_CLAUSE}` : prompt;
@@ -585,6 +711,11 @@ const imageGen = buildCommand({
 				optional: true,
 				brief: "Max seconds to wait for the render (default: 600)"
 			},
+			preflight: {
+				kind: "boolean",
+				default: true,
+				brief: "Check model quota before rendering (use --no-preflight to skip)"
+			},
 			json: {
 				kind: "boolean",
 				withNegated: false,
@@ -626,122 +757,6 @@ async function delegate(opts, driver = getDriver(opts.model.spec.backend)) {
 	return result;
 }
 //#endregion
-//#region src/quotaPreflight.ts
-function evaluateAgyPreflight(snapshot, backendModel) {
-	const quota = findModelQuota(snapshot, backendModel);
-	if (!quota) return {
-		ok: true,
-		warning: `model "${backendModel}" not in quota snapshot; proceeding`
-	};
-	if (quota.exhausted) {
-		let resetAt = quota.resetTime;
-		if (!resetAt) {
-			for (const group of snapshot.groups) if (group.displayName.includes("Gemini")) {
-				for (const bucket of group.buckets) if (bucket.resetTime) {
-					if (!resetAt || new Date(bucket.resetTime).getTime() < new Date(resetAt).getTime()) resetAt = bucket.resetTime;
-				}
-			}
-		}
-		return {
-			ok: false,
-			kind: "quota",
-			message: `agy model "${backendModel}" is quota-exhausted`,
-			resetAt
-		};
-	}
-	return { ok: true };
-}
-function evaluateCodexPreflight(snapshot) {
-	if (snapshot.limitReached) return {
-		ok: false,
-		kind: "quota",
-		message: "codex quota limit reached",
-		resetAt: snapshot.windows.find((w) => w.resetAt)?.resetAt
-	};
-	const exhaustedWindow = snapshot.windows.find((w) => w.usedPercent >= 100);
-	if (exhaustedWindow) return {
-		ok: false,
-		kind: "quota",
-		message: "codex quota limit reached",
-		resetAt: exhaustedWindow.resetAt
-	};
-	return { ok: true };
-}
-function evaluateGrokPreflight(snapshot) {
-	if (snapshot.usedPercent !== void 0 && snapshot.usedPercent >= 100) return {
-		ok: false,
-		kind: "quota",
-		message: "grok credit quota exhausted",
-		resetAt: snapshot.periodEnd
-	};
-	return { ok: true };
-}
-async function preflightModel(resolved) {
-	if (resolved.spec.backend === "codex") return preflightCodex();
-	if (resolved.spec.backend === "grok") return preflightGrok();
-	if (resolved.spec.backend !== "agy") return { ok: true };
-	try {
-		return evaluateAgyPreflight(await fetchAgyQuota(), backendModelId(resolved));
-	} catch (err) {
-		if (isAuthExpired(err)) return {
-			ok: false,
-			kind: "auth",
-			message: err.message,
-			resetAt: void 0
-		};
-		return {
-			ok: true,
-			warning: `quota preflight failed (${err.message}); proceeding`
-		};
-	}
-}
-async function preflightCodex() {
-	try {
-		return evaluateCodexPreflight(await fetchCodexQuota());
-	} catch (err) {
-		if (isAuthExpired(err)) return {
-			ok: false,
-			kind: "auth",
-			message: err.message,
-			resetAt: void 0
-		};
-		return {
-			ok: true,
-			warning: `quota preflight failed (${err.message}); proceeding`
-		};
-	}
-}
-async function preflightGrok() {
-	try {
-		return evaluateGrokPreflight(await fetchGrokQuota());
-	} catch (err) {
-		if (isAuthExpired(err)) return {
-			ok: false,
-			kind: "auth",
-			message: err.message,
-			resetAt: void 0
-		};
-		return {
-			ok: true,
-			warning: `quota preflight failed (${err.message}); proceeding`
-		};
-	}
-}
-function formatReset$1(resetTime) {
-	if (!resetTime) return "-";
-	const ms = new Date(resetTime).getTime() - Date.now();
-	if (Number.isNaN(ms)) return resetTime;
-	if (ms <= 0) return "now";
-	const mins = Math.round(ms / 6e4);
-	const rel = mins < 60 ? `${mins}m` : `${Math.floor(mins / 60)}h${mins % 60}m`;
-	return `${new Date(resetTime).toLocaleTimeString()} (in ${rel})`;
-}
-function renderPreflightRefusal(cmd, verdict) {
-	if (verdict.kind === "auth") return `aibridge ${cmd}: refusing — ${verdict.message}. Running with --no-preflight would only send the delegate in unauthenticated. Or use a different --model.`;
-	const resetClause = verdict.resetAt ? ` Resets ${formatReset$1(verdict.resetAt)}.` : "";
-	return `aibridge ${cmd}: refusing — ${verdict.message}.${resetClause} Use --no-preflight to override, or a claude-backend fallback (subagent --model sonnet|opus — bills the Claude subscription).`;
-}
-//#endregion
 //#region src/runlog.ts
 function getTimestamp() {
 	const d = /* @__PURE__ */ new Date();
@@ -1385,7 +1400,7 @@ async function review$1(flags) {
 	const run = startRun("review", `${model.spec.slug}: ${modeDetail}`);
 	const absOutPath = isAbsolute(flags.out) ? flags.out : resolve(cwd, flags.out);
 	let reviewPrompt;
-	if (isDirty) reviewPrompt = `You are an expert code reviewer. Inspect the working tree diff against base '${baseRef}' and untracked files at ${cwd}.\n` + (absPlanPath ? `Compare the implementation against the plan contract at ${absPlanPath}. Any file modified or feature added outside the plan contract counts as over-reach (severity: major unless harmful, then critical).\n` : "") + `Write your detailed review report to the file ${absOutPath}. For each finding, include file:line, severity (critical|major|minor), and rationale.\nYour final answer (last message) must consist of EXACTLY ONE VERDICT LINE:\nEither: "PASS"\nOr: "FINDINGS: <c> critical, <m> major, <n> minor"`;
+	if (isDirty) reviewPrompt = `You are an expert code reviewer. Inspect the diff produced by \`git diff ${baseRef}\` (this covers committed and uncommitted changes) plus any untracked files at ${cwd}.\n` + (absPlanPath ? `Compare the implementation against the plan contract at ${absPlanPath}. Any file modified or feature added outside the plan contract counts as over-reach (severity: major unless harmful, then critical).\n` : "") + `Write your detailed review report to the file ${absOutPath}. For each finding, include file:line, severity (critical|major|minor), and rationale.\nYour final answer (last message) must consist of EXACTLY ONE VERDICT LINE:\nEither: "PASS"\nOr: "FINDINGS: <c> critical, <m> major, <n> minor"`;
 	else reviewPrompt = `You are an expert architecture reviewer. Inspect the plan contract file at ${absPlanPath}.\nReview the plan for soundness, missing edge cases, safety, and feasibility.\nWrite your detailed review report to the file ${absOutPath}. For each finding, include severity (critical|major|minor) and rationale.\nYour final answer (last message) must consist of EXACTLY ONE VERDICT LINE:\nEither: "PASS"\nOr: "FINDINGS: <c> critical, <m> major, <n> minor"`;
 	const outcome = await delegate({
 		model,
@@ -1447,7 +1462,7 @@ const review = buildCommand({
 			kind: "parsed",
 			parse: String,
 			optional: true,
-			brief: "Base git ref to diff against (default: HEAD)"
+			brief: "Base git ref or range to diff against, e.g. HEAD~3 or main (default: HEAD)"
 		},
 		out: {
 			kind: "parsed",
@@ -1467,7 +1482,7 @@ const review = buildCommand({
 		}
 	} },
 	docs: {
-		brief: "Review working tree diff or plan contract",
+		brief: "Review a diff (working tree, or any commit range via --base) or a plan contract",
 		fullDescription: fullDescription$2
 	}
 });
@@ -1793,4 +1808,4 @@ function buildContext(process) {
 	return { process };
 }
 //#endregion
-export { supportsImageGen as S, backendModelId as _, readRunLogs as a, listModelHelpLines as b, evaluateCodexPreflight as c, renderPreflightRefusal as d, delegate as f, MODELS as g, positiveIntSeconds as h, listRuns as i, preflightCodex as l, nonEmptyPrompt as m, app as n, startRun as o, getDriver as p, runCli as r, evaluateAgyPreflight as s, buildContext as t, preflightModel as u, formatImageGenModelError as v, resolveModel as x, formatUnknownModelError as y };
+export { supportsImageGen as S, backendModelId as _, readRunLogs as a, listModelHelpLines as b, evaluateAgyPreflight as c, preflightModel as d, renderPreflightRefusal as f, MODELS as g, positiveIntSeconds as h, listRuns as i, evaluateCodexPreflight as l, nonEmptyPrompt as m, app as n, startRun as o, getDriver as p, runCli as r, delegate as s, buildContext as t, preflightCodex as u, formatImageGenModelError as v, resolveModel as x, formatUnknownModelError as y };

package/dist/index.mjs

@@ -1,2 +1,2 @@
-import { S as supportsImageGen, _ as backendModelId, a as readRunLogs, b as listModelHelpLines, c as evaluateCodexPreflight, d as renderPreflightRefusal, f as delegate, g as MODELS, h as positiveIntSeconds, i as listRuns, l as preflightCodex, m as nonEmptyPrompt, n as app, o as startRun, p as getDriver, r as runCli, s as evaluateAgyPreflight, t as buildContext, u as preflightModel, v as formatImageGenModelError, x as resolveModel, y as formatUnknownModelError } from "./context-DJtEcg6f.mjs";
+import { S as supportsImageGen, _ as backendModelId, a as readRunLogs, b as listModelHelpLines, c as evaluateAgyPreflight, d as preflightModel, f as renderPreflightRefusal, g as MODELS, h as positiveIntSeconds, i as listRuns, l as evaluateCodexPreflight, m as nonEmptyPrompt, n as app, o as startRun, p as getDriver, r as runCli, s as delegate, t as buildContext, u as preflightCodex, v as formatImageGenModelError, x as resolveModel, y as formatUnknownModelError } from "./context-BQgclUqy.mjs";
 export { MODELS, app, backendModelId, buildContext, delegate, evaluateAgyPreflight, evaluateCodexPreflight, formatImageGenModelError, formatUnknownModelError, getDriver, listModelHelpLines, listRuns, nonEmptyPrompt, positiveIntSeconds, preflightCodex, preflightModel, readRunLogs, renderPreflightRefusal, resolveModel, runCli, startRun, supportsImageGen };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aibridge/cli",
-  "version": "0.7.0",
+  "version": "0.9.0",
   "description": "CLI that bridges tasks to AI CLIs on your machine (plan / implement / review / subagent / image-gen)",
   "type": "module",
   "license": "MIT",
@@ -36,11 +36,11 @@
   "dependencies": {
     "@stricli/core": "1.3.0",
     "sharp": "^0.35.3",
-    "@aibridge/driver-agy": "0.7.0",
-    "@aibridge/proc": "0.7.0",
-    "@aibridge/driver-grok": "0.7.0",
-    "@aibridge/driver-codex": "0.7.0",
-    "@aibridge/driver-claude": "0.7.0"
+    "@aibridge/proc": "0.9.0",
+    "@aibridge/driver-grok": "0.9.0",
+    "@aibridge/driver-codex": "0.9.0",
+    "@aibridge/driver-agy": "0.9.0",
+    "@aibridge/driver-claude": "0.9.0"
   },
   "devDependencies": {
     "tsdown": "0.22.14"

package/src/commands/image-gen/command.ts

@@ -51,6 +51,11 @@ export const imageGen = buildCommand({
         optional: true,
         brief: 'Max seconds to wait for the render (default: 600)',
       },
+      preflight: {
+        kind: 'boolean',
+        default: true,
+        brief: 'Check model quota before rendering (use --no-preflight to skip)',
+      },
       json: {
         kind: 'boolean',
         withNegated: false,

package/src/commands/image-gen/impl.test.ts

@@ -30,6 +30,7 @@ const flags = (over: Partial<ImageGenFlags>): ImageGenFlags => ({
   out: '/tmp/out.jpg',
   json: false,
   transparent: false,
+  preflight: false,
   ...over,
 });
 

package/src/commands/image-gen/impl.ts

@@ -25,6 +25,7 @@ import {
   resolveModel,
   supportsImageGen,
 } from '../../models.ts';
+import { preflightModel, renderPreflightRefusal } from '../../quotaPreflight.ts';
 import {
   CHROMA_CLAUSE,
   chromaKeyToPng,
@@ -38,6 +39,7 @@ export interface ImageGenFlags {
   readonly aspectRatio?: string;
   readonly image?: string;
   readonly timeout?: number;
+  readonly preflight: boolean;
   readonly json: boolean;
   readonly transparent: boolean;
 }
@@ -122,6 +124,18 @@ export default async function imageGen(
     return fail(formatImageGenModelError(inputSlug, model));
   }
 
+  // Last gate before a paid render. Every check above is local and must stay
+  // above it, so a bad --out or aspect ratio still fails without a network call.
+  if (flags.preflight) {
+    const verdict = await preflightModel(model);
+    if (!verdict.ok) {
+      this.process.stderr.write(`${renderPreflightRefusal('image-gen', verdict)}\n`);
+      this.process.exitCode = 3;
+      return;
+    }
+    if (verdict.warning) this.process.stderr.write(`aibridge image-gen: ${verdict.warning}\n`);
+  }
+
   const minBytes = model.spec.backend === 'codex' ? MIN_REAL_BYTES_CODEX : MIN_REAL_BYTES_TOOL;
   const work = mkdtempSync(join(tmpdir(), 'aibridge-imagegen-'));
 

package/src/commands/review/command.ts

@@ -29,7 +29,7 @@ export const review = buildCommand({
         kind: 'parsed',
         parse: String,
         optional: true,
-        brief: 'Base git ref to diff against (default: HEAD)',
+        brief: 'Base git ref or range to diff against, e.g. HEAD~3 or main (default: HEAD)',
       },
       out: {
         kind: 'parsed',
@@ -50,7 +50,7 @@ export const review = buildCommand({
     },
   },
   docs: {
-    brief: 'Review working tree diff or plan contract',
+    brief: 'Review a diff (working tree, or any commit range via --base) or a plan contract',
     fullDescription,
   },
 });

package/src/commands/review/impl.ts

@@ -145,7 +145,7 @@ export default async function review(this: LocalContext, flags: ReviewFlags): Pr
   let reviewPrompt: string;
   if (isDirty) {
     reviewPrompt =
-      `You are an expert code reviewer. Inspect the working tree diff against base '${baseRef}' and untracked files at ${cwd}.\n` +
+      `You are an expert code reviewer. Inspect the diff produced by \`git diff ${baseRef}\` (this covers committed and uncommitted changes) plus any untracked files at ${cwd}.\n` +
       (absPlanPath
         ? `Compare the implementation against the plan contract at ${absPlanPath}. Any file modified or feature added outside the plan contract counts as over-reach (severity: major unless harmful, then critical).\n`
         : '') +

package/src/quotaPreflight.test.ts

@@ -234,10 +234,22 @@ test('renderPreflightRefusal: auth kind uses unauthenticated wording', () => {
   });
   assert.strictEqual(
     msg,
-    'aibridge plan: refusing — grok session expired (401) — run `grok login`, then retry. Running with --no-preflight would only send the delegate in unauthenticated. Or use a different --model.',
+    'aibridge plan: refusing — grok session expired (401) — run `grok login`, then retry. Running with --no-preflight would only fail unauthenticated later. Or use a different --model.',
   );
 });
 
+test('renderPreflightRefusal: image-gen quota refusal points at other image seats', () => {
+  const msg = renderPreflightRefusal('image-gen', {
+    kind: 'quota',
+    message: 'grok credit quota exhausted',
+    resetAt: undefined,
+  });
+  // No claude seat renders images, so the delegation fallback would be dead advice.
+  assert.ok(!msg.includes('claude-backend fallback'));
+  assert.ok(msg.includes('another image seat'));
+  assert.ok(msg.includes('openai-codex/gpt-5.6-sol'));
+});
+
 test('renderPreflightRefusal: quota kind keeps override wording', () => {
   const msg = renderPreflightRefusal('subagent', {
     kind: 'quota',

package/src/quotaPreflight.ts

@@ -141,8 +141,16 @@ export function renderPreflightRefusal(
   verdict: { kind: 'auth' | 'quota'; message: string; resetAt: string | undefined },
 ): string {
   if (verdict.kind === 'auth') {
-    return `aibridge ${cmd}: refusing — ${verdict.message}. Running with --no-preflight would only send the delegate in unauthenticated. Or use a different --model.`;
+    // "the delegate" was wrong for image-gen, which has no delegate — the grok
+    // seat is a direct API call. Verified: --no-preflight there just fails at
+    // the render with exit 1.
+    return `aibridge ${cmd}: refusing — ${verdict.message}. Running with --no-preflight would only fail unauthenticated later. Or use a different --model.`;
   }
   const resetClause = verdict.resetAt ? ` Resets ${formatReset(verdict.resetAt)}.` : '';
-  return `aibridge ${cmd}: refusing — ${verdict.message}.${resetClause} Use --no-preflight to override, or a claude-backend fallback (subagent --model sonnet|opus — bills the Claude subscription).`;
+  // The claude fallback is delegation-only advice: no claude seat renders images.
+  const fallback =
+    cmd === 'image-gen'
+      ? 'Use --no-preflight to override, or another image seat (--model openai-codex/gpt-5.6-sol | google-antigravity/gemini-3.7-flash | xai-grok/grok-4.6).'
+      : 'Use --no-preflight to override, or a claude-backend fallback (subagent --model sonnet|opus — bills the Claude subscription).';
+  return `aibridge ${cmd}: refusing — ${verdict.message}.${resetClause} ${fallback}`;
 }