nexrall-code 0.5.110 → 0.5.111

package/dist/index.js

@@ -3182,12 +3182,11 @@ var require_auth = __commonJS({
     exports2.saveAuth = saveAuth2;
     exports2.loadAuth = loadAuth2;
     exports2.clearAuth = clearAuth2;
-    exports2.isAuthenticated = isAuthenticated3;
+    exports2.isAuthenticated = isAuthenticated4;
     exports2.getToken = getToken;
     exports2.getRefreshToken = getRefreshToken;
     exports2.updateTokens = updateTokens;
-    exports2.getBillingTeamId = getBillingTeamId;
-    exports2.setBillingTeamId = setBillingTeamId;
+    exports2.getBillingTeamOverride = getBillingTeamOverride;
     var fs9 = __importStar(__require("fs"));
     var path8 = __importStar(__require("path"));
     var os6 = __importStar(__require("os"));
@@ -3229,7 +3228,7 @@ var require_auth = __commonJS({
       } catch {
       }
     }
-    function isAuthenticated3() {
+    function isAuthenticated4() {
       const auth = loadAuth2();
       return auth !== null && auth.token.length > 0;
     }
@@ -3265,29 +3264,21 @@ var require_auth = __commonJS({
       };
       fs9.writeFileSync(CONFIG_FILE, JSON.stringify(next, null, 2), { mode: 384 });
     }
-    function getBillingTeamId() {
-      const auth = loadAuth2();
-      const v = auth?.billingTeamId;
-      return typeof v === "number" && Number.isSafeInteger(v) && v > 0 ? v : null;
-    }
-    function setBillingTeamId(teamId) {
-      let existing = {};
-      try {
-        if (fs9.existsSync(CONFIG_FILE)) {
-          const parsed = JSON.parse(fs9.readFileSync(CONFIG_FILE, "utf-8"));
-          if (typeof parsed === "object" && parsed !== null)
-            existing = parsed;
+    function getBillingTeamOverride() {
+      const raw = process.env.NEXRALL_BILLING_TEAM;
+      if (raw != null && raw !== "") {
+        const trimmed = raw.trim();
+        if (/^(personal|null|0)$/i.test(trimmed))
+          return null;
+        if (/^\d+$/.test(trimmed)) {
+          const n = Number(trimmed);
+          if (Number.isSafeInteger(n) && n > 0)
+            return n;
         }
-      } catch {
       }
-      ensureConfigDir();
-      const next = { ...existing };
-      if (typeof teamId === "number" && Number.isSafeInteger(teamId) && teamId > 0) {
-        next.billingTeamId = teamId;
-      } else {
-        delete next.billingTeamId;
-      }
-      fs9.writeFileSync(CONFIG_FILE, JSON.stringify(next, null, 2), { mode: 384 });
+      if (process.env.NEXRALL_TOKEN)
+        return null;
+      return void 0;
     }
   }
 });
@@ -9929,7 +9920,9 @@ var require_client = __commonJS({
     exports2.revokeRefreshToken = revokeRefreshToken2;
     exports2.describeAttachment = describeAttachment2;
     exports2.getBalance = getBalance3;
-    exports2.getOrgs = getOrgs;
+    exports2.billingOverrideFields = billingOverrideFields2;
+    exports2.setBillingTarget = setBillingTarget2;
+    exports2.getOrgs = getOrgs2;
     exports2.getCodeModels = getCodeModels;
     exports2.getUsageDaily = getUsageDaily;
     exports2.exchangeVscodeCode = exchangeVscodeCode;
@@ -10118,7 +10111,7 @@ var require_client = __commonJS({
           {
             method: "POST",
             headers: authHeaders(),
-            body: JSON.stringify({ messages, model, env: env4, editorContext, nexrallMd, mode, effort, clientType, extraTools, agents, skills, turnId, canWriteSharedMemory, hasOwnAgentStore, canSpawnSubAgents, canBrowseWeb, teamId: (0, index_1.getBillingTeamId)() }),
+            body: JSON.stringify({ messages, model, env: env4, editorContext, nexrallMd, mode, effort, clientType, extraTools, agents, skills, turnId, canWriteSharedMemory, hasOwnAgentStore, canSpawnSubAgents, canBrowseWeb, ...billingOverrideFields2() }),
             signal
           }
         ];
@@ -10690,7 +10683,7 @@ var require_client = __commonJS({
       const fetchOnce = () => (0, node_fetch_1.default)(`${exports2.API_BASE}/api/code/assets/describe`, {
         method: "POST",
         headers: { ...authHeaders(), "Content-Type": "application/json" },
-        body: JSON.stringify({ kind, data, media_type: mediaType, name, teamId: (0, index_1.getBillingTeamId)() })
+        body: JSON.stringify({ kind, data, media_type: mediaType, name, ...billingOverrideFields2() })
       });
       let response = await fetchOnce();
       if (response.status === 401 || response.status === 403) {
@@ -10735,7 +10728,28 @@ var require_client = __commonJS({
       const data = await response.json();
       return typeof data.balance === "number" ? data.balance : 0;
     }
-    async function getOrgs() {
+    function billingOverrideFields2() {
+      const override = (0, index_1.getBillingTeamOverride)();
+      return override === void 0 ? {} : { teamId: override };
+    }
+    async function setBillingTarget2(teamId) {
+      const response = await (0, node_fetch_1.default)(`${exports2.API_BASE}/api/user/billing-target`, {
+        method: "PUT",
+        headers: authHeaders(),
+        body: JSON.stringify({ teamId })
+      });
+      if (!response.ok) {
+        let message = `API error ${response.status}`;
+        try {
+          const parsed = await response.json();
+          if (parsed.error)
+            message = parsed.error;
+        } catch {
+        }
+        throw new Error(message);
+      }
+    }
+    async function getOrgs2() {
       const fetchOnce = () => (0, node_fetch_1.default)(`${exports2.API_BASE}/api/code/orgs`, { method: "GET", headers: authHeaders() });
       let response = await fetchOnce();
       if (response.status === 401 || response.status === 403) {
@@ -10752,7 +10766,8 @@ var require_client = __commonJS({
       const json = await response.json();
       return {
         personal: { balance: typeof json.personal?.balance === "number" ? json.personal.balance : 0 },
-        teams: Array.isArray(json.teams) ? json.teams : []
+        teams: Array.isArray(json.teams) ? json.teams : [],
+        billingTargetTeamId: typeof json.billingTargetTeamId === "number" ? json.billingTargetTeamId : null
       };
     }
     async function getCodeModels() {
@@ -101044,13 +101059,14 @@ var require_executor = __commonJS({
     var child_process_1 = __require("child_process");
     var sandbox_1 = require_sandbox();
     var auth_1 = require_auth();
+    var client_1 = require_client();
     var editCompleteness_1 = require_editCompleteness();
     var securityLint_1 = require_securityLint();
     var memory_1 = require_memory();
     var skills_1 = require_skills();
     var testIntegrity_1 = require_testIntegrity();
     var crossFile_1 = require_crossFile();
-    var client_1 = require_client();
+    var client_2 = require_client();
     var symbols_1 = require_symbols();
     var tsLangService_1 = require_tsLangService();
     var safeSlice_1 = require_safeSlice();
@@ -103007,7 +103023,7 @@ ${lines.join("\n")}`;
       let cost;
       let balance;
       try {
-        const r2 = await _httpsPost(`${client_1.API_BASE}/api/code/assets/generate`, JSON.stringify({ prompt: prompt2, aspect_ratio: aspectRatio, teamId: (0, auth_1.getBillingTeamId)() }), { "Content-Type": "application/json", Authorization: `Bearer ${token}` }, 17e4, abortSignal);
+        const r2 = await _httpsPost(`${client_2.API_BASE}/api/code/assets/generate`, JSON.stringify({ prompt: prompt2, aspect_ratio: aspectRatio, ...(0, client_1.billingOverrideFields)() }), { "Content-Type": "application/json", Authorization: `Bearer ${token}` }, 17e4, abortSignal);
         let json = {};
         try {
           json = JSON.parse(r2.body);
@@ -103056,7 +103072,7 @@ ${lines.join("\n")}`;
         return { error: "Not authenticated. Run `nexrall-code login` first." };
       let photos;
       try {
-        const u = new URL(`${client_1.API_BASE}/api/code/assets/stock`);
+        const u = new URL(`${client_2.API_BASE}/api/code/assets/stock`);
         u.searchParams.set("query", query);
         u.searchParams.set("count", String(count));
         if (orientation)
@@ -103112,7 +103128,7 @@ ${lines.join("\n")}` };
       if (!token)
         return { error: "Not authenticated. Run `nexrall-code login` first." };
       try {
-        const r2 = await _httpsPost(`${client_1.API_BASE}/api/code/tools/web_search`, JSON.stringify({ query, teamId: (0, auth_1.getBillingTeamId)() }), { "Content-Type": "application/json", Authorization: `Bearer ${token}` }, 3e4, abortSignal);
+        const r2 = await _httpsPost(`${client_2.API_BASE}/api/code/tools/web_search`, JSON.stringify({ query, ...(0, client_1.billingOverrideFields)() }), { "Content-Type": "application/json", Authorization: `Bearer ${token}` }, 3e4, abortSignal);
         let json = {};
         try {
           json = JSON.parse(r2.body);
@@ -104891,7 +104907,6 @@ var require_loop = __commonJS({
     exports2.trimToResumableBoundary = trimToResumableBoundary;
     var types_1 = require_types();
     var client_1 = require_client();
-    var index_1 = require_auth();
     var executor_1 = require_executor();
     var agentTypes_1 = require_agentTypes();
     var skills_1 = require_skills();
@@ -104904,7 +104919,7 @@ var require_loop = __commonJS({
     var worktreeEnforcement_1 = require_worktreeEnforcement();
     var agentRegistry_1 = require_agentRegistry();
     var sandbox_1 = require_sandbox();
-    var index_2 = require_plugins();
+    var index_1 = require_plugins();
     var testIntegrity_1 = require_testIntegrity();
     var flaky_1 = require_flaky();
     var claimEvidence_1 = require_claimEvidence();
@@ -104924,7 +104939,7 @@ var require_loop = __commonJS({
           fromSettings = JSON.parse(fs9.readFileSync(p, "utf-8")).hooks ?? {};
       } catch {
       }
-      const fromPlugins = (0, index_2.pluginHooks)(workDir);
+      const fromPlugins = (0, index_1.pluginHooks)(workDir);
       const merged = { ...fromSettings };
       for (const phase of Object.keys(fromPlugins)) {
         const extra = fromPlugins[phase];
@@ -106447,7 +106462,6 @@ Continue the work from here.` }] });
               break;
             }
             if (status === 403 && typeof code === "string" && TEAM_SCOPE_ERROR_CODES.has(code)) {
-              (0, index_1.setBillingTeamId)(null);
               stopReason = "team-unavailable";
               break;
             }
@@ -143350,7 +143364,7 @@ var chalkStderr = createChalk({ level: stderrColor ? stderrColor.level : 0 });
 var source_default = chalk;
 
 // src/index.ts
-var import_code_core7 = __toESM(require_dist3(), 1);
+var import_code_core8 = __toESM(require_dist3(), 1);
 
 // src/commands/auth.ts
 import * as readline from "readline";
@@ -143474,6 +143488,90 @@ function stopSpinner(handle2) {
   process.stdout.write("\r\x1B[K");
 }
 
+// src/commands/billing.ts
+var import_code_core2 = __toESM(require_dist3(), 1);
+function money(usd) {
+  return "$" + usd.toFixed(2);
+}
+async function requireAuth() {
+  if ((0, import_code_core2.isAuthenticated)())
+    return true;
+  console.log(source_default.red("Not logged in. Run `nex auth` first."));
+  return false;
+}
+async function billingStatusCommand() {
+  if (!await requireAuth())
+    return;
+  let orgs;
+  try {
+    orgs = await (0, import_code_core2.getOrgs)();
+  } catch {
+    console.log(source_default.yellow("Could not read your billing target (offline, or a server without team support)."));
+    return;
+  }
+  const targetId = orgs.billingTargetTeamId ?? null;
+  const team = targetId == null ? null : orgs.teams.find((t2) => t2.id === targetId) ?? null;
+  console.log("");
+  console.log(source_default.bold("Billing target"));
+  if (team) {
+    console.log(`  ${source_default.cyan(team.name)}  ${source_default.gray(`(${money(team.remainingUsd)} left this month)`)}`);
+    if (team.remainingUsd <= 0) {
+      console.log(source_default.yellow("  \u26A0 This team has no budget left \u2014 ask a team admin to add funds."));
+    }
+  } else if (targetId != null) {
+    console.log(`  ${source_default.yellow(`team ${targetId}`)}  ${source_default.gray("(not available to this account \u2014 usage falls back to your wallet)")}`);
+  } else {
+    console.log(`  Personal wallet  ${source_default.gray(`(${money(orgs.personal.balance)} available)`)}`);
+  }
+  if (orgs.teams.length > 0) {
+    console.log("");
+    console.log(source_default.gray("Teams you can bill to:"));
+    for (const t2 of orgs.teams) {
+      const marker = t2.id === targetId ? source_default.green(" \u2190 current") : "";
+      const state = t2.remainingUsd > 0 ? source_default.gray(`${money(t2.remainingUsd)} left`) : source_default.yellow("no budget left");
+      console.log(`  ${source_default.bold(String(t2.id))}  ${t2.name}  ${state}${marker}`);
+    }
+    console.log("");
+    console.log(source_default.gray("Change it with `nex billing use <id>` or `nex billing use personal`."));
+  }
+  const override = (0, import_code_core2.billingOverrideFields)();
+  if ("teamId" in override) {
+    console.log("");
+    console.log(source_default.yellow(
+      `Note: NEXRALL_BILLING_TEAM pins this run to ${override.teamId === null ? "your personal wallet" : `team ${override.teamId}`}, ignoring the account setting above.`
+    ));
+  }
+  console.log("");
+}
+async function billingUseCommand(target) {
+  if (!await requireAuth())
+    return;
+  const raw = (target || "").trim();
+  if (/^(personal|null|0)$/i.test(raw)) {
+    await applyTarget(null, "your personal wallet");
+    return;
+  }
+  if (!/^\d+$/.test(raw)) {
+    console.log(source_default.red("Usage: nex billing use <team id|personal>   (see `nex billing` for the ids)"));
+    process.exitCode = 1;
+    return;
+  }
+  await applyTarget(Number(raw), `team ${raw}`);
+}
+async function applyTarget(teamId, label) {
+  try {
+    await (0, import_code_core2.setBillingTarget)(teamId);
+  } catch (e2) {
+    console.log(source_default.red(e2.message));
+    process.exitCode = 1;
+    return;
+  }
+  console.log(source_default.green(`\u2713 Usage will now be billed to ${label}.`));
+  if (teamId !== null) {
+    console.log(source_default.gray("  This applies to every product and client on this account, not just the CLI."));
+  }
+}
+
 // src/commands/chat.ts
 import * as readline3 from "readline";
 import * as path6 from "path";
@@ -143483,7 +143581,7 @@ import * as crypto4 from "crypto";
 import { createRequire } from "module";
 import { fileURLToPath as fileURLToPath2 } from "url";
 import { execSync, execFileSync as execFileSync2 } from "child_process";
-var import_code_core4 = __toESM(require_dist3(), 1);
+var import_code_core5 = __toESM(require_dist3(), 1);
 
 // ../../node_modules/.pnpm/ansi-regex@6.2.2/node_modules/ansi-regex/index.js
 function ansiRegex({ onlyFirst = false } = {}) {
@@ -144441,18 +144539,18 @@ function showDiff(filePath, oldContent, newContent) {
 }
 
 // src/permissions/handler.ts
-var import_code_core2 = __toESM(require_dist3(), 1);
+var import_code_core3 = __toESM(require_dist3(), 1);
 var autoApproved = /* @__PURE__ */ new Set();
 var _rules = { allow: [], ask: [], deny: [] };
 var _workDir = process.cwd();
 var _mode = "ask";
 function initPermissions(workDir) {
   _workDir = workDir;
-  _rules = (0, import_code_core2.loadSettings)(workDir).permissions;
+  _rules = (0, import_code_core3.loadSettings)(workDir).permissions;
   return _rules;
 }
 function setMode(mode) {
-  _mode = (0, import_code_core2.parseMode)(mode);
+  _mode = (0, import_code_core3.parseMode)(mode);
 }
 function setAutoApprove(category) {
   autoApproved.add(category);
@@ -144496,12 +144594,12 @@ function askUser(question) {
 }
 async function requestPermission(req) {
   const { tool, input } = req;
-  const decision = (0, import_code_core2.evaluatePermission)(_rules, tool, input, _workDir);
+  const decision = (0, import_code_core3.evaluatePermission)(_rules, tool, input, _workDir);
   if (decision === "deny") {
     console.error(source_default.red(`  \u2716 Denied by permission rule: ${tool}`));
     return false;
   }
-  const destructive = (0, import_code_core2.isDestructiveBash)(tool, input);
+  const destructive = (0, import_code_core3.isDestructiveBash)(tool, input);
   if (destructive && process.env.NEXRALL_ALLOW_DESTRUCTIVE !== "1") {
     const command = input.command ?? input.cmd ?? "";
     console.error();
@@ -144519,7 +144617,7 @@ async function requestPermission(req) {
   }
   if (decision === "allow")
     return true;
-  const verdict = (0, import_code_core2.decide)({
+  const verdict = (0, import_code_core3.decide)({
     tool,
     input,
     mode: _mode,
@@ -144681,7 +144779,7 @@ async function requestPermission(req) {
 }
 
 // src/audit.ts
-var import_code_core3 = __toESM(require_dist3(), 1);
+var import_code_core4 = __toESM(require_dist3(), 1);
 import * as path from "path";
 var _state;
 var _sinks = /* @__PURE__ */ new Map();
@@ -144701,7 +144799,7 @@ function currentAudit() {
   const target = resolveAuditPath(_state);
   let sink = _sinks.get(target);
   if (!sink) {
-    sink = (0, import_code_core3.createJsonlAuditSink)(target);
+    sink = (0, import_code_core4.createJsonlAuditSink)(target);
     _sinks.set(target, sink);
   }
   const cfg = {
@@ -144714,14 +144812,14 @@ function currentAudit() {
     // request that caused it. Same trap as @nexrall/agent's and Desktop's.
     sessionId: _state.getSessionId()
   };
-  const email = (0, import_code_core3.loadAuth)()?.email;
+  const email = (0, import_code_core4.loadAuth)()?.email;
   if (email)
     cfg.userId = email;
   return cfg;
 }
 
 // src/commands/chat.ts
-var import_code_core5 = __toESM(require_dist3(), 1);
+var import_code_core6 = __toESM(require_dist3(), 1);
 
 // src/commands/sessions.ts
 import * as fs3 from "fs";
@@ -154890,7 +154988,7 @@ var MODEL_COST_MULTIPLIER = {
   "glm-5.3": 0.6
 };
 function modelWithCostHint(id) {
-  const mult = (0, import_code_core4.liveCostMultiplierFor)(id, MODEL_COST_MULTIPLIER[id]);
+  const mult = (0, import_code_core5.liveCostMultiplierFor)(id, MODEL_COST_MULTIPLIER[id]);
   return mult === void 0 ? id : `${id} (${mult}x)`;
 }
 var NO_VISION_MODELS = /* @__PURE__ */ new Set(["qwen3.7-max", "glm-5.3"]);
@@ -154906,13 +155004,13 @@ var NO_PDF_MODELS = /* @__PURE__ */ new Set([
   ...NO_VISION_MODELS
 ]);
 function needsVisionSidecar(model) {
-  return !(0, import_code_core4.liveSupportsImageInput)(model, !NO_VISION_MODELS.has(model));
+  return !(0, import_code_core5.liveSupportsImageInput)(model, !NO_VISION_MODELS.has(model));
 }
 function needsPdfSidecar(model) {
-  return !(0, import_code_core4.liveSupportsPdfInput)(model, !NO_PDF_MODELS.has(model));
+  return !(0, import_code_core5.liveSupportsPdfInput)(model, !NO_PDF_MODELS.has(model));
 }
 function selectableModelIds() {
-  return (0, import_code_core4.liveSelectableModelIds)() ?? SELECTABLE_MODELS;
+  return (0, import_code_core5.liveSelectableModelIds)() ?? SELECTABLE_MODELS;
 }
 function normaliseModelId(model) {
   const raw = (model ?? "").trim();
@@ -154973,9 +155071,9 @@ var _BACKEND_STYLE_TO_LOCAL = {
 };
 function effortStyleFor(modelId) {
   const id = normaliseModelId(modelId);
-  if ((0, import_code_core4.liveVendorFor)(id) === "Anthropic")
+  if ((0, import_code_core5.liveVendorFor)(id) === "Anthropic")
     return "anthropic";
-  const liveStyle = (0, import_code_core4.liveReasoningEffortStyle)(id);
+  const liveStyle = (0, import_code_core5.liveReasoningEffortStyle)(id);
   if (liveStyle && _BACKEND_STYLE_TO_LOCAL[liveStyle])
     return _BACKEND_STYLE_TO_LOCAL[liveStyle];
   return MODEL_EFFORT_STYLE[id] ?? "anthropic";
@@ -154995,7 +155093,7 @@ function defaultEffortForModel(modelId) {
 }
 function resolveModelLabel(alias) {
   const id = normaliseModelId(alias);
-  return (0, import_code_core4.liveLabelFor)(id, MODEL_LABELS[id] ?? id);
+  return (0, import_code_core5.liveLabelFor)(id, MODEL_LABELS[id] ?? id);
 }
 function tryExec(cmd, cwd2) {
   try {
@@ -155056,7 +155154,7 @@ var tryRead = (p) => {
 };
 function readNexrallMd(workDir) {
   const parts = [];
-  const memContent = (0, import_code_core4.readAllMemory)(workDir);
+  const memContent = (0, import_code_core5.readAllMemory)(workDir);
   if (memContent)
     parts.push(memContent);
   const globalContent = tryRead(path6.join(os5.homedir(), ".nexrall", "nexrall.md"));
@@ -155166,12 +155264,12 @@ var Spinner = class {
 var _mcpManager = null;
 var _mcpConfig = null;
 async function initMcp(workDir) {
-  _mcpConfig = import_code_core4.McpManager.loadConfig(workDir);
+  _mcpConfig = import_code_core5.McpManager.loadConfig(workDir);
   if (Object.keys(_mcpConfig.mcpServers).length === 0) {
     _mcpManager = null;
     return;
   }
-  const manager = new import_code_core4.McpManager();
+  const manager = new import_code_core5.McpManager();
   await manager.connectAll(_mcpConfig);
   _mcpManager = manager;
 }
@@ -155192,10 +155290,10 @@ function formatMcpStatus() {
   return lines.join("\n");
 }
 function formatContextUsage(messages, modelAlias) {
-  const window2 = (0, import_code_core4.contextWindowFor)(modelAlias);
-  const tokens = (0, import_code_core4.estimateTokensRough)(messages);
-  const bytes = (0, import_code_core4.estimateBodyBytes)(messages);
-  const { prune, compact } = (0, import_code_core4.compactionThresholds)();
+  const window2 = (0, import_code_core5.contextWindowFor)(modelAlias);
+  const tokens = (0, import_code_core5.estimateTokensRough)(messages);
+  const bytes = (0, import_code_core5.estimateBodyBytes)(messages);
+  const { prune, compact } = (0, import_code_core5.compactionThresholds)();
   const pct = Math.min(100, tokens / window2 * 100);
   const barWidth = 30;
   const filled = Math.round(pct / 100 * barWidth);
@@ -155212,7 +155310,7 @@ function formatContextUsage(messages, modelAlias) {
   return lines.join("\n");
 }
 function formatAgentsList(workDir) {
-  const { types: types3, warnings } = (0, import_code_core4.loadAgentTypesWithWarnings)(workDir);
+  const { types: types3, warnings } = (0, import_code_core5.loadAgentTypesWithWarnings)(workDir);
   if (!types3.length)
     return source_default.dim("  No agent types found (this should not happen \u2014 builtins always register).");
   const lines = types3.map((t2) => {
@@ -155259,7 +155357,7 @@ async function runTurn(messages, modelAlias, workDir, abortSignal, env4, nexrall
   setMode(mode);
   console.log();
   spinner.start("thinking\u2026", { hint: false });
-  const result = await (0, import_code_core4.runAgentLoop)(messages, {
+  const result = await (0, import_code_core5.runAgentLoop)(messages, {
     workDir,
     model: modelAlias,
     env: env4,
@@ -155442,7 +155540,7 @@ async function runTurnHeadless(messages, modelAlias, workDir, _abortSignal, env4
       process.stdout.write(JSON.stringify(obj2) + "\n");
   };
   emit({ type: "start", model: modelAlias, workDir });
-  const result = await (0, import_code_core4.runAgentLoop)(messages, {
+  const result = await (0, import_code_core5.runAgentLoop)(messages, {
     workDir,
     model: modelAlias,
     env: env4,
@@ -155538,7 +155636,7 @@ async function runTurnHeadless(messages, modelAlias, workDir, _abortSignal, env4
     // no human to confirm, they are denied unless NEXRALL_ALLOW_DESTRUCTIVE=1 is
     // explicitly set for this CI run.
     requestPermission: async ({ tool, input }) => {
-      const d = (0, import_code_core4.isDestructiveBash)(tool, input);
+      const d = (0, import_code_core5.isDestructiveBash)(tool, input);
       if (d && process.env.NEXRALL_ALLOW_DESTRUCTIVE !== "1") {
         emit({ type: "error", error: `Destructive command blocked in headless mode (${d.category}): ${d.reason}. Set NEXRALL_ALLOW_DESTRUCTIVE=1 to permit.` });
         return false;
@@ -155643,7 +155741,7 @@ async function startChatSession(options) {
   let peerInbox;
   const peerInboxQueue = [];
   let modelAlias = options.model;
-  void (0, import_code_core4.getModelCatalogue)().catch(() => {
+  void (0, import_code_core5.getModelCatalogue)().catch(() => {
   });
   const canPrompt = !headless && !options.prompt && !options.stdinText && process.stdin.isTTY === true && process.stdout.isTTY === true;
   if (!trustGrantedByEnv()) {
@@ -155671,9 +155769,9 @@ Set ${TRUST_ENV_VAR}=1 to confirm non-interactively, or run \`nex\` interactivel
   }
   if (options.worktree !== void 0) {
     const requestedName = typeof options.worktree === "string" ? options.worktree : void 0;
-    const existing = requestedName ? (0, import_code_core4.findWorktreeByName)(requestedWorkDir, requestedName) : null;
+    const existing = requestedName ? (0, import_code_core5.findWorktreeByName)(requestedWorkDir, requestedName) : null;
     if (existing) {
-      const entered = (0, import_code_core4.enterWorktree)(existing);
+      const entered = (0, import_code_core5.enterWorktree)(existing);
       if (!entered.ok) {
         process.stderr.write(`Failed to resume worktree "${requestedName}": ${entered.error}
 `);
@@ -155683,7 +155781,7 @@ Set ${TRUST_ENV_VAR}=1 to confirm non-interactively, or run \`nex\` interactivel
       if (!headless)
         console.log(source_default.dim(`  Resumed worktree: ${source_default.bold(existing.name)} (${existing.worktreePath})`));
     } else {
-      const created = (0, import_code_core4.createWorktree)(requestedWorkDir, requestedName);
+      const created = (0, import_code_core5.createWorktree)(requestedWorkDir, requestedName);
       if (!created.ok || !created.state) {
         process.stderr.write(`Failed to create worktree: ${created.error ?? "unknown error"}
 `);
@@ -155702,7 +155800,7 @@ Set ${TRUST_ENV_VAR}=1 to confirm non-interactively, or run \`nex\` interactivel
     process.on("exit", () => {
       if (!worktreeState)
         return;
-      const hadWork = (0, import_code_core4.worktreeHasWork)(worktreeState);
+      const hadWork = (0, import_code_core5.worktreeHasWork)(worktreeState);
       if (hadWork) {
         process.stderr.write(
           `
@@ -155713,7 +155811,7 @@ Resume it with: nex --worktree ${worktreeState.name}
         );
         return;
       }
-      (0, import_code_core4.removeWorktree)(worktreeState);
+      (0, import_code_core5.removeWorktree)(worktreeState);
     });
   }
   const env4 = collectEnv(workDir);
@@ -155721,8 +155819,8 @@ Resume it with: nex --worktree ${worktreeState.name}
   const interactive = !headless && !options.prompt && !options.stdinText;
   let peerHeartbeatTimer;
   if (interactive) {
-    const handle2 = (0, import_code_core4.registerPeer)({ clientType: "cli", workDir: requestedWorkDir });
-    const inbox = (0, import_code_core4.startPeerInbox)(handle2.record.id, { onMessage: (m2) => peerInboxQueue.push(m2) });
+    const handle2 = (0, import_code_core5.registerPeer)({ clientType: "cli", workDir: requestedWorkDir });
+    const inbox = (0, import_code_core5.startPeerInbox)(handle2.record.id, { onMessage: (m2) => peerInboxQueue.push(m2) });
     handle2.record.socketPath = inbox.socketPath;
     handle2.heartbeat();
     peerHandle = handle2;
@@ -155792,7 +155890,7 @@ Resume it with: nex --worktree ${worktreeState.name}
   const ruleCount = permRules.allow.length + permRules.ask.length + permRules.deny.length;
   if (ruleCount && !headless)
     console.log(source_default.dim(`  ${ruleCount} permission rule(s) loaded`));
-  let skills = (0, import_code_core4.loadSkills)(workDir);
+  let skills = (0, import_code_core5.loadSkills)(workDir);
   if (skills.length && !headless)
     console.log(source_default.dim(`  ${skills.length} skill(s) loaded`));
   const mcpStarted = (async () => {
@@ -155824,7 +155922,7 @@ Resume it with: nex --worktree ${worktreeState.name}
     sessionId = stored.id;
     sessionTitle = stored.title;
     try {
-      const compacted = await (0, import_code_core4.compactMessagesForResume)(messages, {
+      const compacted = await (0, import_code_core5.compactMessagesForResume)(messages, {
         workDir,
         model: modelAlias,
         clientType: "cli",
@@ -155841,7 +155939,7 @@ Resume it with: nex --worktree ${worktreeState.name}
       console.log();
     }
   }
-  const checkpoints = new import_code_core4.CheckpointManager(workDir, sessionId);
+  const checkpoints = new import_code_core5.CheckpointManager(workDir, sessionId);
   if (options.audit) {
     const auditPath = enableAudit({
       filePath: typeof options.audit === "string" ? options.audit : void 0,
@@ -155859,7 +155957,7 @@ Resume it with: nex --worktree ${worktreeState.name}
     sessionTitle = raw.length > 60 ? raw.slice(0, 60) + "\u2026" : raw;
   };
   const recoverTurn = (err, current) => {
-    const salvaged = (0, import_code_core4.salvageHistory)(err);
+    const salvaged = (0, import_code_core5.salvageHistory)(err);
     console.error("\n" + source_default.red("Error: ") + String(err.message));
     if (!salvaged)
       return current;
@@ -155908,7 +156006,7 @@ ${text}` : "");
       await new Promise((r2) => setImmediate(r2));
       process.exit(0);
     } catch (err) {
-      const salvaged = (0, import_code_core4.salvageHistory)(err);
+      const salvaged = (0, import_code_core5.salvageHistory)(err);
       if (salvaged) {
         messages = salvaged;
         try {
@@ -156013,7 +156111,7 @@ ${text}` : "");
           messages = [];
           sessionId = crypto4.randomBytes(8).toString("hex");
           sessionTitle = "";
-          (0, import_code_core5.resetSessionSubAgentBudget)();
+          (0, import_code_core6.resetSessionSubAgentBudget)();
           console.log(source_default.dim("  Conversation cleared. New session started."));
           rl.prompt();
           return;
@@ -156047,7 +156145,7 @@ ${text}` : "");
           sessionId = stored.id;
           sessionTitle = stored.title;
           try {
-            await (0, import_code_core4.compactMessagesForResume)(messages, {
+            await (0, import_code_core5.compactMessagesForResume)(messages, {
               workDir,
               model: modelAlias,
               clientType: "cli",
@@ -156222,13 +156320,13 @@ ${dirList}`;
           const sub = arg.trim().toLowerCase();
           console.log();
           if (sub === "list") {
-            const all = (0, import_code_core4.listWorktrees)(requestedWorkDir);
+            const all = (0, import_code_core5.listWorktrees)(requestedWorkDir);
             if (!all.length) {
               console.log(source_default.dim("  No worktrees under this project."));
             } else {
               console.log(source_default.bold(`  Worktrees (${all.length})`));
               for (const w of all) {
-                const dirty = (0, import_code_core4.worktreeHasWork)(w) ? source_default.yellow("dirty") : source_default.dim("clean");
+                const dirty = (0, import_code_core5.worktreeHasWork)(w) ? source_default.yellow("dirty") : source_default.dim("clean");
                 console.log(`  ${source_default.cyan(w.name)}  ${source_default.dim(w.worktreePath)}  [${dirty}]`);
               }
               console.log();
@@ -156266,7 +156364,7 @@ ${dirList}`;
             if (!targetName || !text) {
               console.log(source_default.dim("  Usage: /peers send <name> <message>"));
             } else {
-              const target = (0, import_code_core4.listPeers)().find((p) => p.name === targetName);
+              const target = (0, import_code_core5.listPeers)().find((p) => p.name === targetName);
               if (!target) {
                 console.log(source_default.red(`  No live session named "${targetName}". Use /peers to list who's reachable.`));
               } else if (!target.socketPath) {
@@ -156283,7 +156381,7 @@ ${dirList}`;
               console.log(source_default.dim("  Usage: /peers broadcast <message>"));
             } else {
               const { broadcastPeerMessage } = await Promise.resolve().then(() => __toESM(require_dist3(), 1));
-              const targets = (0, import_code_core4.listPeers)(peerHandle.record.id).filter((p) => p.id !== peerHandle.record.id && p.socketPath && p.inbound !== "refuse").map((p) => ({ name: p.name, socketPath: p.socketPath }));
+              const targets = (0, import_code_core5.listPeers)(peerHandle.record.id).filter((p) => p.id !== peerHandle.record.id && p.socketPath && p.inbound !== "refuse").map((p) => ({ name: p.name, socketPath: p.socketPath }));
               if (!targets.length) {
                 console.log(source_default.dim("  No other reachable Nexrall Code sessions to broadcast to."));
               } else {
@@ -156295,7 +156393,7 @@ ${dirList}`;
               }
             }
           } else {
-            const peers = (0, import_code_core4.listPeers)(peerHandle.record.id);
+            const peers = (0, import_code_core5.listPeers)(peerHandle.record.id);
             if (peers.length <= 1) {
               console.log(source_default.dim("  No other Nexrall Code sessions are currently discoverable on this machine."));
             } else {
@@ -156325,7 +156423,7 @@ ${dirList}`;
             const label = memScope === "global" ? "GLOBAL" : "this PROJECT's";
             const answer = await new Promise((resolve4) => rl.question(source_default.yellow(`  Clear ${label} memory? This cannot be undone. [y/n] `), (a) => resolve4(a.trim())));
             if (answer === "y" || answer === "yes") {
-              (0, import_code_core4.clearMemory)(memScope, workDir);
+              (0, import_code_core5.clearMemory)(memScope, workDir);
               console.log(source_default.green(`  ${memScope === "global" ? "Global" : "Project"} memory cleared.`));
             } else {
               console.log(source_default.dim("  Cancelled."));
@@ -156336,20 +156434,20 @@ ${dirList}`;
           }
           console.log();
           if (wantsGlobalOnly) {
-            const stats = (0, import_code_core4.memoryStats)("global");
-            const content = (0, import_code_core4.readMemory)("global", void 0, { includeArchived: wantsArchived });
+            const stats = (0, import_code_core5.memoryStats)("global");
+            const content = (0, import_code_core5.readMemory)("global", void 0, { includeArchived: wantsArchived });
             const archivedNote = stats.archived > 0 ? `, ${stats.archived} archived` : "";
             console.log(source_default.bold("  Global memory ") + source_default.dim(`(${stats.entries} entries${archivedNote}, ${(stats.bytes / 1024).toFixed(1)}KB) \u2014 ${stats.file}`));
             console.log();
             console.log(content || source_default.dim("  No global memories saved yet."));
           } else {
-            const projStats = (0, import_code_core4.memoryStats)("project", workDir);
-            const globalStats = (0, import_code_core4.memoryStats)("global");
+            const projStats = (0, import_code_core5.memoryStats)("project", workDir);
+            const globalStats = (0, import_code_core5.memoryStats)("global");
             const projArchived = projStats.archived > 0 ? `+${projStats.archived} archived ` : "";
             const globalArchived = globalStats.archived > 0 ? `+${globalStats.archived} archived ` : "";
             console.log(source_default.bold("  Memory") + source_default.dim(`  \u2014 project: ${projStats.entries} ${projArchived}entries (${(projStats.bytes / 1024).toFixed(1)}KB)  \xB7  global: ${globalStats.entries} ${globalArchived}entries (${(globalStats.bytes / 1024).toFixed(1)}KB)`));
             console.log();
-            const merged = (0, import_code_core4.readAllMemory)(workDir, { includeArchived: wantsArchived });
+            const merged = (0, import_code_core5.readAllMemory)(workDir, { includeArchived: wantsArchived });
             console.log(merged || source_default.dim("  No memories saved yet."));
           }
           console.log();
@@ -156388,12 +156486,12 @@ ${dirList}`;
             console.log(source_default.dim(`  Current: ${source_default.cyan(agentMode)}`));
             for (const m2 of ["ask", "edit", "auto", "plan"]) {
               const marker = m2 === agentMode ? source_default.cyan("\u276F") : " ";
-              console.log(`  ${marker} ${source_default.bold(m2.padEnd(5))} ${source_default.dim((0, import_code_core5.describeMode)(m2).replace(`${m2} \u2014 `, ""))}`);
+              console.log(`  ${marker} ${source_default.bold(m2.padEnd(5))} ${source_default.dim((0, import_code_core6.describeMode)(m2).replace(`${m2} \u2014 `, ""))}`);
             }
           } else if (["ask", "edit", "plan", "auto"].includes(modeArg)) {
             agentMode = modeArg;
             updateFooter();
-            console.log(source_default.green(`  Mode \u2192 ${source_default.bold(modeArg)}`) + source_default.dim(`  ${(0, import_code_core5.describeMode)(modeArg).replace(`${modeArg} \u2014 `, "")}`));
+            console.log(source_default.green(`  Mode \u2192 ${source_default.bold(modeArg)}`) + source_default.dim(`  ${(0, import_code_core6.describeMode)(modeArg).replace(`${modeArg} \u2014 `, "")}`));
           } else {
             console.log(source_default.red(`  Unknown: ${modeArg}`));
           }
@@ -156424,7 +156522,7 @@ ${dirList}`;
         case "/balance": {
           rl.pause();
           try {
-            const bal = await (0, import_code_core4.getBalance)();
+            const bal = await (0, import_code_core5.getBalance)();
             console.log(source_default.dim("  Balance: ") + source_default.cyan(`$${bal.toFixed(4)}`));
           } catch (err) {
             console.error(source_default.red("  Failed: ") + String(err.message));
@@ -156510,7 +156608,7 @@ ${caption}` : `[Attached: ${rel}]`;
           if (needsSidecar) {
             console.log(source_default.dim(`  ${resolveModelLabel(modelAlias)} can't read ${isPdf ? "PDFs" : "images"} directly \u2014 describing ${rel} with Claude Sonnet 5 first\u2026`));
             try {
-              const { text } = await (0, import_code_core4.describeAttachment)(isPdf ? "pdf" : "image", data, mimeType, rel);
+              const { text } = await (0, import_code_core5.describeAttachment)(isPdf ? "pdf" : "image", data, mimeType, rel);
               content.push({ type: "text", text: `<attachment_description>
 ${text}
 </attachment_description>` });
@@ -156554,7 +156652,7 @@ ${text}
           process.exit(0);
         }
         case "/plugins": {
-          const plugins = (0, import_code_core4.loadPlugins)(workDir);
+          const plugins = (0, import_code_core5.loadPlugins)(workDir);
           if (!plugins.length) {
             console.log(source_default.dim("  No plugins installed. Install one:  nex plugin install owner/repo"));
           } else {
@@ -156567,7 +156665,7 @@ ${text}
             }
             console.log();
           }
-          skills = (0, import_code_core4.loadSkills)(workDir);
+          skills = (0, import_code_core5.loadSkills)(workDir);
           rl.prompt();
           return;
         }
@@ -156702,8 +156800,8 @@ ${text}
         }
         case "/skills":
         case "/commands": {
-          skills = (0, import_code_core4.loadSkills)(workDir);
-          const invocable = (0, import_code_core4.userInvokableSkills)(skills);
+          skills = (0, import_code_core5.loadSkills)(workDir);
+          const invocable = (0, import_code_core5.userInvokableSkills)(skills);
           if (!invocable.length) {
             console.log(source_default.dim("  No skills. Add .nexrall/skills/<name>/SKILL.md (or .nexrall/commands/<name>.md) to create one."));
           } else {
@@ -156720,14 +156818,14 @@ ${text}
           return;
         }
         default: {
-          const custom = (0, import_code_core4.findSkill)(skills, cmd);
+          const custom = (0, import_code_core5.findSkill)(skills, cmd);
           if (!custom) {
             console.log(source_default.red(`  Unknown command: ${cmd}`));
             console.log(source_default.dim("  Type /help for built-ins or /skills for custom ones."));
             rl.prompt();
             return;
           }
-          const expanded = (0, import_code_core4.expandSkill)(custom, arg, workDir);
+          const expanded = (0, import_code_core5.expandSkill)(custom, arg, workDir);
           const turnModel = custom.model ?? modelAlias;
           const turnMode = custom.mode ?? agentMode;
           console.log(source_default.dim(`  Running /${custom.name}\u2026`));
@@ -156789,7 +156887,7 @@ ${text}
 
 // src/commands/plugin.ts
 var import_prompts = __toESM(require_prompts3(), 1);
-var import_code_core6 = __toESM(require_dist3(), 1);
+var import_code_core7 = __toESM(require_dist3(), 1);
 function describeInspection(i2, name, ctx) {
   console.log();
   console.log(source_default.bold(`  Plugin: ${name}`) + (i2.meta.version ? source_default.dim(`  v${i2.meta.version}`) : ""));
@@ -156865,14 +156963,14 @@ async function pluginInstallCommand(spec, opts) {
     let registryName;
     const isShortName = /^[\w.-]+$/.test(spec.trim()) && !spec.includes("/");
     if (isShortName) {
-      const alias = (0, import_code_core6.resolveSourceAlias)(spec.trim(), process.cwd(), { includeProject: true });
+      const alias = (0, import_code_core7.resolveSourceAlias)(spec.trim(), process.cwd(), { includeProject: true });
       if (alias) {
         source2 = alias.spec;
         console.log(source_default.dim(`  Source: ${alias.name} (${alias.tier}) \u2190 ${alias.spec}`));
       }
     }
     if (isShortName && source2 === spec) {
-      const entry = await (0, import_code_core6.getRegistryPlugin)(spec.trim()).catch(() => null);
+      const entry = await (0, import_code_core7.getRegistryPlugin)(spec.trim()).catch(() => null);
       if (entry) {
         source2 = entry.source;
         registryName = entry.name;
@@ -156887,7 +156985,7 @@ async function pluginInstallCommand(spec, opts) {
         return;
       }
     }
-    const res = await (0, import_code_core6.installPlugin)(source2, {
+    const res = await (0, import_code_core7.installPlugin)(source2, {
       scope,
       workDir: process.cwd(),
       name: opts.name ?? registryName,
@@ -156895,7 +156993,7 @@ async function pluginInstallCommand(spec, opts) {
       confirm: (i2, name, ctx) => confirmInstall(i2, name, opts.yes === true, ctx)
     });
     if (registryName)
-      (0, import_code_core6.reportInstall)(registryName);
+      (0, import_code_core7.reportInstall)(registryName);
     console.log();
     console.log(source_default.green(`  \u2713 Installed "${res.name}" (${res.scope}) \u2192 ${res.dir}`) + (res.sha ? source_default.dim(`  @ ${res.sha.slice(0, 7)}`) : ""));
     if (res.inspection.commands.length) {
@@ -156909,7 +157007,7 @@ async function pluginInstallCommand(spec, opts) {
 }
 function pluginRemoveCommand(name, opts) {
   try {
-    const dir = (0, import_code_core6.removePlugin)(name, {
+    const dir = (0, import_code_core7.removePlugin)(name, {
       scope: opts.project ? "project" : void 0,
       // no flag → search both scopes
       workDir: process.cwd()
@@ -156922,14 +157020,14 @@ function pluginRemoveCommand(name, opts) {
 }
 async function pluginUpdateCommand(name, opts) {
   const workDir = process.cwd();
-  const targets = name ? [name] : (0, import_code_core6.loadPlugins)(workDir).filter((p) => (0, import_code_core6.readReceipt)(p.dir)?.kind === "github").map((p) => p.name);
+  const targets = name ? [name] : (0, import_code_core7.loadPlugins)(workDir).filter((p) => (0, import_code_core7.readReceipt)(p.dir)?.kind === "github").map((p) => p.name);
   if (!targets.length) {
     console.log(source_default.dim("  No updatable plugins (only GitHub-installed plugins with receipts can update)."));
     return;
   }
   for (const t2 of targets) {
     try {
-      const res = await (0, import_code_core6.updatePlugin)(t2, {
+      const res = await (0, import_code_core7.updatePlugin)(t2, {
         workDir,
         confirm: (i2, n, ctx) => confirmInstall(i2, n, opts.yes === true, ctx)
       });
@@ -156946,7 +157044,7 @@ function badgeFor(p) {
 }
 async function pluginSearchCommand(query) {
   try {
-    const results = await (0, import_code_core6.searchRegistry)(query);
+    const results = await (0, import_code_core7.searchRegistry)(query);
     if (!results.length) {
       console.log(source_default.dim(query ? `  No plugins matching "${query}".` : "  Registry is empty."));
       return;
@@ -156969,7 +157067,7 @@ async function pluginSearchCommand(query) {
 }
 async function pluginInfoCommand(name) {
   try {
-    const p = await (0, import_code_core6.getRegistryPlugin)(name);
+    const p = await (0, import_code_core7.getRegistryPlugin)(name);
     if (!p) {
       console.error(source_default.red(`  \u2717 "${name}" not found in the registry.`));
       process.exitCode = 1;
@@ -157005,7 +157103,7 @@ async function pluginInfoCommand(name) {
   }
 }
 function pluginListCommand() {
-  const plugins = (0, import_code_core6.loadPlugins)(process.cwd());
+  const plugins = (0, import_code_core7.loadPlugins)(process.cwd());
   if (!plugins.length) {
     console.log(source_default.dim("  No plugins installed."));
     console.log(source_default.dim("  Install one:  nex plugin install owner/repo"));
@@ -157014,10 +157112,10 @@ function pluginListCommand() {
   console.log();
   console.log(source_default.bold("  Installed plugins:"));
   for (const p of plugins) {
-    const receipt = (0, import_code_core6.readReceipt)(p.dir);
+    const receipt = (0, import_code_core7.readReceipt)(p.dir);
     const src = receipt ? source_default.dim(`  \u2190 ${receipt.source}`) : source_default.dim("  (manual)");
     const at = receipt?.sha ? source_default.dim(` @ ${receipt.sha.slice(0, 7)}`) : "";
-    const insp = (0, import_code_core6.inspectPluginDir)(p.dir);
+    const insp = (0, import_code_core7.inspectPluginDir)(p.dir);
     const runs = insp.hasHooks || insp.hasMcp ? source_default.yellow(`  \u26A0 ${[insp.hasHooks && "hooks", insp.hasMcp && "mcp"].filter(Boolean).join("+")}`) : "";
     console.log(
       "  " + source_default.cyan(p.name.padEnd(24)) + source_default.dim(`${(p.version ?? "").padEnd(10)}${p.scope.padEnd(9)}`) + src + at + runs
@@ -157027,8 +157125,8 @@ function pluginListCommand() {
 }
 function pluginSourceListCommand() {
   const workDir = process.cwd();
-  const sources = (0, import_code_core6.loadDeclaredSources)(workDir, { includeProject: true });
-  const patterns = (0, import_code_core6.allowedSourcePatterns)();
+  const sources = (0, import_code_core7.loadDeclaredSources)(workDir, { includeProject: true });
+  const patterns = (0, import_code_core7.allowedSourcePatterns)();
   if (patterns) {
     console.log();
     console.log(source_default.bold("  Organisation policy: ") + source_default.dim(`installs restricted to ${patterns.join(", ")}`));
@@ -157043,7 +157141,7 @@ function pluginSourceListCommand() {
   console.log(source_default.bold("  Declared plugin sources:"));
   for (const s2 of sources) {
     const tier = s2.tier === "project" ? source_default.yellow(s2.tier.padEnd(9)) : source_default.dim(s2.tier.padEnd(9));
-    const blocked = !(0, import_code_core6.isSourceAllowed)(s2.spec, patterns) ? source_default.red("  \u2717 blocked by policy") : "";
+    const blocked = !(0, import_code_core7.isSourceAllowed)(s2.spec, patterns) ? source_default.red("  \u2717 blocked by policy") : "";
     console.log("  " + source_default.cyan(s2.name.padEnd(20)) + tier + source_default.white(s2.spec) + blocked);
   }
   console.log();
@@ -157053,17 +157151,17 @@ function pluginSourceListCommand() {
 }
 function pluginSourceAddCommand(name, spec, opts) {
   try {
-    (0, import_code_core6.parsePluginSource)(spec);
-    const patterns = (0, import_code_core6.allowedSourcePatterns)();
-    if (patterns && !(0, import_code_core6.isSourceAllowed)(spec, patterns)) {
+    (0, import_code_core7.parsePluginSource)(spec);
+    const patterns = (0, import_code_core7.allowedSourcePatterns)();
+    if (patterns && !(0, import_code_core7.isSourceAllowed)(spec, patterns)) {
       console.error(source_default.red(`  \u2717 "${spec}" is not permitted by your organisation's policy.`));
       console.error(source_default.dim(`    Allowed: ${patterns.join(", ")}`));
       process.exitCode = 1;
       return;
     }
     const scope = opts.project ? "project" : "user";
-    const file = (0, import_code_core6.sourcesFileFor)(scope, process.cwd());
-    (0, import_code_core6.writeDeclaredSource)(file, name, spec);
+    const file = (0, import_code_core7.sourcesFileFor)(scope, process.cwd());
+    (0, import_code_core7.writeDeclaredSource)(file, name, spec);
     console.log();
     console.log(source_default.green(`  \u2713 Declared "${name}" \u2192 ${spec}`) + source_default.dim(`  (${scope})`));
     console.log(source_default.dim(`    ${file}`));
@@ -157077,13 +157175,13 @@ function pluginSourceAddCommand(name, spec, opts) {
 function pluginSourceRemoveCommand(name, opts) {
   const workDir = process.cwd();
   const scope = opts.project ? "project" : "user";
-  const file = (0, import_code_core6.sourcesFileFor)(scope, workDir);
-  if ((0, import_code_core6.removeDeclaredSource)(file, name)) {
+  const file = (0, import_code_core7.sourcesFileFor)(scope, workDir);
+  if ((0, import_code_core7.removeDeclaredSource)(file, name)) {
     console.log(source_default.green(`  \u2713 Removed source "${name}" (${scope})`));
     console.log(source_default.dim("    Plugins already installed from it are untouched \u2014 remove them with  nex plugin remove <name>"));
     return;
   }
-  const found = (0, import_code_core6.resolveSourceAlias)(name, workDir, { includeProject: true });
+  const found = (0, import_code_core7.resolveSourceAlias)(name, workDir, { includeProject: true });
   if (found) {
     console.error(source_default.red(`  \u2717 "${name}" is declared in the ${found.tier} tier, not ${scope}.`));
     console.error(source_default.dim(`    ${found.file}`));
@@ -157104,6 +157202,13 @@ var program2 = new Command();
 program2.name("nex").description("Nexrall Code \u2014 AI coding assistant (powered by Nexrall)").version(NEX_VERSION).enablePositionalOptions();
 program2.command("auth").description("Login to your Nexrall account").action(authCommand);
 program2.command("logout").description("Log out of your Nexrall account").action(logoutCommand);
+var billing = program2.command("billing").description("Show, or change, which budget pays for your usage");
+billing.command("use <team|personal>").description("Bill to a team id (see `nex billing`) or back to your personal wallet").action(async (target) => {
+  await billingUseCommand(target);
+});
+billing.action(async () => {
+  await billingStatusCommand();
+});
 program2.command("update").description("Update nex to the latest version").option("-c, --check", "Check for updates without installing").option("-y, --yes", "Skip confirmation prompt").action(async (opts) => {
   await updateCommand({ check: opts.check, yes: opts.yes });
 });
@@ -157173,7 +157278,7 @@ program2.command("sessions").description("List or delete saved chat sessions").o
   console.log();
 });
 program2.option("-p, --pro", "Use Claude Opus 5 (most capable)").option("-t, --turbo", "Use Claude Sonnet 5 (fast, default)").option("-u, --ultra", "Use Claude Fable 5 (most powerful)").option("-y, --yolo", "Auto-approve all tool calls (no permission prompts)").option("-d, --dir <path>", "Set working directory (default: current directory)").option("-m, --model <name>", "Explicit model, e.g. claude-opus-5-5 | gpt-5.4 | gpt-4.1").option("-r, --resume [id]", "Resume last session, or a specific session id").option("-w, --worktree [name]", "Isolate this session in its own worktree \u2014 a separate directory (and, in a git repo, its own branch) so it can never overwrite files another session (or you) are touching in the main checkout. Omit a name for an auto-generated one; pass an existing name to resume that same worktree.").option("-e, --effort <level>", "Thinking effort \u2014 real levels depend on the model (e.g. DeepSeek: low|high|max, Qwen: low|high); run `nex --model <id>` then `/effort` with no argument to see a model's scale").option("--no-banner", "Skip the ASCII banner (useful in scripts/pipes)").option("--output-format <fmt>", "One-shot output format: text | json | stream-json (implies auto-approve)").option("--audit [path]", "Log every tool call (and refusal) to a JSONL trail (default: .nexrall/audit/<session>.jsonl)").argument("[prompt...]", "One-shot prompt \u2014 if omitted, starts interactive mode").action(async (promptParts, options) => {
-  if (!(0, import_code_core7.isAuthenticated)()) {
+  if (!(0, import_code_core8.isAuthenticated)()) {
     console.error("Not logged in. Run: nex auth");
     process.exit(1);
   }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "nexrall-code",
-  "version": "0.5.110",
+  "version": "0.5.111",
   "description": "Nexrall Code — AI coding assistant for your terminal (headless agent for scripts, CI and automation)",
   "keywords": [
     "ai",