nexrall-code 0.5.109 → 0.5.111

package/dist/index.js

@@ -3182,10 +3182,11 @@ var require_auth = __commonJS({
     exports2.saveAuth = saveAuth2;
     exports2.loadAuth = loadAuth2;
     exports2.clearAuth = clearAuth2;
-    exports2.isAuthenticated = isAuthenticated3;
+    exports2.isAuthenticated = isAuthenticated4;
     exports2.getToken = getToken;
     exports2.getRefreshToken = getRefreshToken;
     exports2.updateTokens = updateTokens;
+    exports2.getBillingTeamOverride = getBillingTeamOverride;
     var fs9 = __importStar(__require("fs"));
     var path8 = __importStar(__require("path"));
     var os6 = __importStar(__require("os"));
@@ -3227,7 +3228,7 @@ var require_auth = __commonJS({
       } catch {
       }
     }
-    function isAuthenticated3() {
+    function isAuthenticated4() {
       const auth = loadAuth2();
       return auth !== null && auth.token.length > 0;
     }
@@ -3263,6 +3264,22 @@ var require_auth = __commonJS({
       };
       fs9.writeFileSync(CONFIG_FILE, JSON.stringify(next, null, 2), { mode: 384 });
     }
+    function getBillingTeamOverride() {
+      const raw = process.env.NEXRALL_BILLING_TEAM;
+      if (raw != null && raw !== "") {
+        const trimmed = raw.trim();
+        if (/^(personal|null|0)$/i.test(trimmed))
+          return null;
+        if (/^\d+$/.test(trimmed)) {
+          const n = Number(trimmed);
+          if (Number.isSafeInteger(n) && n > 0)
+            return n;
+        }
+      }
+      if (process.env.NEXRALL_TOKEN)
+        return null;
+      return void 0;
+    }
   }
 });
 
@@ -9903,6 +9920,9 @@ var require_client = __commonJS({
     exports2.revokeRefreshToken = revokeRefreshToken2;
     exports2.describeAttachment = describeAttachment2;
     exports2.getBalance = getBalance3;
+    exports2.billingOverrideFields = billingOverrideFields2;
+    exports2.setBillingTarget = setBillingTarget2;
+    exports2.getOrgs = getOrgs2;
     exports2.getCodeModels = getCodeModels;
     exports2.getUsageDaily = getUsageDaily;
     exports2.exchangeVscodeCode = exchangeVscodeCode;
@@ -10091,7 +10111,7 @@ var require_client = __commonJS({
           {
             method: "POST",
             headers: authHeaders(),
-            body: JSON.stringify({ messages, model, env: env4, editorContext, nexrallMd, mode, effort, clientType, extraTools, agents, skills, turnId, canWriteSharedMemory, hasOwnAgentStore, canSpawnSubAgents, canBrowseWeb }),
+            body: JSON.stringify({ messages, model, env: env4, editorContext, nexrallMd, mode, effort, clientType, extraTools, agents, skills, turnId, canWriteSharedMemory, hasOwnAgentStore, canSpawnSubAgents, canBrowseWeb, ...billingOverrideFields2() }),
             signal
           }
         ];
@@ -10271,18 +10291,31 @@ var require_client = __commonJS({
           const errText = errorBodyOverride ?? await response.text();
           let errMsg = `API error ${response.status}`;
           let balance;
+          let code;
+          let remaining;
+          let teamId;
           try {
             const parsed = JSON.parse(errText);
             if (parsed.error)
               errMsg = parsed.error;
             if (typeof parsed.balance === "number")
               balance = parsed.balance;
+            if (typeof parsed.code === "string")
+              code = parsed.code;
+            if (typeof parsed.remaining === "number")
+              remaining = parsed.remaining;
+            if (typeof parsed.teamId === "number")
+              teamId = parsed.teamId;
           } catch {
             errMsg = errText || errMsg;
           }
           throw Object.assign(new Error(errMsg), {
             status: response.status,
             balance,
+            // Team-billing context (migration 139) — see the parse above.
+            ...code ? { code } : {},
+            ...remaining !== void 0 ? { remaining } : {},
+            ...teamId !== void 0 ? { teamId } : {},
             ...forbiddenExhausted ? { retryable: true } : {},
             ...sessionExpired ? { authExpired: true } : {}
           });
@@ -10650,7 +10683,7 @@ var require_client = __commonJS({
       const fetchOnce = () => (0, node_fetch_1.default)(`${exports2.API_BASE}/api/code/assets/describe`, {
         method: "POST",
         headers: { ...authHeaders(), "Content-Type": "application/json" },
-        body: JSON.stringify({ kind, data, media_type: mediaType, name })
+        body: JSON.stringify({ kind, data, media_type: mediaType, name, ...billingOverrideFields2() })
       });
       let response = await fetchOnce();
       if (response.status === 401 || response.status === 403) {
@@ -10695,6 +10728,48 @@ var require_client = __commonJS({
       const data = await response.json();
       return typeof data.balance === "number" ? data.balance : 0;
     }
+    function billingOverrideFields2() {
+      const override = (0, index_1.getBillingTeamOverride)();
+      return override === void 0 ? {} : { teamId: override };
+    }
+    async function setBillingTarget2(teamId) {
+      const response = await (0, node_fetch_1.default)(`${exports2.API_BASE}/api/user/billing-target`, {
+        method: "PUT",
+        headers: authHeaders(),
+        body: JSON.stringify({ teamId })
+      });
+      if (!response.ok) {
+        let message = `API error ${response.status}`;
+        try {
+          const parsed = await response.json();
+          if (parsed.error)
+            message = parsed.error;
+        } catch {
+        }
+        throw new Error(message);
+      }
+    }
+    async function getOrgs2() {
+      const fetchOnce = () => (0, node_fetch_1.default)(`${exports2.API_BASE}/api/code/orgs`, { method: "GET", headers: authHeaders() });
+      let response = await fetchOnce();
+      if (response.status === 401 || response.status === 403) {
+        const body = await response.text().catch(() => "");
+        if (isExpiredTokenResponse(response.status, body) && await refreshAccessToken()) {
+          response = await fetchOnce();
+        } else {
+          throw new Error(`API error ${response.status}: ${body}`);
+        }
+      }
+      if (!response.ok) {
+        throw new Error(`API error ${response.status}`);
+      }
+      const json = await response.json();
+      return {
+        personal: { balance: typeof json.personal?.balance === "number" ? json.personal.balance : 0 },
+        teams: Array.isArray(json.teams) ? json.teams : [],
+        billingTargetTeamId: typeof json.billingTargetTeamId === "number" ? json.billingTargetTeamId : null
+      };
+    }
     async function getCodeModels() {
       const fetchOnce = () => (0, node_fetch_1.default)(`${exports2.API_BASE}/api/code/models`, { method: "GET", headers: authHeaders() });
       let response = await fetchOnce();
@@ -100984,13 +101059,14 @@ var require_executor = __commonJS({
     var child_process_1 = __require("child_process");
     var sandbox_1 = require_sandbox();
     var auth_1 = require_auth();
+    var client_1 = require_client();
     var editCompleteness_1 = require_editCompleteness();
     var securityLint_1 = require_securityLint();
     var memory_1 = require_memory();
     var skills_1 = require_skills();
     var testIntegrity_1 = require_testIntegrity();
     var crossFile_1 = require_crossFile();
-    var client_1 = require_client();
+    var client_2 = require_client();
     var symbols_1 = require_symbols();
     var tsLangService_1 = require_tsLangService();
     var safeSlice_1 = require_safeSlice();
@@ -102947,7 +103023,7 @@ ${lines.join("\n")}`;
       let cost;
       let balance;
       try {
-        const r2 = await _httpsPost(`${client_1.API_BASE}/api/code/assets/generate`, JSON.stringify({ prompt: prompt2, aspect_ratio: aspectRatio }), { "Content-Type": "application/json", Authorization: `Bearer ${token}` }, 17e4, abortSignal);
+        const r2 = await _httpsPost(`${client_2.API_BASE}/api/code/assets/generate`, JSON.stringify({ prompt: prompt2, aspect_ratio: aspectRatio, ...(0, client_1.billingOverrideFields)() }), { "Content-Type": "application/json", Authorization: `Bearer ${token}` }, 17e4, abortSignal);
         let json = {};
         try {
           json = JSON.parse(r2.body);
@@ -102996,7 +103072,7 @@ ${lines.join("\n")}`;
         return { error: "Not authenticated. Run `nexrall-code login` first." };
       let photos;
       try {
-        const u = new URL(`${client_1.API_BASE}/api/code/assets/stock`);
+        const u = new URL(`${client_2.API_BASE}/api/code/assets/stock`);
         u.searchParams.set("query", query);
         u.searchParams.set("count", String(count));
         if (orientation)
@@ -103052,7 +103128,7 @@ ${lines.join("\n")}` };
       if (!token)
         return { error: "Not authenticated. Run `nexrall-code login` first." };
       try {
-        const r2 = await _httpsPost(`${client_1.API_BASE}/api/code/tools/web_search`, JSON.stringify({ query }), { "Content-Type": "application/json", Authorization: `Bearer ${token}` }, 3e4, abortSignal);
+        const r2 = await _httpsPost(`${client_2.API_BASE}/api/code/tools/web_search`, JSON.stringify({ query, ...(0, client_1.billingOverrideFields)() }), { "Content-Type": "application/json", Authorization: `Bearer ${token}` }, 3e4, abortSignal);
         let json = {};
         try {
           json = JSON.parse(r2.body);
@@ -105015,6 +105091,14 @@ var require_loop = __commonJS({
         case "no-balance":
           return `
 \u{1F4B3} Stopped: your balance is empty, so the request was rejected before it started. Top up and send "continue" \u2014 no tokens were used for this turn.
+`;
+        case "no-team-budget":
+          return `
+\u{1F4B3} Stopped: the team budget you are billing to is empty, so the request was rejected before it started. Ask your team admin to add funds \u2014 or switch "Bill to" back to Personal \u2014 and send "continue". No tokens were used for this turn.
+`;
+        case "team-unavailable":
+          return `
+\u26A0\uFE0F Stopped: that team is no longer available for billing (you may have been removed, or the team was suspended). "Bill to" has been reset to your Personal account, so sending "continue" will run on your own wallet.
 `;
         case "stalled":
           return `
@@ -105037,6 +105121,13 @@ ${ctx.repeatError}
 `;
       }
     }
+    var TEAM_SCOPE_ERROR_CODES = /* @__PURE__ */ new Set([
+      "team_unavailable",
+      "team_not_found",
+      "not_a_member",
+      "member_suspended",
+      "team_suspended"
+    ]);
     function resolveMaxIterations(optionValue, settingsRaw) {
       const fromEnv = Number(process.env.NEXRALL_MAX_ITERATIONS);
       const fromSettings = Number(settingsRaw.maxIterations);
@@ -106356,12 +106447,24 @@ Continue the work from here.` }] });
               break;
             }
             const status = err.status;
+            const code = err.code;
+            if (status === 402 && code === "team_budget_exhausted") {
+              const remaining = err.remaining ?? 0;
+              const teamId = err.teamId;
+              options.onTeamBudgetStatus?.({ teamId, remaining });
+              stopReason = options.onTeamBudgetStatus ? "reported-elsewhere" : "no-team-budget";
+              break;
+            }
             if (status === 402) {
               const balance = err.balance ?? 0;
               options.onBalanceStatus?.(balance, true);
               stopReason = options.onBalanceStatus ? "reported-elsewhere" : "no-balance";
               break;
             }
+            if (status === 403 && typeof code === "string" && TEAM_SCOPE_ERROR_CODES.has(code)) {
+              stopReason = "team-unavailable";
+              break;
+            }
             runSimpleHooks(hooks.OnError, options.workDir);
             throw new types_1.AgentTurnError(`Stream failed: ${err.message}`, trimToResumableBoundary(messages), completedRounds, err);
           }
@@ -143261,7 +143364,7 @@ var chalkStderr = createChalk({ level: stderrColor ? stderrColor.level : 0 });
 var source_default = chalk;
 
 // src/index.ts
-var import_code_core7 = __toESM(require_dist3(), 1);
+var import_code_core8 = __toESM(require_dist3(), 1);
 
 // src/commands/auth.ts
 import * as readline from "readline";
@@ -143385,6 +143488,90 @@ function stopSpinner(handle2) {
   process.stdout.write("\r\x1B[K");
 }
 
+// src/commands/billing.ts
+var import_code_core2 = __toESM(require_dist3(), 1);
+function money(usd) {
+  return "$" + usd.toFixed(2);
+}
+async function requireAuth() {
+  if ((0, import_code_core2.isAuthenticated)())
+    return true;
+  console.log(source_default.red("Not logged in. Run `nex auth` first."));
+  return false;
+}
+async function billingStatusCommand() {
+  if (!await requireAuth())
+    return;
+  let orgs;
+  try {
+    orgs = await (0, import_code_core2.getOrgs)();
+  } catch {
+    console.log(source_default.yellow("Could not read your billing target (offline, or a server without team support)."));
+    return;
+  }
+  const targetId = orgs.billingTargetTeamId ?? null;
+  const team = targetId == null ? null : orgs.teams.find((t2) => t2.id === targetId) ?? null;
+  console.log("");
+  console.log(source_default.bold("Billing target"));
+  if (team) {
+    console.log(`  ${source_default.cyan(team.name)}  ${source_default.gray(`(${money(team.remainingUsd)} left this month)`)}`);
+    if (team.remainingUsd <= 0) {
+      console.log(source_default.yellow("  \u26A0 This team has no budget left \u2014 ask a team admin to add funds."));
+    }
+  } else if (targetId != null) {
+    console.log(`  ${source_default.yellow(`team ${targetId}`)}  ${source_default.gray("(not available to this account \u2014 usage falls back to your wallet)")}`);
+  } else {
+    console.log(`  Personal wallet  ${source_default.gray(`(${money(orgs.personal.balance)} available)`)}`);
+  }
+  if (orgs.teams.length > 0) {
+    console.log("");
+    console.log(source_default.gray("Teams you can bill to:"));
+    for (const t2 of orgs.teams) {
+      const marker = t2.id === targetId ? source_default.green(" \u2190 current") : "";
+      const state = t2.remainingUsd > 0 ? source_default.gray(`${money(t2.remainingUsd)} left`) : source_default.yellow("no budget left");
+      console.log(`  ${source_default.bold(String(t2.id))}  ${t2.name}  ${state}${marker}`);
+    }
+    console.log("");
+    console.log(source_default.gray("Change it with `nex billing use <id>` or `nex billing use personal`."));
+  }
+  const override = (0, import_code_core2.billingOverrideFields)();
+  if ("teamId" in override) {
+    console.log("");
+    console.log(source_default.yellow(
+      `Note: NEXRALL_BILLING_TEAM pins this run to ${override.teamId === null ? "your personal wallet" : `team ${override.teamId}`}, ignoring the account setting above.`
+    ));
+  }
+  console.log("");
+}
+async function billingUseCommand(target) {
+  if (!await requireAuth())
+    return;
+  const raw = (target || "").trim();
+  if (/^(personal|null|0)$/i.test(raw)) {
+    await applyTarget(null, "your personal wallet");
+    return;
+  }
+  if (!/^\d+$/.test(raw)) {
+    console.log(source_default.red("Usage: nex billing use <team id|personal>   (see `nex billing` for the ids)"));
+    process.exitCode = 1;
+    return;
+  }
+  await applyTarget(Number(raw), `team ${raw}`);
+}
+async function applyTarget(teamId, label) {
+  try {
+    await (0, import_code_core2.setBillingTarget)(teamId);
+  } catch (e2) {
+    console.log(source_default.red(e2.message));
+    process.exitCode = 1;
+    return;
+  }
+  console.log(source_default.green(`\u2713 Usage will now be billed to ${label}.`));
+  if (teamId !== null) {
+    console.log(source_default.gray("  This applies to every product and client on this account, not just the CLI."));
+  }
+}
+
 // src/commands/chat.ts
 import * as readline3 from "readline";
 import * as path6 from "path";
@@ -143394,7 +143581,7 @@ import * as crypto4 from "crypto";
 import { createRequire } from "module";
 import { fileURLToPath as fileURLToPath2 } from "url";
 import { execSync, execFileSync as execFileSync2 } from "child_process";
-var import_code_core4 = __toESM(require_dist3(), 1);
+var import_code_core5 = __toESM(require_dist3(), 1);
 
 // ../../node_modules/.pnpm/ansi-regex@6.2.2/node_modules/ansi-regex/index.js
 function ansiRegex({ onlyFirst = false } = {}) {
@@ -144352,18 +144539,18 @@ function showDiff(filePath, oldContent, newContent) {
 }
 
 // src/permissions/handler.ts
-var import_code_core2 = __toESM(require_dist3(), 1);
+var import_code_core3 = __toESM(require_dist3(), 1);
 var autoApproved = /* @__PURE__ */ new Set();
 var _rules = { allow: [], ask: [], deny: [] };
 var _workDir = process.cwd();
 var _mode = "ask";
 function initPermissions(workDir) {
   _workDir = workDir;
-  _rules = (0, import_code_core2.loadSettings)(workDir).permissions;
+  _rules = (0, import_code_core3.loadSettings)(workDir).permissions;
   return _rules;
 }
 function setMode(mode) {
-  _mode = (0, import_code_core2.parseMode)(mode);
+  _mode = (0, import_code_core3.parseMode)(mode);
 }
 function setAutoApprove(category) {
   autoApproved.add(category);
@@ -144407,12 +144594,12 @@ function askUser(question) {
 }
 async function requestPermission(req) {
   const { tool, input } = req;
-  const decision = (0, import_code_core2.evaluatePermission)(_rules, tool, input, _workDir);
+  const decision = (0, import_code_core3.evaluatePermission)(_rules, tool, input, _workDir);
   if (decision === "deny") {
     console.error(source_default.red(`  \u2716 Denied by permission rule: ${tool}`));
     return false;
   }
-  const destructive = (0, import_code_core2.isDestructiveBash)(tool, input);
+  const destructive = (0, import_code_core3.isDestructiveBash)(tool, input);
   if (destructive && process.env.NEXRALL_ALLOW_DESTRUCTIVE !== "1") {
     const command = input.command ?? input.cmd ?? "";
     console.error();
@@ -144430,7 +144617,7 @@ async function requestPermission(req) {
   }
   if (decision === "allow")
     return true;
-  const verdict = (0, import_code_core2.decide)({
+  const verdict = (0, import_code_core3.decide)({
     tool,
     input,
     mode: _mode,
@@ -144592,7 +144779,7 @@ async function requestPermission(req) {
 }
 
 // src/audit.ts
-var import_code_core3 = __toESM(require_dist3(), 1);
+var import_code_core4 = __toESM(require_dist3(), 1);
 import * as path from "path";
 var _state;
 var _sinks = /* @__PURE__ */ new Map();
@@ -144612,7 +144799,7 @@ function currentAudit() {
   const target = resolveAuditPath(_state);
   let sink = _sinks.get(target);
   if (!sink) {
-    sink = (0, import_code_core3.createJsonlAuditSink)(target);
+    sink = (0, import_code_core4.createJsonlAuditSink)(target);
     _sinks.set(target, sink);
   }
   const cfg = {
@@ -144625,14 +144812,14 @@ function currentAudit() {
     // request that caused it. Same trap as @nexrall/agent's and Desktop's.
     sessionId: _state.getSessionId()
   };
-  const email = (0, import_code_core3.loadAuth)()?.email;
+  const email = (0, import_code_core4.loadAuth)()?.email;
   if (email)
     cfg.userId = email;
   return cfg;
 }
 
 // src/commands/chat.ts
-var import_code_core5 = __toESM(require_dist3(), 1);
+var import_code_core6 = __toESM(require_dist3(), 1);
 
 // src/commands/sessions.ts
 import * as fs3 from "fs";
@@ -154737,8 +154924,8 @@ var CLI_VERSION = (() => {
 })();
 var MODEL_LABELS = {
   "claude-sonnet-5": "Claude Sonnet 5",
-  "claude-opus-5-5": "Claude Opus 5",
-  "claude-fable-5-1": "Claude Fable 5",
+  "claude-opus-5-5": "Claude Opus 5.5",
+  "claude-fable-5-1": "Claude Fable 5.1",
   "claude-haiku-4-5-20251001": "Claude Haiku 4.5",
   "gpt-5.6-sol": "GPT-5.6 Sol",
   "gpt-5.6-terra": "GPT-5.6 Terra",
@@ -154769,7 +154956,13 @@ var SELECTABLE_MODELS = [
   "gpt-5.4-mini",
   "gpt-4.1",
   "deepseek-flash",
-  "qwen3.7-max",
+  // qwen3.7-max deliberately NOT offered as of 2026-09-27 — it is
+  // `selectable: false` in the backend's services/codeModels.js (every
+  // request 400s with Alibaba's `Arrearage` error), so liveSelectableModelIds()
+  // never returns it. Dropped from this static fallback too so an offline /
+  // older-backend session offers the same list instead of a row that cannot
+  // run. MODEL_LABELS keeps its entry so a session already saved on it still
+  // shows a real name rather than the raw id. Re-add both together.
   "glm-5.3"
 ];
 var MODEL_COST_MULTIPLIER = {
@@ -154795,7 +154988,7 @@ var MODEL_COST_MULTIPLIER = {
   "glm-5.3": 0.6
 };
 function modelWithCostHint(id) {
-  const mult = (0, import_code_core4.liveCostMultiplierFor)(id, MODEL_COST_MULTIPLIER[id]);
+  const mult = (0, import_code_core5.liveCostMultiplierFor)(id, MODEL_COST_MULTIPLIER[id]);
   return mult === void 0 ? id : `${id} (${mult}x)`;
 }
 var NO_VISION_MODELS = /* @__PURE__ */ new Set(["qwen3.7-max", "glm-5.3"]);
@@ -154811,13 +155004,13 @@ var NO_PDF_MODELS = /* @__PURE__ */ new Set([
   ...NO_VISION_MODELS
 ]);
 function needsVisionSidecar(model) {
-  return !(0, import_code_core4.liveSupportsImageInput)(model, !NO_VISION_MODELS.has(model));
+  return !(0, import_code_core5.liveSupportsImageInput)(model, !NO_VISION_MODELS.has(model));
 }
 function needsPdfSidecar(model) {
-  return !(0, import_code_core4.liveSupportsPdfInput)(model, !NO_PDF_MODELS.has(model));
+  return !(0, import_code_core5.liveSupportsPdfInput)(model, !NO_PDF_MODELS.has(model));
 }
 function selectableModelIds() {
-  return (0, import_code_core4.liveSelectableModelIds)() ?? SELECTABLE_MODELS;
+  return (0, import_code_core5.liveSelectableModelIds)() ?? SELECTABLE_MODELS;
 }
 function normaliseModelId(model) {
   const raw = (model ?? "").trim();
@@ -154878,9 +155071,9 @@ var _BACKEND_STYLE_TO_LOCAL = {
 };
 function effortStyleFor(modelId) {
   const id = normaliseModelId(modelId);
-  if ((0, import_code_core4.liveVendorFor)(id) === "Anthropic")
+  if ((0, import_code_core5.liveVendorFor)(id) === "Anthropic")
     return "anthropic";
-  const liveStyle = (0, import_code_core4.liveReasoningEffortStyle)(id);
+  const liveStyle = (0, import_code_core5.liveReasoningEffortStyle)(id);
   if (liveStyle && _BACKEND_STYLE_TO_LOCAL[liveStyle])
     return _BACKEND_STYLE_TO_LOCAL[liveStyle];
   return MODEL_EFFORT_STYLE[id] ?? "anthropic";
@@ -154900,7 +155093,7 @@ function defaultEffortForModel(modelId) {
 }
 function resolveModelLabel(alias) {
   const id = normaliseModelId(alias);
-  return (0, import_code_core4.liveLabelFor)(id, MODEL_LABELS[id] ?? id);
+  return (0, import_code_core5.liveLabelFor)(id, MODEL_LABELS[id] ?? id);
 }
 function tryExec(cmd, cwd2) {
   try {
@@ -154961,7 +155154,7 @@ var tryRead = (p) => {
 };
 function readNexrallMd(workDir) {
   const parts = [];
-  const memContent = (0, import_code_core4.readAllMemory)(workDir);
+  const memContent = (0, import_code_core5.readAllMemory)(workDir);
   if (memContent)
     parts.push(memContent);
   const globalContent = tryRead(path6.join(os5.homedir(), ".nexrall", "nexrall.md"));
@@ -155071,12 +155264,12 @@ var Spinner = class {
 var _mcpManager = null;
 var _mcpConfig = null;
 async function initMcp(workDir) {
-  _mcpConfig = import_code_core4.McpManager.loadConfig(workDir);
+  _mcpConfig = import_code_core5.McpManager.loadConfig(workDir);
   if (Object.keys(_mcpConfig.mcpServers).length === 0) {
     _mcpManager = null;
     return;
   }
-  const manager = new import_code_core4.McpManager();
+  const manager = new import_code_core5.McpManager();
   await manager.connectAll(_mcpConfig);
   _mcpManager = manager;
 }
@@ -155097,10 +155290,10 @@ function formatMcpStatus() {
   return lines.join("\n");
 }
 function formatContextUsage(messages, modelAlias) {
-  const window2 = (0, import_code_core4.contextWindowFor)(modelAlias);
-  const tokens = (0, import_code_core4.estimateTokensRough)(messages);
-  const bytes = (0, import_code_core4.estimateBodyBytes)(messages);
-  const { prune, compact } = (0, import_code_core4.compactionThresholds)();
+  const window2 = (0, import_code_core5.contextWindowFor)(modelAlias);
+  const tokens = (0, import_code_core5.estimateTokensRough)(messages);
+  const bytes = (0, import_code_core5.estimateBodyBytes)(messages);
+  const { prune, compact } = (0, import_code_core5.compactionThresholds)();
   const pct = Math.min(100, tokens / window2 * 100);
   const barWidth = 30;
   const filled = Math.round(pct / 100 * barWidth);
@@ -155117,7 +155310,7 @@ function formatContextUsage(messages, modelAlias) {
   return lines.join("\n");
 }
 function formatAgentsList(workDir) {
-  const { types: types3, warnings } = (0, import_code_core4.loadAgentTypesWithWarnings)(workDir);
+  const { types: types3, warnings } = (0, import_code_core5.loadAgentTypesWithWarnings)(workDir);
   if (!types3.length)
     return source_default.dim("  No agent types found (this should not happen \u2014 builtins always register).");
   const lines = types3.map((t2) => {
@@ -155164,7 +155357,7 @@ async function runTurn(messages, modelAlias, workDir, abortSignal, env4, nexrall
   setMode(mode);
   console.log();
   spinner.start("thinking\u2026", { hint: false });
-  const result = await (0, import_code_core4.runAgentLoop)(messages, {
+  const result = await (0, import_code_core5.runAgentLoop)(messages, {
     workDir,
     model: modelAlias,
     env: env4,
@@ -155347,7 +155540,7 @@ async function runTurnHeadless(messages, modelAlias, workDir, _abortSignal, env4
       process.stdout.write(JSON.stringify(obj2) + "\n");
   };
   emit({ type: "start", model: modelAlias, workDir });
-  const result = await (0, import_code_core4.runAgentLoop)(messages, {
+  const result = await (0, import_code_core5.runAgentLoop)(messages, {
     workDir,
     model: modelAlias,
     env: env4,
@@ -155443,7 +155636,7 @@ async function runTurnHeadless(messages, modelAlias, workDir, _abortSignal, env4
     // no human to confirm, they are denied unless NEXRALL_ALLOW_DESTRUCTIVE=1 is
     // explicitly set for this CI run.
     requestPermission: async ({ tool, input }) => {
-      const d = (0, import_code_core4.isDestructiveBash)(tool, input);
+      const d = (0, import_code_core5.isDestructiveBash)(tool, input);
       if (d && process.env.NEXRALL_ALLOW_DESTRUCTIVE !== "1") {
         emit({ type: "error", error: `Destructive command blocked in headless mode (${d.category}): ${d.reason}. Set NEXRALL_ALLOW_DESTRUCTIVE=1 to permit.` });
         return false;
@@ -155548,7 +155741,7 @@ async function startChatSession(options) {
   let peerInbox;
   const peerInboxQueue = [];
   let modelAlias = options.model;
-  void (0, import_code_core4.getModelCatalogue)().catch(() => {
+  void (0, import_code_core5.getModelCatalogue)().catch(() => {
   });
   const canPrompt = !headless && !options.prompt && !options.stdinText && process.stdin.isTTY === true && process.stdout.isTTY === true;
   if (!trustGrantedByEnv()) {
@@ -155576,9 +155769,9 @@ Set ${TRUST_ENV_VAR}=1 to confirm non-interactively, or run \`nex\` interactivel
   }
   if (options.worktree !== void 0) {
     const requestedName = typeof options.worktree === "string" ? options.worktree : void 0;
-    const existing = requestedName ? (0, import_code_core4.findWorktreeByName)(requestedWorkDir, requestedName) : null;
+    const existing = requestedName ? (0, import_code_core5.findWorktreeByName)(requestedWorkDir, requestedName) : null;
     if (existing) {
-      const entered = (0, import_code_core4.enterWorktree)(existing);
+      const entered = (0, import_code_core5.enterWorktree)(existing);
       if (!entered.ok) {
         process.stderr.write(`Failed to resume worktree "${requestedName}": ${entered.error}
 `);
@@ -155588,7 +155781,7 @@ Set ${TRUST_ENV_VAR}=1 to confirm non-interactively, or run \`nex\` interactivel
       if (!headless)
         console.log(source_default.dim(`  Resumed worktree: ${source_default.bold(existing.name)} (${existing.worktreePath})`));
     } else {
-      const created = (0, import_code_core4.createWorktree)(requestedWorkDir, requestedName);
+      const created = (0, import_code_core5.createWorktree)(requestedWorkDir, requestedName);
       if (!created.ok || !created.state) {
         process.stderr.write(`Failed to create worktree: ${created.error ?? "unknown error"}
 `);
@@ -155607,7 +155800,7 @@ Set ${TRUST_ENV_VAR}=1 to confirm non-interactively, or run \`nex\` interactivel
     process.on("exit", () => {
       if (!worktreeState)
         return;
-      const hadWork = (0, import_code_core4.worktreeHasWork)(worktreeState);
+      const hadWork = (0, import_code_core5.worktreeHasWork)(worktreeState);
       if (hadWork) {
         process.stderr.write(
           `
@@ -155618,7 +155811,7 @@ Resume it with: nex --worktree ${worktreeState.name}
         );
         return;
       }
-      (0, import_code_core4.removeWorktree)(worktreeState);
+      (0, import_code_core5.removeWorktree)(worktreeState);
     });
   }
   const env4 = collectEnv(workDir);
@@ -155626,8 +155819,8 @@ Resume it with: nex --worktree ${worktreeState.name}
   const interactive = !headless && !options.prompt && !options.stdinText;
   let peerHeartbeatTimer;
   if (interactive) {
-    const handle2 = (0, import_code_core4.registerPeer)({ clientType: "cli", workDir: requestedWorkDir });
-    const inbox = (0, import_code_core4.startPeerInbox)(handle2.record.id, { onMessage: (m2) => peerInboxQueue.push(m2) });
+    const handle2 = (0, import_code_core5.registerPeer)({ clientType: "cli", workDir: requestedWorkDir });
+    const inbox = (0, import_code_core5.startPeerInbox)(handle2.record.id, { onMessage: (m2) => peerInboxQueue.push(m2) });
     handle2.record.socketPath = inbox.socketPath;
     handle2.heartbeat();
     peerHandle = handle2;
@@ -155697,7 +155890,7 @@ Resume it with: nex --worktree ${worktreeState.name}
   const ruleCount = permRules.allow.length + permRules.ask.length + permRules.deny.length;
   if (ruleCount && !headless)
     console.log(source_default.dim(`  ${ruleCount} permission rule(s) loaded`));
-  let skills = (0, import_code_core4.loadSkills)(workDir);
+  let skills = (0, import_code_core5.loadSkills)(workDir);
   if (skills.length && !headless)
     console.log(source_default.dim(`  ${skills.length} skill(s) loaded`));
   const mcpStarted = (async () => {
@@ -155729,7 +155922,7 @@ Resume it with: nex --worktree ${worktreeState.name}
     sessionId = stored.id;
     sessionTitle = stored.title;
     try {
-      const compacted = await (0, import_code_core4.compactMessagesForResume)(messages, {
+      const compacted = await (0, import_code_core5.compactMessagesForResume)(messages, {
         workDir,
         model: modelAlias,
         clientType: "cli",
@@ -155746,7 +155939,7 @@ Resume it with: nex --worktree ${worktreeState.name}
       console.log();
     }
   }
-  const checkpoints = new import_code_core4.CheckpointManager(workDir, sessionId);
+  const checkpoints = new import_code_core5.CheckpointManager(workDir, sessionId);
   if (options.audit) {
     const auditPath = enableAudit({
       filePath: typeof options.audit === "string" ? options.audit : void 0,
@@ -155764,7 +155957,7 @@ Resume it with: nex --worktree ${worktreeState.name}
     sessionTitle = raw.length > 60 ? raw.slice(0, 60) + "\u2026" : raw;
   };
   const recoverTurn = (err, current) => {
-    const salvaged = (0, import_code_core4.salvageHistory)(err);
+    const salvaged = (0, import_code_core5.salvageHistory)(err);
     console.error("\n" + source_default.red("Error: ") + String(err.message));
     if (!salvaged)
       return current;
@@ -155813,7 +156006,7 @@ ${text}` : "");
       await new Promise((r2) => setImmediate(r2));
       process.exit(0);
     } catch (err) {
-      const salvaged = (0, import_code_core4.salvageHistory)(err);
+      const salvaged = (0, import_code_core5.salvageHistory)(err);
       if (salvaged) {
         messages = salvaged;
         try {
@@ -155918,7 +156111,7 @@ ${text}` : "");
           messages = [];
           sessionId = crypto4.randomBytes(8).toString("hex");
           sessionTitle = "";
-          (0, import_code_core5.resetSessionSubAgentBudget)();
+          (0, import_code_core6.resetSessionSubAgentBudget)();
           console.log(source_default.dim("  Conversation cleared. New session started."));
           rl.prompt();
           return;
@@ -155952,7 +156145,7 @@ ${text}` : "");
           sessionId = stored.id;
           sessionTitle = stored.title;
           try {
-            await (0, import_code_core4.compactMessagesForResume)(messages, {
+            await (0, import_code_core5.compactMessagesForResume)(messages, {
               workDir,
               model: modelAlias,
               clientType: "cli",
@@ -156127,13 +156320,13 @@ ${dirList}`;
           const sub = arg.trim().toLowerCase();
           console.log();
           if (sub === "list") {
-            const all = (0, import_code_core4.listWorktrees)(requestedWorkDir);
+            const all = (0, import_code_core5.listWorktrees)(requestedWorkDir);
             if (!all.length) {
               console.log(source_default.dim("  No worktrees under this project."));
             } else {
               console.log(source_default.bold(`  Worktrees (${all.length})`));
               for (const w of all) {
-                const dirty = (0, import_code_core4.worktreeHasWork)(w) ? source_default.yellow("dirty") : source_default.dim("clean");
+                const dirty = (0, import_code_core5.worktreeHasWork)(w) ? source_default.yellow("dirty") : source_default.dim("clean");
                 console.log(`  ${source_default.cyan(w.name)}  ${source_default.dim(w.worktreePath)}  [${dirty}]`);
               }
               console.log();
@@ -156171,7 +156364,7 @@ ${dirList}`;
             if (!targetName || !text) {
               console.log(source_default.dim("  Usage: /peers send <name> <message>"));
             } else {
-              const target = (0, import_code_core4.listPeers)().find((p) => p.name === targetName);
+              const target = (0, import_code_core5.listPeers)().find((p) => p.name === targetName);
               if (!target) {
                 console.log(source_default.red(`  No live session named "${targetName}". Use /peers to list who's reachable.`));
               } else if (!target.socketPath) {
@@ -156188,7 +156381,7 @@ ${dirList}`;
               console.log(source_default.dim("  Usage: /peers broadcast <message>"));
             } else {
               const { broadcastPeerMessage } = await Promise.resolve().then(() => __toESM(require_dist3(), 1));
-              const targets = (0, import_code_core4.listPeers)(peerHandle.record.id).filter((p) => p.id !== peerHandle.record.id && p.socketPath && p.inbound !== "refuse").map((p) => ({ name: p.name, socketPath: p.socketPath }));
+              const targets = (0, import_code_core5.listPeers)(peerHandle.record.id).filter((p) => p.id !== peerHandle.record.id && p.socketPath && p.inbound !== "refuse").map((p) => ({ name: p.name, socketPath: p.socketPath }));
               if (!targets.length) {
                 console.log(source_default.dim("  No other reachable Nexrall Code sessions to broadcast to."));
               } else {
@@ -156200,7 +156393,7 @@ ${dirList}`;
               }
             }
           } else {
-            const peers = (0, import_code_core4.listPeers)(peerHandle.record.id);
+            const peers = (0, import_code_core5.listPeers)(peerHandle.record.id);
             if (peers.length <= 1) {
               console.log(source_default.dim("  No other Nexrall Code sessions are currently discoverable on this machine."));
             } else {
@@ -156230,7 +156423,7 @@ ${dirList}`;
             const label = memScope === "global" ? "GLOBAL" : "this PROJECT's";
             const answer = await new Promise((resolve4) => rl.question(source_default.yellow(`  Clear ${label} memory? This cannot be undone. [y/n] `), (a) => resolve4(a.trim())));
             if (answer === "y" || answer === "yes") {
-              (0, import_code_core4.clearMemory)(memScope, workDir);
+              (0, import_code_core5.clearMemory)(memScope, workDir);
               console.log(source_default.green(`  ${memScope === "global" ? "Global" : "Project"} memory cleared.`));
             } else {
               console.log(source_default.dim("  Cancelled."));
@@ -156241,20 +156434,20 @@ ${dirList}`;
           }
           console.log();
           if (wantsGlobalOnly) {
-            const stats = (0, import_code_core4.memoryStats)("global");
-            const content = (0, import_code_core4.readMemory)("global", void 0, { includeArchived: wantsArchived });
+            const stats = (0, import_code_core5.memoryStats)("global");
+            const content = (0, import_code_core5.readMemory)("global", void 0, { includeArchived: wantsArchived });
             const archivedNote = stats.archived > 0 ? `, ${stats.archived} archived` : "";
             console.log(source_default.bold("  Global memory ") + source_default.dim(`(${stats.entries} entries${archivedNote}, ${(stats.bytes / 1024).toFixed(1)}KB) \u2014 ${stats.file}`));
             console.log();
             console.log(content || source_default.dim("  No global memories saved yet."));
           } else {
-            const projStats = (0, import_code_core4.memoryStats)("project", workDir);
-            const globalStats = (0, import_code_core4.memoryStats)("global");
+            const projStats = (0, import_code_core5.memoryStats)("project", workDir);
+            const globalStats = (0, import_code_core5.memoryStats)("global");
             const projArchived = projStats.archived > 0 ? `+${projStats.archived} archived ` : "";
             const globalArchived = globalStats.archived > 0 ? `+${globalStats.archived} archived ` : "";
             console.log(source_default.bold("  Memory") + source_default.dim(`  \u2014 project: ${projStats.entries} ${projArchived}entries (${(projStats.bytes / 1024).toFixed(1)}KB)  \xB7  global: ${globalStats.entries} ${globalArchived}entries (${(globalStats.bytes / 1024).toFixed(1)}KB)`));
             console.log();
-            const merged = (0, import_code_core4.readAllMemory)(workDir, { includeArchived: wantsArchived });
+            const merged = (0, import_code_core5.readAllMemory)(workDir, { includeArchived: wantsArchived });
             console.log(merged || source_default.dim("  No memories saved yet."));
           }
           console.log();
@@ -156293,12 +156486,12 @@ ${dirList}`;
             console.log(source_default.dim(`  Current: ${source_default.cyan(agentMode)}`));
             for (const m2 of ["ask", "edit", "auto", "plan"]) {
               const marker = m2 === agentMode ? source_default.cyan("\u276F") : " ";
-              console.log(`  ${marker} ${source_default.bold(m2.padEnd(5))} ${source_default.dim((0, import_code_core5.describeMode)(m2).replace(`${m2} \u2014 `, ""))}`);
+              console.log(`  ${marker} ${source_default.bold(m2.padEnd(5))} ${source_default.dim((0, import_code_core6.describeMode)(m2).replace(`${m2} \u2014 `, ""))}`);
             }
           } else if (["ask", "edit", "plan", "auto"].includes(modeArg)) {
             agentMode = modeArg;
             updateFooter();
-            console.log(source_default.green(`  Mode \u2192 ${source_default.bold(modeArg)}`) + source_default.dim(`  ${(0, import_code_core5.describeMode)(modeArg).replace(`${modeArg} \u2014 `, "")}`));
+            console.log(source_default.green(`  Mode \u2192 ${source_default.bold(modeArg)}`) + source_default.dim(`  ${(0, import_code_core6.describeMode)(modeArg).replace(`${modeArg} \u2014 `, "")}`));
           } else {
             console.log(source_default.red(`  Unknown: ${modeArg}`));
           }
@@ -156329,7 +156522,7 @@ ${dirList}`;
         case "/balance": {
           rl.pause();
           try {
-            const bal = await (0, import_code_core4.getBalance)();
+            const bal = await (0, import_code_core5.getBalance)();
             console.log(source_default.dim("  Balance: ") + source_default.cyan(`$${bal.toFixed(4)}`));
           } catch (err) {
             console.error(source_default.red("  Failed: ") + String(err.message));
@@ -156415,7 +156608,7 @@ ${caption}` : `[Attached: ${rel}]`;
           if (needsSidecar) {
             console.log(source_default.dim(`  ${resolveModelLabel(modelAlias)} can't read ${isPdf ? "PDFs" : "images"} directly \u2014 describing ${rel} with Claude Sonnet 5 first\u2026`));
             try {
-              const { text } = await (0, import_code_core4.describeAttachment)(isPdf ? "pdf" : "image", data, mimeType, rel);
+              const { text } = await (0, import_code_core5.describeAttachment)(isPdf ? "pdf" : "image", data, mimeType, rel);
               content.push({ type: "text", text: `<attachment_description>
 ${text}
 </attachment_description>` });
@@ -156459,7 +156652,7 @@ ${text}
           process.exit(0);
         }
         case "/plugins": {
-          const plugins = (0, import_code_core4.loadPlugins)(workDir);
+          const plugins = (0, import_code_core5.loadPlugins)(workDir);
           if (!plugins.length) {
             console.log(source_default.dim("  No plugins installed. Install one:  nex plugin install owner/repo"));
           } else {
@@ -156472,7 +156665,7 @@ ${text}
             }
             console.log();
           }
-          skills = (0, import_code_core4.loadSkills)(workDir);
+          skills = (0, import_code_core5.loadSkills)(workDir);
           rl.prompt();
           return;
         }
@@ -156607,8 +156800,8 @@ ${text}
         }
         case "/skills":
         case "/commands": {
-          skills = (0, import_code_core4.loadSkills)(workDir);
-          const invocable = (0, import_code_core4.userInvokableSkills)(skills);
+          skills = (0, import_code_core5.loadSkills)(workDir);
+          const invocable = (0, import_code_core5.userInvokableSkills)(skills);
           if (!invocable.length) {
             console.log(source_default.dim("  No skills. Add .nexrall/skills/<name>/SKILL.md (or .nexrall/commands/<name>.md) to create one."));
           } else {
@@ -156625,14 +156818,14 @@ ${text}
           return;
         }
         default: {
-          const custom = (0, import_code_core4.findSkill)(skills, cmd);
+          const custom = (0, import_code_core5.findSkill)(skills, cmd);
           if (!custom) {
             console.log(source_default.red(`  Unknown command: ${cmd}`));
             console.log(source_default.dim("  Type /help for built-ins or /skills for custom ones."));
             rl.prompt();
             return;
           }
-          const expanded = (0, import_code_core4.expandSkill)(custom, arg, workDir);
+          const expanded = (0, import_code_core5.expandSkill)(custom, arg, workDir);
           const turnModel = custom.model ?? modelAlias;
           const turnMode = custom.mode ?? agentMode;
           console.log(source_default.dim(`  Running /${custom.name}\u2026`));
@@ -156694,7 +156887,7 @@ ${text}
 
 // src/commands/plugin.ts
 var import_prompts = __toESM(require_prompts3(), 1);
-var import_code_core6 = __toESM(require_dist3(), 1);
+var import_code_core7 = __toESM(require_dist3(), 1);
 function describeInspection(i2, name, ctx) {
   console.log();
   console.log(source_default.bold(`  Plugin: ${name}`) + (i2.meta.version ? source_default.dim(`  v${i2.meta.version}`) : ""));
@@ -156770,14 +156963,14 @@ async function pluginInstallCommand(spec, opts) {
     let registryName;
     const isShortName = /^[\w.-]+$/.test(spec.trim()) && !spec.includes("/");
     if (isShortName) {
-      const alias = (0, import_code_core6.resolveSourceAlias)(spec.trim(), process.cwd(), { includeProject: true });
+      const alias = (0, import_code_core7.resolveSourceAlias)(spec.trim(), process.cwd(), { includeProject: true });
       if (alias) {
         source2 = alias.spec;
         console.log(source_default.dim(`  Source: ${alias.name} (${alias.tier}) \u2190 ${alias.spec}`));
       }
     }
     if (isShortName && source2 === spec) {
-      const entry = await (0, import_code_core6.getRegistryPlugin)(spec.trim()).catch(() => null);
+      const entry = await (0, import_code_core7.getRegistryPlugin)(spec.trim()).catch(() => null);
       if (entry) {
         source2 = entry.source;
         registryName = entry.name;
@@ -156792,7 +156985,7 @@ async function pluginInstallCommand(spec, opts) {
         return;
       }
     }
-    const res = await (0, import_code_core6.installPlugin)(source2, {
+    const res = await (0, import_code_core7.installPlugin)(source2, {
       scope,
       workDir: process.cwd(),
       name: opts.name ?? registryName,
@@ -156800,7 +156993,7 @@ async function pluginInstallCommand(spec, opts) {
       confirm: (i2, name, ctx) => confirmInstall(i2, name, opts.yes === true, ctx)
     });
     if (registryName)
-      (0, import_code_core6.reportInstall)(registryName);
+      (0, import_code_core7.reportInstall)(registryName);
     console.log();
     console.log(source_default.green(`  \u2713 Installed "${res.name}" (${res.scope}) \u2192 ${res.dir}`) + (res.sha ? source_default.dim(`  @ ${res.sha.slice(0, 7)}`) : ""));
     if (res.inspection.commands.length) {
@@ -156814,7 +157007,7 @@ async function pluginInstallCommand(spec, opts) {
 }
 function pluginRemoveCommand(name, opts) {
   try {
-    const dir = (0, import_code_core6.removePlugin)(name, {
+    const dir = (0, import_code_core7.removePlugin)(name, {
       scope: opts.project ? "project" : void 0,
       // no flag → search both scopes
       workDir: process.cwd()
@@ -156827,14 +157020,14 @@ function pluginRemoveCommand(name, opts) {
 }
 async function pluginUpdateCommand(name, opts) {
   const workDir = process.cwd();
-  const targets = name ? [name] : (0, import_code_core6.loadPlugins)(workDir).filter((p) => (0, import_code_core6.readReceipt)(p.dir)?.kind === "github").map((p) => p.name);
+  const targets = name ? [name] : (0, import_code_core7.loadPlugins)(workDir).filter((p) => (0, import_code_core7.readReceipt)(p.dir)?.kind === "github").map((p) => p.name);
   if (!targets.length) {
     console.log(source_default.dim("  No updatable plugins (only GitHub-installed plugins with receipts can update)."));
     return;
   }
   for (const t2 of targets) {
     try {
-      const res = await (0, import_code_core6.updatePlugin)(t2, {
+      const res = await (0, import_code_core7.updatePlugin)(t2, {
         workDir,
         confirm: (i2, n, ctx) => confirmInstall(i2, n, opts.yes === true, ctx)
       });
@@ -156851,7 +157044,7 @@ function badgeFor(p) {
 }
 async function pluginSearchCommand(query) {
   try {
-    const results = await (0, import_code_core6.searchRegistry)(query);
+    const results = await (0, import_code_core7.searchRegistry)(query);
     if (!results.length) {
       console.log(source_default.dim(query ? `  No plugins matching "${query}".` : "  Registry is empty."));
       return;
@@ -156874,7 +157067,7 @@ async function pluginSearchCommand(query) {
 }
 async function pluginInfoCommand(name) {
   try {
-    const p = await (0, import_code_core6.getRegistryPlugin)(name);
+    const p = await (0, import_code_core7.getRegistryPlugin)(name);
     if (!p) {
       console.error(source_default.red(`  \u2717 "${name}" not found in the registry.`));
       process.exitCode = 1;
@@ -156910,7 +157103,7 @@ async function pluginInfoCommand(name) {
   }
 }
 function pluginListCommand() {
-  const plugins = (0, import_code_core6.loadPlugins)(process.cwd());
+  const plugins = (0, import_code_core7.loadPlugins)(process.cwd());
   if (!plugins.length) {
     console.log(source_default.dim("  No plugins installed."));
     console.log(source_default.dim("  Install one:  nex plugin install owner/repo"));
@@ -156919,10 +157112,10 @@ function pluginListCommand() {
   console.log();
   console.log(source_default.bold("  Installed plugins:"));
   for (const p of plugins) {
-    const receipt = (0, import_code_core6.readReceipt)(p.dir);
+    const receipt = (0, import_code_core7.readReceipt)(p.dir);
     const src = receipt ? source_default.dim(`  \u2190 ${receipt.source}`) : source_default.dim("  (manual)");
     const at = receipt?.sha ? source_default.dim(` @ ${receipt.sha.slice(0, 7)}`) : "";
-    const insp = (0, import_code_core6.inspectPluginDir)(p.dir);
+    const insp = (0, import_code_core7.inspectPluginDir)(p.dir);
     const runs = insp.hasHooks || insp.hasMcp ? source_default.yellow(`  \u26A0 ${[insp.hasHooks && "hooks", insp.hasMcp && "mcp"].filter(Boolean).join("+")}`) : "";
     console.log(
       "  " + source_default.cyan(p.name.padEnd(24)) + source_default.dim(`${(p.version ?? "").padEnd(10)}${p.scope.padEnd(9)}`) + src + at + runs
@@ -156932,8 +157125,8 @@ function pluginListCommand() {
 }
 function pluginSourceListCommand() {
   const workDir = process.cwd();
-  const sources = (0, import_code_core6.loadDeclaredSources)(workDir, { includeProject: true });
-  const patterns = (0, import_code_core6.allowedSourcePatterns)();
+  const sources = (0, import_code_core7.loadDeclaredSources)(workDir, { includeProject: true });
+  const patterns = (0, import_code_core7.allowedSourcePatterns)();
   if (patterns) {
     console.log();
     console.log(source_default.bold("  Organisation policy: ") + source_default.dim(`installs restricted to ${patterns.join(", ")}`));
@@ -156948,7 +157141,7 @@ function pluginSourceListCommand() {
   console.log(source_default.bold("  Declared plugin sources:"));
   for (const s2 of sources) {
     const tier = s2.tier === "project" ? source_default.yellow(s2.tier.padEnd(9)) : source_default.dim(s2.tier.padEnd(9));
-    const blocked = !(0, import_code_core6.isSourceAllowed)(s2.spec, patterns) ? source_default.red("  \u2717 blocked by policy") : "";
+    const blocked = !(0, import_code_core7.isSourceAllowed)(s2.spec, patterns) ? source_default.red("  \u2717 blocked by policy") : "";
     console.log("  " + source_default.cyan(s2.name.padEnd(20)) + tier + source_default.white(s2.spec) + blocked);
   }
   console.log();
@@ -156958,17 +157151,17 @@ function pluginSourceListCommand() {
 }
 function pluginSourceAddCommand(name, spec, opts) {
   try {
-    (0, import_code_core6.parsePluginSource)(spec);
-    const patterns = (0, import_code_core6.allowedSourcePatterns)();
-    if (patterns && !(0, import_code_core6.isSourceAllowed)(spec, patterns)) {
+    (0, import_code_core7.parsePluginSource)(spec);
+    const patterns = (0, import_code_core7.allowedSourcePatterns)();
+    if (patterns && !(0, import_code_core7.isSourceAllowed)(spec, patterns)) {
       console.error(source_default.red(`  \u2717 "${spec}" is not permitted by your organisation's policy.`));
       console.error(source_default.dim(`    Allowed: ${patterns.join(", ")}`));
       process.exitCode = 1;
       return;
     }
     const scope = opts.project ? "project" : "user";
-    const file = (0, import_code_core6.sourcesFileFor)(scope, process.cwd());
-    (0, import_code_core6.writeDeclaredSource)(file, name, spec);
+    const file = (0, import_code_core7.sourcesFileFor)(scope, process.cwd());
+    (0, import_code_core7.writeDeclaredSource)(file, name, spec);
     console.log();
     console.log(source_default.green(`  \u2713 Declared "${name}" \u2192 ${spec}`) + source_default.dim(`  (${scope})`));
     console.log(source_default.dim(`    ${file}`));
@@ -156982,13 +157175,13 @@ function pluginSourceAddCommand(name, spec, opts) {
 function pluginSourceRemoveCommand(name, opts) {
   const workDir = process.cwd();
   const scope = opts.project ? "project" : "user";
-  const file = (0, import_code_core6.sourcesFileFor)(scope, workDir);
-  if ((0, import_code_core6.removeDeclaredSource)(file, name)) {
+  const file = (0, import_code_core7.sourcesFileFor)(scope, workDir);
+  if ((0, import_code_core7.removeDeclaredSource)(file, name)) {
     console.log(source_default.green(`  \u2713 Removed source "${name}" (${scope})`));
     console.log(source_default.dim("    Plugins already installed from it are untouched \u2014 remove them with  nex plugin remove <name>"));
     return;
   }
-  const found = (0, import_code_core6.resolveSourceAlias)(name, workDir, { includeProject: true });
+  const found = (0, import_code_core7.resolveSourceAlias)(name, workDir, { includeProject: true });
   if (found) {
     console.error(source_default.red(`  \u2717 "${name}" is declared in the ${found.tier} tier, not ${scope}.`));
     console.error(source_default.dim(`    ${found.file}`));
@@ -157009,6 +157202,13 @@ var program2 = new Command();
 program2.name("nex").description("Nexrall Code \u2014 AI coding assistant (powered by Nexrall)").version(NEX_VERSION).enablePositionalOptions();
 program2.command("auth").description("Login to your Nexrall account").action(authCommand);
 program2.command("logout").description("Log out of your Nexrall account").action(logoutCommand);
+var billing = program2.command("billing").description("Show, or change, which budget pays for your usage");
+billing.command("use <team|personal>").description("Bill to a team id (see `nex billing`) or back to your personal wallet").action(async (target) => {
+  await billingUseCommand(target);
+});
+billing.action(async () => {
+  await billingStatusCommand();
+});
 program2.command("update").description("Update nex to the latest version").option("-c, --check", "Check for updates without installing").option("-y, --yes", "Skip confirmation prompt").action(async (opts) => {
   await updateCommand({ check: opts.check, yes: opts.yes });
 });
@@ -157078,7 +157278,7 @@ program2.command("sessions").description("List or delete saved chat sessions").o
   console.log();
 });
 program2.option("-p, --pro", "Use Claude Opus 5 (most capable)").option("-t, --turbo", "Use Claude Sonnet 5 (fast, default)").option("-u, --ultra", "Use Claude Fable 5 (most powerful)").option("-y, --yolo", "Auto-approve all tool calls (no permission prompts)").option("-d, --dir <path>", "Set working directory (default: current directory)").option("-m, --model <name>", "Explicit model, e.g. claude-opus-5-5 | gpt-5.4 | gpt-4.1").option("-r, --resume [id]", "Resume last session, or a specific session id").option("-w, --worktree [name]", "Isolate this session in its own worktree \u2014 a separate directory (and, in a git repo, its own branch) so it can never overwrite files another session (or you) are touching in the main checkout. Omit a name for an auto-generated one; pass an existing name to resume that same worktree.").option("-e, --effort <level>", "Thinking effort \u2014 real levels depend on the model (e.g. DeepSeek: low|high|max, Qwen: low|high); run `nex --model <id>` then `/effort` with no argument to see a model's scale").option("--no-banner", "Skip the ASCII banner (useful in scripts/pipes)").option("--output-format <fmt>", "One-shot output format: text | json | stream-json (implies auto-approve)").option("--audit [path]", "Log every tool call (and refusal) to a JSONL trail (default: .nexrall/audit/<session>.jsonl)").argument("[prompt...]", "One-shot prompt \u2014 if omitted, starts interactive mode").action(async (promptParts, options) => {
-  if (!(0, import_code_core7.isAuthenticated)()) {
+  if (!(0, import_code_core8.isAuthenticated)()) {
     console.error("Not logged in. Run: nex auth");
     process.exit(1);
   }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "nexrall-code",
-  "version": "0.5.109",
+  "version": "0.5.111",
   "description": "Nexrall Code — AI coding assistant for your terminal (headless agent for scripts, CI and automation)",
   "keywords": [
     "ai",