acuvo-code 0.3.1 → 0.3.3

package/ENTERPRISE.md

@@ -188,8 +188,8 @@ copy, but it *is* a place a process starts, and this is a list of those. Six and
 are the numbers to quote. Counting is the first thing a reviewer does.
 
 ⚠️ **This said "18 shipped files", then "41", then "90", then "101", then "108", and every
-one went stale in turn.** The package ships **118 files — 116 in `lib/`, 2 in
-`bin/` — about 77,339 lines**, with **233 test files** beside them (counted 2026-08-22).
+one went stale in turn.** The package ships **119 files — 117 in `lib/`, 2 in
+`bin/` — about 77552 lines**, with **234 test files** beside them (counted 2026-08-22).
 
 ⭐ **AND THE 108 WENT STALE IN THE MOST INSTRUCTIVE WAY POSSIBLE: THREE OF THE FILES IT
 MISSED WERE REACHABLE FROM NOTHING.** `wiring-reach.test.mjs` was naming

package/bin/acuvo.mjs

@@ -1440,7 +1440,63 @@ ${formatBoard(listed)}
    * exactly the fact a banner exists to state, so it stays, shortened and with
    * any elision marked. See `shortenRoot`.
    */
-  const banner = `acuvo · ${config.model} · ${shortenRoot(executor.root)}\n       · ${mode}\n`;
+  /**
+   * ── ⭐⭐⭐ WHO IS PAYING FOR THIS, ON THE LINE ABOVE THE FIRST SPEND ────────
+   *
+   * Roman opened a terminal, typed `acuvo`, and got a working prompt without
+   * ever logging in — because a stray `OPENROUTER_API_KEY` in the project's
+   * `.env.local` was picked up automatically. `resolveCredential` has the right
+   * PRECEDENCE (an Acuvo account beats BYOK), but nothing on screen said which
+   * one had won.
+   *
+   * ⚠️ THAT IS A BILLING FAILURE, NOT A COSMETIC ONE. A paying customer with a
+   * leftover provider key in a project directory burns THEIR OWN credits while
+   * believing their plan covers it, and the first evidence is somebody else's
+   * invoice. The banner already states what the tool may RUN before it runs it;
+   * stating what it will CHARGE before it charges is the same obligation.
+   */
+  let billing = 'no key — run `acuvo --login`';
+  try {
+    const { resolveCredential } = await import('../lib/account.mjs');
+    const cred = resolveCredential();
+    billing =
+      cred.mode === 'account' ? 'your Acuvo plan'
+      : cred.mode === 'byok' ? 'YOUR OWN OpenRouter key (not your Acuvo plan)'
+      : billing;
+  } catch {
+    // Never let a banner stop a run.
+  }
+
+  /**
+   * ⚠️ THE SAFETY LINE SURVIVED THE REDESIGN, DELIBERATELY. Roman read
+   * "may run: node, npm test, …" as the product describing itself and disliked
+   * it — but a tool that can execute programs on your machine has to say so
+   * above the first one it runs, and moving that into a README is how it stops
+   * being read. It is relabelled `can run`, not removed.
+   */
+  const pkgVersion = (() => {
+    try {
+      return JSON.parse(readFileSync(new URL('../package.json', import.meta.url), 'utf8')).version;
+    } catch {
+      return '';
+    }
+  })();
+
+  /**
+   * ⚠️ `interactive: false` EVEN IN THE REPL, because `runChat` prints its own
+   * "Type what you want done" line. Setting it here as well produced the
+   * instruction twice, three lines apart — the banner owns the identity, the
+   * chat loop owns the invitation, and neither should own both.
+   */
+  const { openingScreen } = await import('../lib/banner.mjs');
+  const banner = openingScreen({
+    version: pkgVersion,
+    workspace: shortenRoot(executor.root),
+    model: config.model,
+    billing,
+    canRun: mode,
+    interactive: false,
+  });
   if (opts.json) process.stderr.write(banner);
   else process.stdout.write(banner);
 

package/lib/banner.mjs

@@ -0,0 +1,97 @@
+/**
+ * ── ⭐⭐⭐ WHAT YOU SEE WHEN YOU TYPE `acuvo` ────────────────────────────────
+ *
+ * Roman, 2026-08-22, having typed it: *"it's not opening as a typable terminal,
+ * with acuvo logo top left and details up top etc, like how claude code opens.
+ * have you actually designed the page?"*
+ *
+ * No — the previous version printed two dense lines of facts and a prompt. Every
+ * fact was correct and none of it was designed. This is the opening screen: a
+ * wordmark, one instruction, and the four things a person needs to know before
+ * they type anything.
+ *
+ * ── ⚠️ THE CONSTRAINTS THAT SHAPED IT, NOT PREFERENCES ──────────────────────
+ *
+ * · **Half-block glyphs only** (▀ ▄ █). Braille and fancy box-drawing render as
+ *   tofu in cmd.exe and in a lot of CI log viewers, and a logo that renders as
+ *   question marks is worse than no logo.
+ * · **No colour codes here.** The caller owns colour and already honours
+ *   NO_COLOR; a module that hard-codes escapes produces garbage the moment its
+ *   output is piped to a file.
+ * · **Every line under 80 columns**, because the narrowest terminal anyone
+ *   actually uses is 80 and a wrapped banner looks broken rather than dense.
+ */
+
+/**
+ * ACUVO in half-blocks. Three rows, because five is a splash screen — it belongs
+ * to something you open once a day, not something you run forty times.
+ */
+const WORDMARK = [
+  '▄▀█ █▀▀ █ █ █ █ █▀█',
+  '█▀█ █▄▄ █▄█ ▀▄▀ █▄█',
+];
+
+/**
+ * Build the opening screen.
+ *
+ * @param {object} o
+ * @param {string} o.version
+ * @param {string} o.workspace   already shortened by the caller
+ * @param {string} o.model
+ * @param {string} o.billing     who this run will charge
+ * @param {string} o.canRun      what it may execute, or that it may not
+ * @param {boolean} [o.interactive] whether a prompt follows
+ * @returns {string}
+ */
+export function openingScreen({ version, workspace, model, billing, canRun, interactive = false }) {
+  /**
+   * ── ⚠️⚠️ ELIDED, BECAUSE THE VALUES ARE NOT OURS ────────────────────────────
+   *
+   * Every value here arrives at runtime: a deep monorepo path, a long model id,
+   * the shell-mode warning. The first version of this function assumed they
+   * would be short and its own test caught it wrapping at 80 columns on
+   * perfectly ordinary inputs.
+   *
+   * ⭐ ELIDED IN THE MIDDLE, NOT THE END. The informative parts of a path are the
+   * drive and the leaf; chopping the tail leaves `C:\Users\somebody\Projects\a-`
+   * which identifies nothing. Same for a model id, where the family is at the
+   * front and the variant at the back.
+   */
+  const room = MAX_BANNER_COLUMNS - 2 - 11;
+  const fit = (v) => {
+    const s = String(v ?? '');
+    if (s.length <= room) return s;
+    const head = Math.ceil((room - 1) / 2);
+    const tail = room - 1 - head;
+    return `${s.slice(0, head)}…${s.slice(s.length - tail)}`;
+  };
+  const label = (k, v) => `  ${k.padEnd(11)}${fit(v)}`;
+  const lines = [
+    '',
+    `  ${WORDMARK[0]}`,
+    `  ${WORDMARK[1]}   CODE${version ? `  ${version}` : ''}`,
+    '',
+    label('workspace', workspace),
+    label('model', model),
+    label('billing', billing),
+    label('can run', canRun),
+    '',
+  ];
+  /**
+   * ⚠️ ONLY WHEN A PROMPT ACTUALLY FOLLOWS. Printing "type what you want done"
+   * above a one-shot run that has already been given its task is an instruction
+   * for something the user cannot do, on the screen of a thing already working.
+   */
+  if (interactive) {
+    lines.push('  Type what you want done.   /help for commands  ·  exit to leave', '');
+  }
+  return lines.join('\n');
+}
+
+/**
+ * ⚠️ EXPORTED SO A TEST CAN ASSERT THE WIDTH RULE RATHER THAN TRUST IT. The
+ * banner is assembled from values supplied at runtime — a long model id or a
+ * deep workspace path is what would push it over, and neither is visible from
+ * reading this file.
+ */
+export const MAX_BANNER_COLUMNS = 80;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "acuvo-code",
-  "version": "0.3.1",
+  "version": "0.3.3",
   "description": "Acuvo Code — the terminal client for the Acuvo capability registry. Zero dependencies, by design.",
   "type": "module",
   "bin": {