@indigoai-us/hq-cli 5.345.159 → 5.345.161

package/dist/commands/agents.js

@@ -131,12 +131,6 @@ export function agentCreatePlanLimitFromPayload(status, body) {
             : {}),
     };
 }
-function formatServerPrice(amountMinor, currency) {
-    return new Intl.NumberFormat("en-US", {
-        style: "currency",
-        currency,
-    }).format(amountMinor / 100);
-}
 async function offerAgentCheckout(url) {
     const rl = readline.createInterface({ input: process.stdin, output: process.stderr });
     try {
@@ -146,7 +140,7 @@ async function offerAgentCheckout(url) {
         });
     }
     catch {
-        console.error("Could not open the upgrade page automatically. Use the URL above.");
+        console.error("Could not open the billing page automatically. Use the URL above.");
         return false;
     }
     finally {
@@ -156,7 +150,7 @@ async function offerAgentCheckout(url) {
 /** Print a server-priced plan block without minting or rewriting its URL. */
 export async function surfaceAgentCreatePlanLimit(planLimit, opts = {}) {
     if (isUsageOnly(opts.pricingPlan)) {
-        // Usage pricing (US-012): no Workforce plan to buy. The company adds a
+        // Usage pricing (US-012): no flat plan to buy. The company adds a
         // card and each agent box bills by size from the usage card.
         const card = opts.usageCard ?? BUNDLED_USAGE_CARD;
         for (const line of usageOnlyCardRequiredLines("An agent box", card)) {
@@ -166,13 +160,13 @@ export async function surfaceAgentCreatePlanLimit(planLimit, opts = {}) {
         queueCliLimitNoticeExposure("agents", "refusal", opts.companyUid);
         return;
     }
-    const price = `${formatServerPrice(planLimit.amountMinor, planLimit.currency)}/month`;
-    const reason = `HQ Workforce plan required to create an agent (${price}).`;
+    // The server's price was the flat plan's, which is closed: name no plan or price.
+    const reason = "Agents are not included on this company's current billing.";
     const argv = opts.json ? [...process.argv, "--json"] : process.argv;
     const interactive = canOfferTeamUpgrade(argv);
     if (!planLimit.checkoutUrl) {
         console.error(reason);
-        console.error("Ask a company owner to upgrade before creating an agent.");
+        console.error("Ask a company owner to check the company's Billing page before creating an agent.");
         queueCliLimitNoticeExposure("agents", "refusal", opts.companyUid);
         return;
     }

package/dist/commands/auth.js

@@ -385,7 +385,10 @@ export function registerAuthCommands(program) {
         if (!options.retry) {
             const state = keychain.readKeychainAccessState();
             if (state.deniedAt) {
-                console.log("Keychain access wasn't allowed, so HQ uses ~/.hq/cognito-tokens.json. Run `hq auth keychain --retry` to ask again.");
+                console.log("Keychain access did not complete, so HQ uses ~/.hq/cognito-tokens.json. Run `hq auth keychain --retry` to ask again.");
+            }
+            else if (state.lastFailureAt) {
+                console.log("Keychain access did not complete. HQ uses your saved sign-in instead and can ask again from a terminal. Run `hq auth keychain --retry` to retry now.");
             }
             else if (state.allowedAt) {
                 console.log(chalk.green("HQ can read your sign-in from the Keychain."));
@@ -395,9 +398,7 @@ export function registerAuthCommands(program) {
             }
             return;
         }
-        const state = keychain.readKeychainAccessState();
-        if (!state.allowedAt)
-            console.error(keychain.KEYCHAIN_FIRST_READ_NOTE);
+        console.error(keychain.KEYCHAIN_FIRST_READ_NOTE);
         const result = keychain.readKeychainTokensDetailed({ retry: true, interactive: true, notify: () => { } });
         if (result.outcome === "hit") {
             console.log(result.tokens
@@ -408,7 +409,7 @@ export function registerAuthCommands(program) {
             console.log("No HQ sign-in is saved in the Keychain yet. HQ will use ~/.hq/cognito-tokens.json.");
         }
         else {
-            console.log(chalk.yellow("Keychain access wasn't allowed. HQ will use ~/.hq/cognito-tokens.json. Run `hq auth keychain --retry` to ask again."));
+            console.log(chalk.yellow("Keychain access did not complete. HQ will use ~/.hq/cognito-tokens.json. Run `hq auth keychain --retry` to ask again."));
         }
     });
     authCmd

package/dist/commands/billing-sponsor.d.ts

@@ -2,9 +2,9 @@
  * `hq billing sponsor` — the individual-pull half of plan sponsorship, from the
  * terminal ("ask a company to sponsor me", hq-pro #3609).
  *
- * A person who is over a personal limit has exactly three ways out: pay $50
- * themselves, reduce what they store, or ask a company to cover the $50 plan
- * line. This command is the third one, plus the admin side that answers it.
+ * A person who is over a personal limit has exactly three ways out: pay for
+ * the personal plan themselves, reduce what they store, or ask a company to
+ * cover it. This command is the third one, plus the admin side that answers it.
  *
  *   hq billing sponsor request <company>   — ask that company to cover my plan
  *   hq billing sponsor list                — the queue (admins), or my own
@@ -36,7 +36,7 @@ export declare const PLAN_RESOURCE: "plan";
 /** What a person is told when hq-pro's plan-sponsorship switch is off. */
 export declare const FEATURE_OFF_MESSAGE = "Asking a company to sponsor your plan isn't available yet.";
 /** What v1 sponsorship covers, stated wherever a person confirms or reads it. */
-export declare const COVERAGE_SENTENCE = "Your company pays your $50 plan. Storage above your plan's allowance is still yours.";
+export declare const COVERAGE_SENTENCE = "Your company pays your personal plan. Storage above your plan's allowance is still yours.";
 /** What a person is told while an approval waits on the sponsor's card. */
 export declare const HELD_FOR_CARD_SENTENCE = "Your company said yes and is adding a card. Your limits still apply until then.";
 /** One request row as hq-pro persists and returns it. */

package/dist/commands/billing-sponsor.js

@@ -2,9 +2,9 @@
  * `hq billing sponsor` — the individual-pull half of plan sponsorship, from the
  * terminal ("ask a company to sponsor me", hq-pro #3609).
  *
- * A person who is over a personal limit has exactly three ways out: pay $50
- * themselves, reduce what they store, or ask a company to cover the $50 plan
- * line. This command is the third one, plus the admin side that answers it.
+ * A person who is over a personal limit has exactly three ways out: pay for
+ * the personal plan themselves, reduce what they store, or ask a company to
+ * cover it. This command is the third one, plus the admin side that answers it.
  *
  *   hq billing sponsor request <company>   — ask that company to cover my plan
  *   hq billing sponsor list                — the queue (admins), or my own
@@ -41,7 +41,7 @@ export const PLAN_RESOURCE = "plan";
 /** What a person is told when hq-pro's plan-sponsorship switch is off. */
 export const FEATURE_OFF_MESSAGE = "Asking a company to sponsor your plan isn't available yet.";
 /** What v1 sponsorship covers, stated wherever a person confirms or reads it. */
-export const COVERAGE_SENTENCE = "Your company pays your $50 plan. Storage above your plan's allowance is still yours.";
+export const COVERAGE_SENTENCE = "Your company pays your personal plan. Storage above your plan's allowance is still yours.";
 /** What a person is told while an approval waits on the sponsor's card. */
 export const HELD_FOR_CARD_SENTENCE = "Your company said yes and is adding a card. Your limits still apply until then.";
 /**
@@ -85,7 +85,7 @@ export function messageForError(status, body) {
     if (status === 401)
         return "Your sign-in has expired. Run `hq login` and try again.";
     if (status === 403 && code === "SPONSOR_PLAN_REQUIRED") {
-        return "That company's plan can't cover an individual plan. Only HQ Workforce and Enterprise companies can.";
+        return "That company can't cover a personal plan on its current billing. Ask an owner of that company to check its Billing page.";
     }
     if (status === 403) {
         return "You're not allowed to do that. Only an owner or admin of the company can answer a sponsorship request.";
@@ -209,7 +209,7 @@ export function registerBillingSponsorCommands(billing) {
                 process.stdout.write(JSON.stringify(data.request, null, 2) + "\n");
                 return;
             }
-            console.log(`Asked ${company} to cover your $50 HQ plan.`);
+            console.log(`Asked ${company} to cover your personal HQ plan.`);
             console.log(COVERAGE_SENTENCE);
             console.log(`An owner or admin there answers next. Check with \`hq billing sponsor list\`.`);
         }
@@ -276,11 +276,11 @@ export function registerBillingSponsorCommands(billing) {
                 }
                 const where = named ?? "that company";
                 if (!state.active) {
-                    console.log(`No company is covering your $50 HQ plan right now.`);
+                    console.log(`No company is covering your personal HQ plan right now.`);
                     console.log(`If you asked ${where}, they haven't answered yet — an owner or admin there answers next.`);
                     return;
                 }
-                console.log(`Your $50 HQ plan: ${statusLabel(state.status ?? "active")}`);
+                console.log(`Your personal HQ plan: ${statusLabel(state.status ?? "active")}`);
                 if (state.requestId)
                     console.log(`  ${chalk.bold(state.requestId)}`);
                 console.log(COVERAGE_SENTENCE);
@@ -328,7 +328,7 @@ export function registerBillingSponsorCommands(billing) {
             }
             console.log((await companyIsUsageOnly(result.companyUid))
                 ? "Approved. Their personal plan is now on the company bill."
-                : "Approved. Their $50 plan is now on the company bill.");
+                : "Approved. Their personal plan is now on the company bill.");
         }
         catch (err) {
             fail(err);
@@ -370,7 +370,7 @@ export function registerBillingSponsorCommands(billing) {
             }
             console.log((await companyIsUsageOnly(result.companyUid))
                 ? "Ended. Their personal plan goes back to them from the next bill."
-                : "Ended. Their $50 plan goes back to them from the next bill.");
+                : "Ended. Their personal plan goes back to them from the next bill.");
         }
         catch (err) {
             fail(err);
@@ -396,7 +396,7 @@ export function registerBillingSponsorCommands(billing) {
                 console.log(usageOnlySponsorLines()[2]);
                 return;
             }
-            console.log("Withdrawn. You can pay the $50 yourself, reduce what you store, or ask another company.");
+            console.log("Withdrawn. You can pay for your plan yourself, reduce what you store, or ask another company.");
         }
         catch (err) {
             fail(err);

package/dist/commands/billing-usage.d.ts

@@ -12,18 +12,18 @@
  *
  * Tenant boundary: the company comes from the caller's own active memberships
  * (`/membership/me`); a slug outside them is refused before any read. The
- * usage-limits routes are member-gated on the server as well. With no cloud
+ * company statement is owner-gated on the server as well. With no cloud
  * company (or `--personal`) it reads the caller's personal scope.
  *
- * Usage numbers come through `readMonthUsage` (src/lib/billing/usage-cost.ts),
- * the single seam to switch to the US-005 daily rollup once it has a read route.
+ * Usage numbers come through `readMonthUsage` (src/lib/billing/usage-cost.ts)
+ * from the usage statement, `GET /v1/billing/usage` (hq-pro US-006). Only a
+ * server without that route (404) falls back to the usage-limits readings.
  *
  * Only an account on usage pricing gets costs. The plan comes from the
- * server: `pricingPlan` / `usageOnly` on the usage-limits body (hq-pro #5042,
- * computed with `isOnUsagePricing`). Only when that body does not say, the
- * billing summary the command already reads for the trial. A flat-plan account (for example a Workforce
- * company that subscribed before the 2026-10-16 cutover) and an account the
- * server says nothing about get readings only, with no rate, cost or
+ * server's shared plan status (`billingState`, hq-pro #5088) on the billing
+ * summary, with the legacy `pricingPlan` / `usageOnly` fields for a server
+ * that does not send it. An account on an earlier flat plan and an account
+ * the server says nothing about get readings only, with no rate, cost or
  * projected bill.
  */
 import type { Command } from "commander";
@@ -34,8 +34,19 @@ export interface MembershipRef {
     slug: string;
     role?: string;
 }
+/** One `GET /v1/billing/usage` answer: the HTTP status and the decoded body. */
+export interface UsageStatementResponse {
+    status: number;
+    body: unknown | null;
+}
 export interface BillingUsageDeps {
     listCompanies(): Promise<MembershipRef[]>;
+    /**
+     * `GET /v1/billing/usage` for the scope (US-015). Absent, or a 404 from a
+     * server without the route, falls back to {@link fetchUsageLimits}.
+     */
+    fetchUsageStatement?: (scope: UsageScope) => Promise<UsageStatementResponse>;
+    /** Legacy readings for a server without the statement route. */
     fetchUsageLimits: ReadMonthUsageDeps["fetchUsageLimits"];
     readStorageSplit?: (company: MembershipRef, opts: {
         fresh: boolean;
@@ -77,6 +88,9 @@ export declare function pricingPlanFromSummary(body: unknown): PricingPlan | nul
  * only when usage-limits does not say.
  */
 export declare function resolveOnUsagePricing(limitsPlan: PricingPlan | null, summaryPlan: PricingPlan | null): boolean | null;
+/** Thrown when the company statement is refused to a caller who is not its owner. */
+export declare class UsageStatementForbiddenError extends Error {
+}
 export declare function runBillingUsage(opts: BillingUsageOptions, deps: BillingUsageDeps): Promise<BillingUsageReport>;
 /**
  * `hq billing usage --card`: the card from GET /v1/pricing, or the bundled

package/dist/commands/billing-usage.js

@@ -12,27 +12,27 @@
  *
  * Tenant boundary: the company comes from the caller's own active memberships
  * (`/membership/me`); a slug outside them is refused before any read. The
- * usage-limits routes are member-gated on the server as well. With no cloud
+ * company statement is owner-gated on the server as well. With no cloud
  * company (or `--personal`) it reads the caller's personal scope.
  *
- * Usage numbers come through `readMonthUsage` (src/lib/billing/usage-cost.ts),
- * the single seam to switch to the US-005 daily rollup once it has a read route.
+ * Usage numbers come through `readMonthUsage` (src/lib/billing/usage-cost.ts)
+ * from the usage statement, `GET /v1/billing/usage` (hq-pro US-006). Only a
+ * server without that route (404) falls back to the usage-limits readings.
  *
  * Only an account on usage pricing gets costs. The plan comes from the
- * server: `pricingPlan` / `usageOnly` on the usage-limits body (hq-pro #5042,
- * computed with `isOnUsagePricing`). Only when that body does not say, the
- * billing summary the command already reads for the trial. A flat-plan account (for example a Workforce
- * company that subscribed before the 2026-10-16 cutover) and an account the
- * server says nothing about get readings only, with no rate, cost or
+ * server's shared plan status (`billingState`, hq-pro #5088) on the billing
+ * summary, with the legacy `pricingPlan` / `usageOnly` fields for a server
+ * that does not send it. An account on an earlier flat plan and an account
+ * the server says nothing about get readings only, with no rate, cost or
  * projected bill.
  */
 import chalk from "chalk";
 import { ensureCognitoToken } from "../utils/cognito-session.js";
 import { vaultApiFetch, vaultApiFetchPublic } from "../utils/vault-api.js";
-import { buildReadingsReport, buildReport, formatReport, readMonthUsage, } from "../lib/billing/usage-cost.js";
+import { buildReadingsReport, buildReport, formatReport, readMonthUsage, usageLimitsSource, usageStatementSource, } from "../lib/billing/usage-cost.js";
 import { ratesFromPricingStatement } from "../lib/billing/usage-rate-card.js";
 import { fetchUsageCard, formatUsageCardLines } from "../lib/billing/usage-card.js";
-import { fetchCompanyBillingSummary, pricingPlanFromBody, usageTrialActiveFromBody, } from "../lib/billing/usage-only.js";
+import { fetchCompanyBillingSummary, pricingPlanFromBody, hasBillingStateField, usageTrialActiveFromBody, } from "../lib/billing/usage-only.js";
 export class UsageScopeError extends Error {
 }
 /** Pick the scope. Never reaches outside the caller's own memberships. */
@@ -67,7 +67,7 @@ function asRecord(value) {
 /** The plan on a usage-limits body: `pricingPlan`, else the `usageOnly` / `onUsagePricing` boolean. */
 export function pricingPlanFromUsageLimits(body) {
     const plan = pricingPlanFromBody(body);
-    if (plan)
+    if (plan || hasBillingStateField(body))
         return plan;
     const rec = asRecord(body);
     const flag = typeof rec?.onUsagePricing === "boolean" ? rec.onUsagePricing : rec?.usageOnly;
@@ -85,9 +85,12 @@ export function pricingPlanFromSummary(body) {
     const rec = asRecord(body);
     if (!rec)
         return null;
-    // `plan: "usage"` only means "no Workforce subscription", not usage pricing,
-    // so it never turns pricing on. Without pricingPlan, show no cost.
-    return pricingPlanFromBody(rec) ?? "current";
+    // `plan: "usage"` only means "no flat-plan subscription", not usage pricing,
+    // so it never turns pricing on. A server that sends billingState answers
+    // from it alone (unknown stays unknown); an older one without pricingPlan
+    // shows no cost.
+    const plan = pricingPlanFromBody(rec);
+    return hasBillingStateField(rec) ? plan : plan ?? "current";
 }
 /**
  * True: price the meters. False: flat plan. Null: unknown, show no cost.
@@ -101,20 +104,44 @@ export function resolveOnUsagePricing(limitsPlan, summaryPlan) {
         return null;
     return plan === "usage-only";
 }
+/** Thrown when the company statement is refused to a caller who is not its owner. */
+export class UsageStatementForbiddenError extends Error {
+}
+/**
+ * Read the statement, or say the caller should use the legacy readings: null
+ * means the server has no statement route (404) or no reader was given.
+ */
+async function readStatementBody(scope, deps) {
+    if (!deps.fetchUsageStatement)
+        return null;
+    const res = await deps.fetchUsageStatement(scope);
+    if (res.status === 404)
+        return null;
+    if (res.status === 403 && scope.kind === "company") {
+        throw new UsageStatementForbiddenError(`Only the owner of '${scope.companySlug}' can see its usage statement. ` +
+            "Run `hq billing usage --personal` for your own usage.");
+    }
+    return { body: res.status >= 200 && res.status < 300 ? res.body : null };
+}
 export async function runBillingUsage(opts, deps) {
     const memberships = await deps.listCompanies();
     const scope = resolveUsageScope(memberships, opts);
     const membership = scope.kind === "company" ? memberships.find((m) => m.uid === scope.companyUid) : undefined;
     let limitsBody = null;
+    const statement = await readStatementBody(scope, deps);
+    const usageDeps = {
+        fetchUsageLimits: async (s) => (limitsBody = await deps.fetchUsageLimits(s)),
+        now: deps.now,
+        ...(deps.readTrialActive ? { readTrialActive: deps.readTrialActive } : {}),
+        ...(opts.storageScan !== false && deps.readStorageSplit && membership
+            ? { readStorageSplit: () => deps.readStorageSplit(membership, { fresh: opts.fresh === true }) }
+            : {}),
+    };
+    const source = statement
+        ? usageStatementSource(async () => statement.body)
+        : usageLimitsSource(usageDeps);
     const [usage, pricing] = await Promise.all([
-        readMonthUsage(scope, {
-            fetchUsageLimits: async (s) => (limitsBody = await deps.fetchUsageLimits(s)),
-            now: deps.now,
-            ...(deps.readTrialActive ? { readTrialActive: deps.readTrialActive } : {}),
-            ...(opts.storageScan !== false && deps.readStorageSplit && membership
-                ? { readStorageSplit: () => deps.readStorageSplit(membership, { fresh: opts.fresh === true }) }
-                : {}),
-        }),
+        readMonthUsage(scope, usageDeps, source),
         deps.fetchPricing().catch(() => null),
     ]);
     const limitsPlan = pricingPlanFromUsageLimits(limitsBody);
@@ -142,6 +169,14 @@ function productionDeps() {
             const { companiesFromMemberships } = await import("./storage.js");
             return companiesFromMemberships(await res.json());
         },
+        async fetchUsageStatement(scope) {
+            const res = await vaultApiFetch(scope.kind === "company"
+                ? { token: await token(), path: "/v1/billing/usage", query: { companyUid: scope.companyUid } }
+                : { token: await token(), path: "/v1/billing/usage", query: { scope: "person" } });
+            if (!res.ok)
+                return { status: res.status, body: null };
+            return { status: res.status, body: await res.json().catch(() => null) };
+        },
         async fetchUsageLimits(scope) {
             const res = await vaultApiFetch(scope.kind === "company"
                 ? { token: await token(), path: "/v1/billing/usage-limits", query: { companyUid: scope.companyUid } }

package/dist/commands/billing.d.ts

@@ -13,16 +13,16 @@
  *   hq billing checkout [--company <slug>] [--personal] — mint a card-capture link
  *   hq billing usage    [--company <slug>] [--personal] — usage, projected bill,
  *                                                         drivers (read-only)
- *   hq billing upgrade  [--company <slug>]              — Workforce checkout
- *                                                         (legacy plans only)
+ *   hq billing upgrade  [--company <slug>]              — the switch to usage
+ *                                                         pricing (earlier plans)
  *   hq billing sponsor  …                               — ask a company to cover
- *                                                         your $50 plan, or
+ *                                                         your personal plan, or
  *                                                         answer such a request
  *
- * Usage pricing (US-012): a company whose billing summary says
- * `pricingPlan: "usage-only"` has no plan to upgrade to. `hq billing upgrade`
- * tells it so and points at `hq billing usage` instead of opening Workforce
- * checkout. Legacy companies keep the Workforce flow unchanged.
+ * Usage pricing (US-012, US-024): a company on usage pricing has no plan to
+ * upgrade to; `hq billing upgrade` tells it so and points at
+ * `hq billing usage`. Every other company is pointed at the switch to usage
+ * pricing: the flat-plan checkout is closed, so the CLI never opens it.
  */
 import { Command } from "commander";
 interface DatabaseBilling {

package/dist/commands/billing.js

@@ -13,22 +13,22 @@
  *   hq billing checkout [--company <slug>] [--personal] — mint a card-capture link
  *   hq billing usage    [--company <slug>] [--personal] — usage, projected bill,
  *                                                         drivers (read-only)
- *   hq billing upgrade  [--company <slug>]              — Workforce checkout
- *                                                         (legacy plans only)
+ *   hq billing upgrade  [--company <slug>]              — the switch to usage
+ *                                                         pricing (earlier plans)
  *   hq billing sponsor  …                               — ask a company to cover
- *                                                         your $50 plan, or
+ *                                                         your personal plan, or
  *                                                         answer such a request
  *
- * Usage pricing (US-012): a company whose billing summary says
- * `pricingPlan: "usage-only"` has no plan to upgrade to. `hq billing upgrade`
- * tells it so and points at `hq billing usage` instead of opening Workforce
- * checkout. Legacy companies keep the Workforce flow unchanged.
+ * Usage pricing (US-012, US-024): a company on usage pricing has no plan to
+ * upgrade to; `hq billing upgrade` tells it so and points at
+ * `hq billing usage`. Every other company is pointed at the switch to usage
+ * pricing: the flat-plan checkout is closed, so the CLI never opens it.
  */
 import chalk from "chalk";
 import { ensureCognitoToken } from "../utils/cognito-session.js";
 import { vaultApiFetch, getCompanyUid } from "../utils/vault-api.js";
 import { mintPaymentLink } from "../utils/billing-gate.js";
-import { upgradeToTeam } from "../utils/team-upgrade.js";
+import { openUsageSwitch } from "../utils/team-upgrade.js";
 import { registerBillingSponsorCommands } from "./billing-sponsor.js";
 import { fetchCompanyPricingPlan, isUsageOnly, usageOnlyUpgradeLines, } from "../lib/billing/usage-only.js";
 import { fetchUsageCard } from "../lib/billing/usage-card.js";
@@ -157,10 +157,10 @@ export function registerBillingCommand(program) {
     });
     billing
         .command("upgrade")
-        .description("Open Stripe Checkout to upgrade a company on an earlier plan (usage-pricing companies have no plan to upgrade)")
+        .description("Open the switch to usage pricing for a company on an earlier plan (usage-pricing companies have nothing to change)")
         .option("--company <slug>", "Company slug (resolves to companyUid)")
-        .option("--no-browser", "Print the Stripe Checkout URL instead of opening it")
-        .option("--json", "Emit the Checkout URL as JSON")
+        .option("--no-browser", "Print the URL instead of opening it")
+        .option("--json", "Emit the URL as JSON")
         .action(async function (opts) {
         try {
             const token = await ensureCognitoToken();
@@ -177,8 +177,8 @@ export function registerBillingCommand(program) {
                     console.log(line);
                 return;
             }
-            await upgradeToTeam({
-                companyUid,
+            await openUsageSwitch({
+                companySlug: companyOf(this),
                 noBrowser: opts.browser === false,
                 json: opts.json,
             });

package/dist/commands/cloud-provision.js

@@ -484,8 +484,8 @@ async function defaultRunInitialSync(args) {
             if (event.type === "plan-limit") {
                 failureCount += Math.max(1, event.count ?? 0, event.paths?.length ?? 0);
                 firstFailure ??= {
-                    path: event.paths?.[0] ?? "plan limit",
-                    message: event.message ?? "plan limit refused upload",
+                    path: event.paths?.[0] ?? "new files",
+                    message: event.message ?? "new files are paused for this account",
                 };
                 return;
             }

package/dist/commands/cloud.js

@@ -1119,7 +1119,7 @@ export function registerCloudCommands(program) {
                 // and keep their exit status.
                 log(chalk.yellow(`\n⚠ Pushed ${result.filesUploaded} file(s) (${formatBytes(result.bytesUploaded)}, ` +
                     `${result.filesSkipped} skipped), but ${describeRefusedFiles(planLimitRefused)} ` +
-                    "refused by your plan limit."));
+                    "refused: new files are paused for this account."));
                 for (const line of renderPlanLimitRefusalLines(planLimitRefused)) {
                     log(chalk.yellow(line));
                 }
@@ -1811,7 +1811,7 @@ async function runPushAll(hqRoot, message, onConflict, skipPersonal, skipCompani
                 `${r.conflictPaths.length} conflict(s)` +
                 (r.aborted ? " — aborted" : "") +
                 (legRefused
-                    ? ` — ${describeRefusedCount(legRefused)} refused by plan limit`
+                    ? ` — ${describeRefusedCount(legRefused)} refused (new files paused)`
                     : ""));
             if (legRefused) {
                 printPlanLimitRefusal(legRefused);
@@ -1828,7 +1828,7 @@ async function runPushAll(hqRoot, message, onConflict, skipPersonal, skipCompani
         `${result.filesRefusedStale ?? 0} stale-refused; ` +
         `${result.filesUploadFailed ?? 0} failed` +
         (refusedTargets > 0
-            ? `; new files refused by a plan limit on ${refusedTargets} target(s)`
+            ? `; new files paused on ${refusedTargets} target(s)`
             : "");
     console.log(errored > 0 ||
         result.filesExcludedByScope > 0 ||
@@ -1973,7 +1973,7 @@ async function runNowSingle(hqRoot, company, personal, message, onConflict, mode
             `${pushResult.filesDeleted} deleted, ${pushResult.filesExcludedByScope} scope-excluded` +
             (pushResult.aborted ? " — aborted" : "") +
             (pushRefused
-                ? ` — ${describeRefusedCount(pushRefused)} refused by plan limit`
+                ? ` — ${describeRefusedCount(pushRefused)} refused (new files paused)`
                 : ""));
         if (pushRefused)
             printPlanLimitRefusal(pushRefused, "      ");
@@ -2105,7 +2105,7 @@ async function runNowSingle(hqRoot, company, personal, message, onConflict, mode
         if (pushRefused) {
             // The pull ran, but the push did not upload everything: no success line.
             console.log(chalk.yellow(`\n⚠ Sync now finished, but ${describeRefusedFiles(pushRefused)} ` +
-                "refused by your plan limit (listed above)."));
+                "refused: new files are paused for this account (listed above)."));
             throw new SyncExitError(1, { health: "succeeded" });
         }
         if (pushResult.filesExcludedByScope > 0 ||
@@ -2159,9 +2159,9 @@ async function runNowAll(hqRoot, message, onConflict, modeAllOverride, skipPerso
         // like a clean sync. Its per-target details were printed above.
         if (refused.planLimitRefused) {
             console.log(chalk.yellow(`\n⚠ Sync finished, but ${describeRefusedFiles(refused.planLimitRefused)} refused ` +
-                "by your plan limit (listed under push --all above)."));
+                "because new files are paused for this account (listed under push --all above)."));
             if (refused.planLimitRefused.upgradeUrl) {
-                console.log(chalk.yellow(`  Upgrade: ${refused.planLimitRefused.upgradeUrl}`));
+                console.log(chalk.yellow(`  Billing: ${refused.planLimitRefused.upgradeUrl}`));
             }
         }
         console.log(chalk.yellow("\n⚠ Sync finished, but one or more requested uploads were refused."));

package/dist/commands/core-session-helper-runtime.d.ts

@@ -1,6 +1,7 @@
 export type SessionHelperRuntimeOverrides = {
     env?: NodeJS.ProcessEnv;
     now?: () => Date;
+    beforeCounterAction?: () => void;
 };
 export type SessionHelperRuntime = {
     env: NodeJS.ProcessEnv;

package/dist/commands/core-session-journal-native.d.ts

@@ -1,6 +1,7 @@
 type SessionHelperRuntimeOverrides = {
     env?: NodeJS.ProcessEnv;
     now?: () => Date;
+    beforeCounterAction?: () => void;
 };
 export type SessionJournalOperationResult = {
     code: number;