acuvo-code 0.3.1 → 0.3.2

package/bin/acuvo.mjs

@@ -1440,7 +1440,59 @@ ${formatBoard(listed)}
    * exactly the fact a banner exists to state, so it stays, shortened and with
    * any elision marked. See `shortenRoot`.
    */
-  const banner = `acuvo · ${config.model} · ${shortenRoot(executor.root)}\n       · ${mode}\n`;
+  /**
+   * ── ⭐⭐⭐ WHO IS PAYING FOR THIS, ON THE LINE ABOVE THE FIRST SPEND ────────
+   *
+   * Roman opened a terminal, typed `acuvo`, and got a working prompt without
+   * ever logging in — because a stray `OPENROUTER_API_KEY` in the project's
+   * `.env.local` was picked up automatically. `resolveCredential` has the right
+   * PRECEDENCE (an Acuvo account beats BYOK), but nothing on screen said which
+   * one had won.
+   *
+   * ⚠️ THAT IS A BILLING FAILURE, NOT A COSMETIC ONE. A paying customer with a
+   * leftover provider key in a project directory burns THEIR OWN credits while
+   * believing their plan covers it, and the first evidence is somebody else's
+   * invoice. The banner already states what the tool may RUN before it runs it;
+   * stating what it will CHARGE before it charges is the same obligation.
+   */
+  let billing = 'no key — run `acuvo --login`';
+  try {
+    const { resolveCredential } = await import('../lib/account.mjs');
+    const cred = resolveCredential();
+    billing =
+      cred.mode === 'account' ? 'your Acuvo plan'
+      : cred.mode === 'byok' ? 'YOUR OWN OpenRouter key (not your Acuvo plan)'
+      : billing;
+  } catch {
+    // Never let a banner stop a run.
+  }
+
+  /**
+   * ⚠️ THE SAFETY LINE SURVIVED THE REDESIGN, DELIBERATELY. Roman read
+   * "may run: node, npm test, …" as the product describing itself and disliked
+   * it — but a tool that can execute programs on your machine has to say so
+   * above the first one it runs, and moving that into a README is how it stops
+   * being read. It is relabelled `can run`, not removed.
+   */
+  const pkgVersion = (() => {
+    try {
+      return JSON.parse(readFileSync(new URL('../package.json', import.meta.url), 'utf8')).version;
+    } catch {
+      return '';
+    }
+  })();
+
+  const row = (k, v) => `  ${k.padEnd(11)}${v}`;
+  const banner = [
+    '',
+    `  ▌ACUVO CODE${pkgVersion ? `  ${pkgVersion}` : ''}`,
+    '',
+    row('workspace', shortenRoot(executor.root)),
+    row('model', config.model),
+    row('billing', billing),
+    row('can run', mode),
+    '',
+  ].join('\n');
   if (opts.json) process.stderr.write(banner);
   else process.stdout.write(banner);
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "acuvo-code",
-  "version": "0.3.1",
+  "version": "0.3.2",
   "description": "Acuvo Code — the terminal client for the Acuvo capability registry. Zero dependencies, by design.",
   "type": "module",
   "bin": {