bizrouter 0.3.1 → 0.3.2

package/dist/commands/console.js

@@ -313,7 +313,9 @@ export async function billingCommand(argv) {
     return emit(parsed, { credits, monthly }, () => {
         const type = credits.payment_type === 'prepaid' ? '선불(크레딧)' : credits.payment_type === 'postpaid' ? '후불' : credits.payment_type;
         print(c.bold(`결제 방식 ${type}${credits.has_contract ? ' · 계약 고객' : ''}${credits.auto_card_billing ? ' · 카드 자동 충전' : ''}`));
-        print(`  현재 크레딧 ${formatKrw(Number(credits.current_credits))} · 누적 사용 ${formatKrw(Number(credits.used_credits))}${credits.monthly_limit != null ? ` · 월 한도 ${formatKrw(Number(credits.monthly_limit))}` : ''}`);
+        const effectiveLimit = credits.effective_monthly_limit !== undefined ? credits.effective_monthly_limit : credits.monthly_limit;
+        const hardCap = credits.admin_monthly_hard_cap;
+        print(`  현재 크레딧 ${formatKrw(Number(credits.current_credits))} · 누적 사용 ${formatKrw(Number(credits.used_credits))}${effectiveLimit != null ? ` · 월 한도 ${formatKrw(Number(effectiveLimit))}` : ''}${hardCap != null ? ` (운영자 상한 ${formatKrw(Number(hardCap))})` : ''}`);
         print(`  이번 달 사용 ${formatKrw(monthly.current_month_amount_krw)}${monthly.current_available_amount_krw != null ? ` · 사용 가능 ${formatKrw(monthly.current_available_amount_krw)}` : ''}`);
         print();
         table(['월', '상태', 'API 사용', '청구 합계', '요청 수'], monthly.items.map((m) => [m.month, `${m.status}${m.payment_status ? `/${m.payment_status}` : ''}`, formatKrw(m.api_usage_krw), formatKrw(m.total_amount_krw), m.request_count.toLocaleString('ko-KR')]));

package/dist/commands/misc.js

@@ -2,7 +2,7 @@ import { spawn } from 'node:child_process';
 import { ENV_KEY_NAME } from '../config.js';
 import { c, info, print } from '../ui.js';
 import { requireApiKey } from './shared.js';
-export const VERSION = '0.3.1';
+export const VERSION = '0.3.2';
 /** `eval "$(bizrouter env)"` exports the saved key for tools configured by `bizrouter setup`. */
 export function envCommand() {
     const key = requireApiKey();

package/dist/commands/setup.js

@@ -1,4 +1,4 @@
-import { copyFileSync, existsSync, mkdirSync, readFileSync, writeFileSync } from 'node:fs';
+import { chmodSync, copyFileSync, existsSync, mkdirSync, readFileSync, writeFileSync } from 'node:fs';
 import { homedir } from 'node:os';
 import { dirname, join } from 'node:path';
 import { fetchCatalog } from '../api.js';
@@ -29,7 +29,15 @@ function backup(path) {
 }
 function writeText(path, text) {
     mkdirSync(dirname(path), { recursive: true });
-    writeFileSync(path, text);
+    // These files carry the API key: owner-only, and tighten an existing file
+    // that was created with the default umask.
+    writeFileSync(path, text, { mode: 0o600 });
+    try {
+        chmodSync(path, 0o600);
+    }
+    catch {
+        // Windows/ACL filesystems: best effort.
+    }
 }
 /** Merge BizRouter's env block into a Claude Code settings.json object. */
 export function mergeClaudeSettings(existing, env) {

package/dist/harness/codex.js

@@ -30,6 +30,13 @@ export function codexOverrides(options) {
     }
     if (options.resetServiceTier)
         overrides.push(`service_tier=${tomlString('default')}`);
+    // Codex 0.144+ ships the OpenAI-hosted `web_search` tool on every turn. BizRouter has no
+    // pricing contract for that hosted tool and answers 400 ("No reviewed pricing contract is
+    // available for hosted tool web_search"), which kills the very first turn. Turn it off for
+    // this launch; BizRouter Search stays available through the `bizrouter_search` MCP tool.
+    if (!(options.passthrough ?? []).some((arg, i) => /^web_search\s*=/.test(arg) || ((options.passthrough ?? [])[i - 1] === '-c' && /^web_search\s*=/.test(arg)))) {
+        overrides.push(`web_search=${tomlString('disabled')}`);
+    }
     return overrides.flatMap((o) => ['-c', o]);
 }
 export function buildCodexPlan(options) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "bizrouter",
-  "version": "0.3.1",
+  "version": "0.3.2",
   "description": "BizRouter CLI - run Claude Code, Codex, OpenCode, and Hermes through BizRouter, operate the BizRouter console (API keys, usage, policies, audit logs) from the terminal or as an MCP server, and ask BizRouter Search for answers grounded in 50+ live data sources",
   "license": "UNLICENSED",
   "type": "module",