bizrouter 0.3.1 → 0.3.3

package/AGENT_MANUAL.md

@@ -152,6 +152,7 @@ Why did requests fail this morning?
 
 ```
 bizrouter audit list --status error --from 2026-09-06 --limit 20
+bizrouter audit list --user kim@example.com          # one person's requests (email or name, partial match)
 bizrouter audit show <log_id>
 ```
 

package/dist/commands/console.js

@@ -313,7 +313,9 @@ export async function billingCommand(argv) {
     return emit(parsed, { credits, monthly }, () => {
         const type = credits.payment_type === 'prepaid' ? '선불(크레딧)' : credits.payment_type === 'postpaid' ? '후불' : credits.payment_type;
         print(c.bold(`결제 방식 ${type}${credits.has_contract ? ' · 계약 고객' : ''}${credits.auto_card_billing ? ' · 카드 자동 충전' : ''}`));
-        print(`  현재 크레딧 ${formatKrw(Number(credits.current_credits))} · 누적 사용 ${formatKrw(Number(credits.used_credits))}${credits.monthly_limit != null ? ` · 월 한도 ${formatKrw(Number(credits.monthly_limit))}` : ''}`);
+        const effectiveLimit = credits.effective_monthly_limit !== undefined ? credits.effective_monthly_limit : credits.monthly_limit;
+        const hardCap = credits.admin_monthly_hard_cap;
+        print(`  현재 크레딧 ${formatKrw(Number(credits.current_credits))} · 누적 사용 ${formatKrw(Number(credits.used_credits))}${effectiveLimit != null ? ` · 월 한도 ${formatKrw(Number(effectiveLimit))}` : ''}${hardCap != null ? ` (운영자 상한 ${formatKrw(Number(hardCap))})` : ''}`);
         print(`  이번 달 사용 ${formatKrw(monthly.current_month_amount_krw)}${monthly.current_available_amount_krw != null ? ` · 사용 가능 ${formatKrw(monthly.current_available_amount_krw)}` : ''}`);
         print();
         table(['월', '상태', 'API 사용', '청구 합계', '요청 수'], monthly.items.map((m) => [m.month, `${m.status}${m.payment_status ? `/${m.payment_status}` : ''}`, formatKrw(m.api_usage_krw), formatKrw(m.total_amount_krw), m.request_count.toLocaleString('ko-KR')]));
@@ -380,7 +382,7 @@ export async function orgCommand(argv) {
     }
 }
 const AUDIT_USAGE = [
-    'bizrouter audit list [--status success|error|blocked] [--model ID] [--key 이름] [--from YYYY-MM-DD] [--to YYYY-MM-DD] [--search 텍스트] [--limit N] [--cursor C] [--json]',
+    'bizrouter audit list [--status success|error|blocked] [--model ID] [--key 이름] [--app 이름] [--user 이메일|이름] [--from YYYY-MM-DD] [--to YYYY-MM-DD] [--search 텍스트] [--limit N] [--cursor C] [--json]',
     'bizrouter audit show <log_id> [--json]',
     'bizrouter audit stats [--json]',
 ].join('\n');
@@ -397,6 +399,8 @@ export async function auditCommand(argv) {
                 model: flagString(parsed, 'model'),
                 api_key: flagString(parsed, 'key'),
                 app_name: flagString(parsed, 'app'),
+                // Partial, case-insensitive match on the requesting user's email or name.
+                user: flagString(parsed, 'user'),
                 search: flagString(parsed, 'search'),
                 start_date: from ? `${from}T00:00:00` : undefined,
                 end_date: to ? `${to}T23:59:59` : undefined,
@@ -408,13 +412,14 @@ export async function auditCommand(argv) {
                     print('조건에 맞는 요청 기록이 없습니다.');
                     return;
                 }
-                table(['시각', '모델', '상태', '토큰(입/출)', '비용', '앱', '요청 미리보기', 'id'], data.items.map((i) => [
+                table(['시각', '모델', '상태', '토큰(입/출)', '비용', '앱', '사용자', '요청 미리보기', 'id'], data.items.map((i) => [
                     shortDate(i.created_at),
                     i.model ?? '-',
                     i.status,
                     `${i.input_tokens ?? 0}/${i.output_tokens ?? 0}`,
                     i.cost_krw == null ? '-' : formatKrw(i.cost_krw),
                     i.app_name ?? '-',
+                    i.user_email ?? '-',
                     (i.request_prompt_preview ?? '').replace(/\s+/g, ' ').slice(0, 40),
                     i.id,
                 ]));

package/dist/commands/misc.js

@@ -2,7 +2,7 @@ import { spawn } from 'node:child_process';
 import { ENV_KEY_NAME } from '../config.js';
 import { c, info, print } from '../ui.js';
 import { requireApiKey } from './shared.js';
-export const VERSION = '0.3.1';
+export const VERSION = '0.3.3';
 /** `eval "$(bizrouter env)"` exports the saved key for tools configured by `bizrouter setup`. */
 export function envCommand() {
     const key = requireApiKey();

package/dist/commands/setup.js

@@ -1,4 +1,4 @@
-import { copyFileSync, existsSync, mkdirSync, readFileSync, writeFileSync } from 'node:fs';
+import { chmodSync, copyFileSync, existsSync, mkdirSync, readFileSync, writeFileSync } from 'node:fs';
 import { homedir } from 'node:os';
 import { dirname, join } from 'node:path';
 import { fetchCatalog } from '../api.js';
@@ -29,7 +29,15 @@ function backup(path) {
 }
 function writeText(path, text) {
     mkdirSync(dirname(path), { recursive: true });
-    writeFileSync(path, text);
+    // These files carry the API key: owner-only, and tighten an existing file
+    // that was created with the default umask.
+    writeFileSync(path, text, { mode: 0o600 });
+    try {
+        chmodSync(path, 0o600);
+    }
+    catch {
+        // Windows/ACL filesystems: best effort.
+    }
 }
 /** Merge BizRouter's env block into a Claude Code settings.json object. */
 export function mergeClaudeSettings(existing, env) {

package/dist/harness/codex.js

@@ -30,6 +30,13 @@ export function codexOverrides(options) {
     }
     if (options.resetServiceTier)
         overrides.push(`service_tier=${tomlString('default')}`);
+    // Codex 0.144+ ships the OpenAI-hosted `web_search` tool on every turn. BizRouter has no
+    // pricing contract for that hosted tool and answers 400 ("No reviewed pricing contract is
+    // available for hosted tool web_search"), which kills the very first turn. Turn it off for
+    // this launch; BizRouter Search stays available through the `bizrouter_search` MCP tool.
+    if (!(options.passthrough ?? []).some((arg, i) => /^web_search\s*=/.test(arg) || ((options.passthrough ?? [])[i - 1] === '-c' && /^web_search\s*=/.test(arg)))) {
+        overrides.push(`web_search=${tomlString('disabled')}`);
+    }
     return overrides.flatMap((o) => ['-c', o]);
 }
 export function buildCodexPlan(options) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "bizrouter",
-  "version": "0.3.1",
+  "version": "0.3.3",
   "description": "BizRouter CLI - run Claude Code, Codex, OpenCode, and Hermes through BizRouter, operate the BizRouter console (API keys, usage, policies, audit logs) from the terminal or as an MCP server, and ask BizRouter Search for answers grounded in 50+ live data sources",
   "license": "UNLICENSED",
   "type": "module",