@greatwait/cli 0.1.0-alpha.4 → 0.1.0-alpha.5

package/README.md

@@ -1,6 +1,6 @@
 # @greatwait/cli
 
-The Greatwait command line. Install it, sign in, and reach a first callback
+The GreatWait command line. Install it, sign in, and reach a first callback
 against a receiver you control.
 
 ```sh

package/dist/catalog.js

@@ -96,7 +96,7 @@ const PAGE_OPTIONS = [
     },
     {
         flag: "--all",
-        summary: "Follow cursors until the collection ends, up to a published ceiling.",
+        summary: "Read up to 50 pages from the start or --cursor; return a cursor if more remain.",
     },
 ];
 const CONFIRM = {
@@ -151,7 +151,7 @@ export const COMMAND_CATALOG = [
             },
         ],
         positionals: [],
-        summary: "Sign in to a Greatwait service and remember the credential.",
+        summary: "Sign in to a GreatWait service and remember the credential.",
         words: "login",
     },
     {
@@ -226,7 +226,7 @@ export const COMMAND_CATALOG = [
             API_URL,
             {
                 flag: "--url",
-                summary: "The https receiver Greatwait will deliver to.",
+                summary: "The https receiver GreatWait will deliver to.",
                 value: "<https url>",
             },
         ],
@@ -615,6 +615,14 @@ export const COMMAND_CATALOG = [
         summary: "Show what is due in a window, and how fresh the answer is.",
         words: "forecast",
     },
+    {
+        group: "Planning",
+        operations: ["limits.read"],
+        options: [API_URL],
+        positionals: [],
+        summary: "Show the verified organization's effective allowances and policy revisions.",
+        words: "limits show",
+    },
     {
         group: "Planning",
         operations: ["usage.read"],
@@ -667,8 +675,8 @@ export const COMMAND_CATALOG = [
             API_URL,
             {
                 flag: "--low-credit",
-                summary: "Send the low-credit notice below this exact USD amount.",
-                value: "<dollars>",
+                summary: "Send the low-credit notice below this exact USD amount, or auto for a fifth of the latest grant; omit to keep it.",
+                value: "<dollars|auto>",
             },
             {
                 flag: "--noncritical-email",
@@ -814,14 +822,14 @@ export const COMMAND_CATALOG = [
             },
             {
                 flag: "--reason",
-                summary: "Why an operator should review the request.",
+                summary: "Why the credit is reserved for refund.",
                 value: "<text>",
             },
             IDEMPOTENCY,
             CONFIRM,
         ],
         positionals: [],
-        summary: "Record a request for operator-reviewed unused-credit refund.",
+        summary: "Reserve unused purchased credit against a payment for refund.",
         words: "billing refund-request",
     },
     {
@@ -832,12 +840,12 @@ export const COMMAND_CATALOG = [
             API_URL,
             {
                 flag: "--refund-request",
-                summary: "The pending refund request an external operator reviewed.",
+                summary: "The pending refund reservation to complete or decline.",
                 value: "<request>",
             },
             {
                 flag: "--decision",
-                summary: "Record the external review outcome.",
+                summary: "Complete with an existing Stripe refund, or release the reservation.",
                 value: "<completed|declined>",
             },
             {
@@ -950,6 +958,56 @@ export const COMMAND_CATALOG = [
         summary: "Create a hosted payment-method and invoice recovery link.",
         words: "billing portal",
     },
+    {
+        group: "Planning",
+        operations: ["billing.paymentmethod"],
+        options: [API_URL],
+        positionals: [],
+        summary: "Show the saved payment method (a card, Link or another) that automatic top-ups and project subscriptions charge.",
+        words: "billing payment-method",
+    },
+    {
+        group: "Planning",
+        operations: ["billing.invoices"],
+        options: [API_URL],
+        positionals: [],
+        summary: "List project subscription charges, most recent first, with their receipts.",
+        words: "billing invoices",
+    },
+    {
+        group: "Planning",
+        operations: ["billing.paymenthistory"],
+        options: [API_URL, ...PAGE_OPTIONS],
+        positionals: [],
+        summary: "Read execution-credit payments with continuation to older history.",
+        words: "billing payment-history",
+    },
+    {
+        group: "Planning",
+        operations: ["billing.invoicehistory"],
+        options: [API_URL, ...PAGE_OPTIONS],
+        positionals: [],
+        summary: "Read project subscription charges with continuation to older history.",
+        words: "billing invoice-history",
+    },
+    {
+        confirms: true,
+        group: "Planning",
+        operations: ["billing.paymentmethodsetup"],
+        options: [API_URL, CONFIRM],
+        positionals: [],
+        summary: "Create a hosted link for adding or replacing the saved payment method.",
+        words: "billing add-card",
+    },
+    {
+        confirms: true,
+        group: "Planning",
+        operations: ["billing.paymentmethodremove"],
+        options: [API_URL, CONFIRM],
+        positionals: [],
+        summary: "Remove the saved payment method: project subscriptions stop renewing at the end of the paid period, and automatic top-up turns off.",
+        words: "billing remove-card",
+    },
     {
         group: "Planning",
         operations: ["billing.ledger"],
@@ -1015,7 +1073,7 @@ export const COMMAND_CATALOG = [
             },
         ],
         positionals: [],
-        summary: "Create a receiver Greatwait hosts, for a test environment only.",
+        summary: "Create a receiver GreatWait hosts, for a test environment only.",
         words: "sinks create",
     },
     {
@@ -1110,6 +1168,16 @@ export const OPERATION_OMISSIONS = [
         ground: "declared",
         operation: "billing.reconcile",
     },
+    {
+        because: "Confirmation answers a browser returning from hosted Checkout: the dashboard calls it on the customer's return so the credit shows at once. A purchase started from the command line has no return to answer; billing funding reports it once the provider notification or the scheduled repair settles it, and the MCP tool provides the automation path.",
+        ground: "declared",
+        operation: "billing.fundingconfirm",
+    },
+    {
+        because: "Confirmation answers a browser returning from the hosted payment-method form: the dashboard calls it on the customer's return so the method shows at once. A method added from a link the command line printed has no return to answer; the provider notification makes it the saved method, billing payment-method reports it, and the MCP tool provides the automation path.",
+        ground: "declared",
+        operation: "billing.paymentmethodconfirm",
+    },
     {
         because: "The endpoint page is the accepted place to mark this human-observed server update done; adding a second interactive CLI design is outside this remediation.",
         ground: "declared",

package/dist/cli.js

@@ -27,7 +27,7 @@ import { CliError, InterruptedError } from "./runtime.js";
  * that exists appears here, and one that does not, cannot.
  */
 function usage(programName) {
-    return `${programName} — the Greatwait command line
+    return `${programName} — the GreatWait command line
 
 ${overview()}
 
@@ -102,7 +102,9 @@ function classify(error, programName) {
         return {
             exit: classifyStatus(error.status, problem?.code),
             human: problem === undefined
-                ? `The service answered ${String(error.status)}.`
+                ? error.status === 0
+                    ? "The service could not be reached."
+                    : `The service answered ${String(error.status)}.`
                 : `${problem.title} (${problem.code})`,
             // **Every published code, not the two that were spelled out here.** This
             // was a two-branch conditional naming `authentication_required` and

package/dist/commands.js

@@ -203,7 +203,9 @@ async function describeThrough(client, origin, programName) {
         };
     }
     catch (error) {
-        if (!(error instanceof GreatwaitClientError)) {
+        if (!(error instanceof GreatwaitClientError) || error.status === 0) {
+            // The SDK uses status 0 when its transport retries are exhausted; older
+            // adapters may still throw the original network error.
             // **A transport failure is not an answer about the credential.** The
             // request never reached the service — no DNS, no TLS, a reset — so it
             // says nothing about what was just issued, and it does not carry a
@@ -395,7 +397,7 @@ const doctor = async (runtime, args) => {
             checks.push({
                 detail: error instanceof Error
                     ? error.message
-                    : "the origin did not answer as a Greatwait API",
+                    : "the origin did not answer as a GreatWait API",
                 name: "reachable",
                 outcome: "failed",
             });
@@ -583,9 +585,11 @@ const destinationsCreate = async (runtime, args) => {
             ``,
             `Signing key  ${created.secret}`,
             ``,
-            `This key is shown once and is not recoverable. Store it now — your receiver`,
+            `This is the only call that returns the key. Store it now — your receiver`,
             `verifies every callback with it, and reading this destination back will show`,
-            `${redactSecret(created.secret)} instead.`,
+            `${redactSecret(created.secret)} instead. If you lose it, a signed-in member`,
+            `can read it again on this destination's page in the dashboard; no command`,
+            `here can, because the reveal accepts a member session and not a grant.`,
         ].join("\n"),
         nextMove: `Next: ${runtime.programName} schedules create --endpoint ${created.id} --in 30s`,
     };

package/dist/exit.d.ts

@@ -33,6 +33,18 @@ export declare const EXIT_CLASSES: {
     readonly retryable: 6;
     /** A deadline this command was given passed before the answer arrived. */
     readonly timeout: 7;
+    /**
+     * The service is not configured to do this, and repeating will not change
+     * that.
+     *
+     * **A separate number from `retryable` because a script must not loop on
+     * it.** Both are 5xx and both mean "the service, not you" — but one clears
+     * on its own and the other waits on somebody changing the deployment. Until
+     * FXO-2497 these shared class 6, so a client told "the identical request is
+     * safe to repeat" would retry a condition that is permanent, and a customer
+     * was offered a "Try again" control that could never work.
+     */
+    readonly unconfigured: 8;
     /**
      * Interrupted.
      *
@@ -60,8 +72,9 @@ export declare const EXIT_CLASS_MEANINGS: Readonly<Record<ExitClass, string>>;
  * A refusal from an edge proxy carries no problem document at all — there is no
  * code to read — and a client that branched on the code first would classify
  * every one of those as internal. The code refines the answer where it
- * disagrees with the status, which is exactly once: `scope_missing` is a `403`
- * and belongs in `authorization`, and everything else in the 4xx range that is
+ * disagrees with the status, which is exactly twice: `scope_missing` is a `403`
+ * and belongs in `authorization`, `capability_not_configured` is a `503` that
+ * must not be called retryable, and everything else in the 4xx range that is
  * not authentication is the caller's request to fix.
  */
 export declare function classifyStatus(status: number, problemCode?: string): ExitClass;

package/dist/exit.js

@@ -33,6 +33,18 @@ export const EXIT_CLASSES = {
     retryable: 6,
     /** A deadline this command was given passed before the answer arrived. */
     timeout: 7,
+    /**
+     * The service is not configured to do this, and repeating will not change
+     * that.
+     *
+     * **A separate number from `retryable` because a script must not loop on
+     * it.** Both are 5xx and both mean "the service, not you" — but one clears
+     * on its own and the other waits on somebody changing the deployment. Until
+     * FXO-2497 these shared class 6, so a client told "the identical request is
+     * safe to repeat" would retry a condition that is permanent, and a customer
+     * was offered a "Try again" control that could never work.
+     */
+    unconfigured: 8,
     /**
      * Interrupted.
      *
@@ -59,6 +71,7 @@ export const EXIT_CLASS_MEANINGS = {
     ok: "It did what it was asked.",
     retryable: "The service could not answer now. The identical request may work later.",
     timeout: "A deadline this command was given passed before the answer arrived.",
+    unconfigured: "The service is not configured to do this. Repeating will not help; it needs somebody to change the service.",
     usage: "The command line was wrong.",
     validation: "The request was refused on its merits: invalid, missing, or conflicting.",
 };
@@ -69,13 +82,23 @@ export const EXIT_CLASS_MEANINGS = {
  * A refusal from an edge proxy carries no problem document at all — there is no
  * code to read — and a client that branched on the code first would classify
  * every one of those as internal. The code refines the answer where it
- * disagrees with the status, which is exactly once: `scope_missing` is a `403`
- * and belongs in `authorization`, and everything else in the 4xx range that is
+ * disagrees with the status, which is exactly twice: `scope_missing` is a `403`
+ * and belongs in `authorization`, `capability_not_configured` is a `503` that
+ * must not be called retryable, and everything else in the 4xx range that is
  * not authentication is the caller's request to fix.
  */
 export function classifyStatus(status, problemCode) {
     if (problemCode === "scope_missing")
         return "authorization";
+    // Without this the status alone decides, and a 503 falls through to
+    // `retryable` below — which is the defect: a permanent configuration refusal
+    // telling a script that repeating it is safe.
+    if (problemCode === "capability_not_configured")
+        return "unconfigured";
+    // The SDK uses zero when no HTTP answer survives its transport retries.
+    // This is a failed exchange, not a successful command.
+    if (status === 0)
+        return "retryable";
     if (status === 401)
         return "authentication";
     if (status === 403)

package/dist/node-runtime.js

@@ -49,7 +49,7 @@ export async function openLoopback() {
             return;
         }
         response.writeHead(200, { "content-type": "text/plain; charset=utf-8" });
-        response.end("Greatwait received the answer. You can close this tab.\n");
+        response.end("GreatWait received the answer. You can close this tab.\n");
         deliver?.(url.searchParams);
     });
     await new Promise((resolve, reject) => {

package/dist/oauth.js

@@ -35,7 +35,7 @@ export async function discover(runtime, origin) {
     const resourceUrl = `${origin}/.well-known/oauth-protected-resource`;
     const resource = await readJson(runtime, resourceUrl);
     if (resource.status !== 200) {
-        throw new CliError(`${origin} does not publish protected-resource metadata (${String(resource.status)})`, "validation", `Check the origin. A Greatwait API answers GET /__greatwait/version with no credential; try ${runtime.programName} doctor --api-url <origin>.`);
+        throw new CliError(`${origin} does not publish protected-resource metadata (${String(resource.status)})`, "validation", `Check the origin. A GreatWait API answers GET /__greatwait/version with no credential; try ${runtime.programName} doctor --api-url <origin>.`);
     }
     const resourceBody = resource.body;
     const servers = Array.isArray(resourceBody.authorization_servers)
@@ -75,7 +75,7 @@ export async function registerClient(runtime, server, options) {
     }
     const registered = await readJson(runtime, server.registrationEndpoint, {
         body: JSON.stringify({
-            client_name: "Greatwait CLI",
+            client_name: "GreatWait CLI",
             client_uri: "https://greatwait.dev",
             grant_types: ["authorization_code", "refresh_token"],
             redirect_uris: [options.redirectUri],

package/dist/operate.js

@@ -226,9 +226,11 @@ const destinationsRotateKey = async (runtime, args) => {
             ``,
             `Signing key  ${rotated.secret}`,
             ``,
-            `This key is shown once and is not recoverable. Add it to your receiver's`,
+            `This is the only call that returns the key. Add it to your receiver's`,
             `accepted set now, alongside the current one; reading this destination back`,
-            `will show ${redactSecret(rotated.secret)} instead.`,
+            `will show ${redactSecret(rotated.secret)} instead. If you lose it, a`,
+            `signed-in member can read it again on this destination's page in the`,
+            `dashboard; no command here can.`,
         ].join("\n"),
     };
 };
@@ -445,7 +447,7 @@ const attemptsRead = async (runtime, args) => {
         ].join("\n"),
         ...(found.remediation === "review_before_redelivery"
             ? {
-                nextMove: "This attempt was ambiguous: the receiver may have processed it even though Greatwait never saw an answer. Check the receiver before redelivering.",
+                nextMove: "This attempt was ambiguous: the receiver may have processed it even though GreatWait never saw an answer. Check the receiver before redelivering.",
             }
             : {}),
     };
@@ -462,6 +464,46 @@ function window(args) {
         ...(to === undefined ? {} : { to: parseInstant(to, "--to") }),
     };
 }
+const limitsShow = async (runtime, args) => {
+    positionals(args, [], `${runtime.programName} limits show`);
+    const active = await session(runtime, args);
+    const view = parseResponse("limits.read", await active.client.request("limits_read"));
+    const rows = [
+        [
+            "Inline payload",
+            String(view.limits.inlinePayloadBytes),
+            "bytes",
+            view.provenance.inlinePayloadBytes,
+        ],
+        [
+            "Partition keys",
+            view.limits.partitionKeyCeiling === undefined
+                ? "No configured ceiling"
+                : String(view.limits.partitionKeyCeiling),
+            "keys",
+            view.provenance.partitionKeyCeiling ?? "default",
+        ],
+        [
+            "Forecast horizon",
+            String(view.limits.forecastHorizonSeconds),
+            "seconds",
+            view.provenance.forecastHorizonSeconds,
+        ],
+        [
+            "Usage window",
+            String(view.limits.usageWindowDays),
+            "days",
+            view.provenance.usageWindowDays,
+        ],
+    ];
+    return {
+        data: view,
+        human: [
+            table(["SETTING", "VALUE", "UNIT", "ORIGIN"], rows, ""),
+            `Policy revisions: global ${String(view.revision.global)}, organization ${String(view.revision.organization)}`,
+        ].join("\n"),
+    };
+};
 const forecast = async (runtime, args) => {
     const active = await session(runtime, args);
     const bucket = args.options["--bucket"];
@@ -678,18 +720,38 @@ const billingNotificationSettings = async (runtime, args) => {
 };
 const billingNotificationSettingsUpdate = async (runtime, args) => {
     const noncritical = args.options["--noncritical-email"];
+    // Three meanings, matching the contract: omitted leaves the threshold as it
+    // is, chosen or not; `auto` sends null, which returns it to a fifth of the
+    // latest credit grant; an amount chooses it. `off` is how other commands
+    // spell "no amount", and there is no "no threshold" here, so it is refused
+    // along with zero, negatives and fractions of a cent.
+    const lowCreditRaw = args.options["--low-credit"];
+    const lowCredit = lowCreditRaw === undefined
+        ? undefined
+        : lowCreditRaw === "auto"
+            ? null
+            : budgetMoney(args, "--low-credit");
+    const refusal = "--low-credit must be a positive exact-cent USD amount or auto, and --noncritical-email must be on or off";
+    if (lowCreditRaw !== undefined &&
+        lowCreditRaw !== "auto" &&
+        lowCredit === null)
+        throw new CliError(refusal, "usage");
     const parsed = billingNotificationSettingsUpdateRequestSchema.safeParse({
         expectedRevision: expectedRevision(args),
-        lowCreditThreshold: budgetMoney(args, "--low-credit"),
+        ...(lowCredit === undefined ? {} : { lowCreditThreshold: lowCredit }),
         noncriticalEmail: noncritical === "on" ? true : noncritical === "off" ? false : undefined,
     });
     if (!parsed.success) {
-        throw new CliError("--low-credit must be a positive exact-cent USD amount and --noncritical-email must be on or off", "usage");
+        throw new CliError(refusal, "usage");
     }
     const confirmation = await confirmChange(runtime, args, {
         action: "Replace this organization's billing notification settings.",
         effect: [
-            `low-credit threshold ${money(parsed.data.lowCreditThreshold)}`,
+            lowCredit === undefined
+                ? "low-credit threshold unchanged"
+                : lowCredit === null
+                    ? "low-credit threshold automatic (a fifth of the latest credit grant)"
+                    : `low-credit threshold ${money(lowCredit)}`,
             `noncritical email ${parsed.data.noncriticalEmail ? "on" : "off"}`,
             "Critical email remains mandatory for owners and active billing-role members.",
         ],
@@ -877,12 +939,12 @@ const billingRefundRequest = async (runtime, args) => {
         throw new CliError("Provide a positive exact-cent --amount, --payment-operation and --reason", "usage");
     }
     const confirmation = await confirmChange(runtime, args, {
-        action: "Record this unused-credit refund request for operator review.",
+        action: "Reserve this unused purchased credit against the payment for refund.",
         effect: [
             `amount ${money(parsed.data.amount)}`,
             `payment ${parsed.data.paymentOperation}`,
             `reason ${parsed.data.reason}`,
-            "This records a request only. It does not submit a provider refund or cash out credit.",
+            "This reserves credit only. It does not submit a provider refund or cash out credit.",
         ],
     });
     const active = await session(runtime, args);
@@ -898,7 +960,7 @@ const billingRefundRequest = async (runtime, args) => {
             `Requested ${view.requestedAt}`,
             `Retry key ${key}`,
         ].join("\n"),
-        nextMove: "An operator must review this request before any provider refund.",
+        nextMove: "A Stripe refund of this payment settles or supersedes the reservation; resolve-refund --decision declined releases it.",
     };
 };
 const billingRefundResolution = async (runtime, args) => {
@@ -1020,6 +1082,99 @@ const billingChangeProject = async (runtime, args) => {
         data: { confirmation, idempotencyKey: key, ...view },
     };
 };
+const billingPaymentMethod = async (runtime, args) => {
+    const active = await session(runtime, args);
+    const view = parseResponse("billing.paymentmethod", await active.client.request("billing_paymentmethod"));
+    return {
+        data: view,
+        human: paymentMethodLine(view),
+    };
+};
+/**
+ * The saved payment method in one line (W9-14). The label is the service's,
+ * so a card reads "Visa ending in 4242" here exactly as on the dashboard, and
+ * Link or Cash App Pay is named rather than reported as no card.
+ */
+function paymentMethodLine(view) {
+    const method = view.method;
+    if (method === null)
+        return "No payment method on file. Add one with billing add-card; automatic top-up and paid projects need it.";
+    return method.type === "card"
+        ? `Payment method on file: ${method.label}, expires ${String(method.expMonth).padStart(2, "0")}/${String(method.expYear)}`
+        : `Payment method on file: ${method.label}`;
+}
+const billingInvoices = async (runtime, args) => {
+    const active = await session(runtime, args);
+    const view = parseResponse("billing.invoices", await active.client.request("billing_invoices"));
+    return {
+        data: view,
+        human: table(["CREATED", "AMOUNT", "STATE", "RECEIPT"], view.data.map((invoice) => [
+            invoice.createdAt,
+            money(invoice.amount),
+            invoice.state,
+            invoice.receiptUrl ?? "",
+        ]), "No project subscription charges."),
+    };
+};
+const billingPaymentHistory = async (runtime, args) => {
+    const active = await session(runtime, args);
+    return listing(runtime, args, {
+        command: `${runtime.programName} billing payment-history`,
+        columns: ["CREATED", "AMOUNT", "STATE", "RECEIPT"],
+        empty: "No execution-credit payments.",
+        read: (request) => page("billing.paymenthistory", () => active.client.request("billing_paymenthistory", request)),
+        row: (payment) => [
+            payment.createdAt,
+            money(payment.gross ?? payment.credit),
+            payment.state,
+            payment.receiptUrl ?? "",
+        ],
+    });
+};
+const billingInvoiceHistory = async (runtime, args) => {
+    const active = await session(runtime, args);
+    return listing(runtime, args, {
+        command: `${runtime.programName} billing invoice-history`,
+        columns: ["CREATED", "AMOUNT", "STATE", "RECEIPT"],
+        empty: "No project subscription charges.",
+        read: (request) => page("billing.invoicehistory", () => active.client.request("billing_invoicehistory", request)),
+        row: (invoice) => [
+            invoice.createdAt,
+            money(invoice.amount),
+            invoice.state,
+            invoice.receiptUrl ?? "",
+        ],
+    });
+};
+const billingAddCard = async (runtime, args) => {
+    await confirmChange(runtime, args, {
+        action: "Create a hosted link for adding or replacing this organization's payment method.",
+        effect: [
+            "The page offers a card, Link and any other method the account accepts. Saving one there charges nothing. It becomes what automatic top-ups and project subscriptions charge.",
+        ],
+    });
+    const active = await session(runtime, args);
+    const view = parseResponse("billing.paymentmethodsetup", await active.client.request("billing_paymentmethodsetup", {}));
+    return { data: view, human: view.url };
+};
+const billingRemoveCard = async (runtime, args) => {
+    await confirmChange(runtime, args, {
+        action: "Remove this organization's saved payment method.",
+        effect: [
+            "Project subscriptions stop renewing: paid projects keep running until the end of the period already paid for, then stop. The included project keeps running.",
+            "Automatic top-up is turned off immediately. Nothing more is charged.",
+            "Saving a payment method again before the period ends keeps those projects.",
+        ],
+    });
+    const active = await session(runtime, args);
+    const view = parseResponse("billing.paymentmethodremove", await active.client.request("billing_paymentmethodremove", {
+        confirmed: true,
+    }));
+    return {
+        data: view,
+        human: "Payment method removed. No payment method on file.",
+    };
+};
 const billingPortal = async (runtime, args) => {
     await confirmChange(runtime, args, {
         action: "Create this organization's hosted billing recovery link.",
@@ -1093,7 +1248,9 @@ const billingLedger = async (runtime, args) => {
         row: (entry) => [
             entry.sequence,
             entry.recordedAt,
-            entry.kind,
+            entry.note === "provider-details-attached"
+                ? `${entry.kind} (details attached)`
+                : entry.kind,
             money(entry.amount),
             entry.reference.attempt ??
                 entry.reference.creditLot ??
@@ -1281,7 +1438,7 @@ const sinksDelete = async (runtime, args) => {
         action: `Delete test sink ${current.id}.`,
         effect: [
             `received     ${String(current.deliveryCount)} deliveries, which go with it`,
-            `The recorded bodies are the only copy Greatwait keeps. Read anything you`,
+            `The recorded bodies are the only copy GreatWait keeps. Read anything you`,
             `still need first.`,
         ],
     });
@@ -1345,6 +1502,7 @@ const sinksDelivery = async (runtime, args) => {
 /* -------------------------------------------------------------------------- */
 /** The operate-and-diagnose commands, keyed by the words that select them. */
 export const OPERATE_COMMANDS = {
+    "limits show": limitsShow,
     "attempts read": attemptsRead,
     billing,
     "billing budgets": billingBudgets,
@@ -1364,6 +1522,12 @@ export const OPERATE_COMMANDS = {
     "billing resolve-refund": billingRefundResolution,
     "billing change-project": billingChangeProject,
     "billing portal": billingPortal,
+    "billing payment-method": billingPaymentMethod,
+    "billing invoices": billingInvoices,
+    "billing payment-history": billingPaymentHistory,
+    "billing invoice-history": billingInvoiceHistory,
+    "billing add-card": billingAddCard,
+    "billing remove-card": billingRemoveCard,
     timing,
     "credentials list": credentialsList,
     "credentials revoke": credentialsRevoke,

package/dist/remediation.d.ts

@@ -30,6 +30,6 @@ export declare function remediationFor(problem: Problem | undefined, retryable:
  * A case asserting what the advice *says* wants one spelling; a case asserting
  * that it follows the invoked name passes its own.
  */
-export declare const REMEDIATION: Readonly<Record<"invalid_request" | "not_found" | "state_conflict" | "version_conflict" | "authentication_required" | "credential_expired" | "credential_revoked" | "idempotency_key_reused" | "payload_too_large" | "plan_limit_reached" | "project_archived" | "rate_limited" | "revision_conflict" | "scope_missing" | "service_unavailable" | "test_to_live_escalation", string>>;
+export declare const REMEDIATION: Readonly<Record<"invalid_request" | "not_found" | "state_conflict" | "version_conflict" | "authentication_required" | "billing_not_ready" | "capability_not_configured" | "credential_expired" | "credential_revoked" | "idempotency_key_reused" | "payload_too_large" | "plan_limit_reached" | "project_archived" | "rate_limited" | "revision_conflict" | "scope_missing" | "service_unavailable" | "test_to_live_escalation", string>>;
 /** Exposed so a case can assert the records cover the published vocabularies. */
 export { isRetryable, remediationTable };

package/dist/remediation.js

@@ -19,6 +19,14 @@ import { CANONICAL_PROGRAM_NAME } from "./catalog.js";
 function remediationTable(programName) {
     return {
         authentication_required: `Sign in: ${programName} login`,
+        // Nothing to fix and nothing to do but wait a moment — so the advice says
+        // that, rather than sending somebody to look for a fault that is not there.
+        billing_not_ready: "Billing for this organization is still being set up. It finishes on its own within a minute; run the command again then. Nothing has been charged and no schedule is affected.",
+        // **Not "try again", because trying again is exactly what does not work.**
+        // The distinction from `service_unavailable` below is the whole of
+        // FXO-2497's second limb: both are 503, and only one of them clears by
+        // itself.
+        capability_not_configured: "This service is not configured for that. Repeating the command will not change it — somebody with access to the deployment has to turn the capability on. The detail above names which one.",
         credential_expired: `This credential has passed its expiry. Sign in again — ${programName} login — or rotate the one your automation presents: ${programName} credentials rotate <credential>`,
         credential_revoked: `This credential has been revoked and will not work again. Sign in again: ${programName} login`,
         idempotency_key_reused: "This key was used for a different request. Use a new --idempotency-key, or repeat the original request exactly to get the original answer back.",

package/dist/session.js

@@ -42,7 +42,7 @@ export async function resolveOrigin(runtime, store, argumentValue) {
         return { origin: known[0], source: "sole" };
     }
     if (known.length === 0) {
-        throw new CliError("no Greatwait service has been chosen", "usage", `Sign in first — ${runtime.programName} login --api-url https://api.greatwait.dev — or set ${ENVIRONMENT_NAMES.apiUrl}.`);
+        throw new CliError("no GreatWait service has been chosen", "usage", `Sign in first — ${runtime.programName} login --api-url https://api.greatwait.dev — or set ${ENVIRONMENT_NAMES.apiUrl}.`);
     }
     throw new CliError(`${String(known.length)} services are signed in and none is selected`, "usage", `Choose one — ${runtime.programName} context use ${known[0]} — or pass --api-url on this command.`);
 }

package/dist/support.d.ts

@@ -60,13 +60,9 @@ export declare function parseCount(value: string, flag: string, bounds: {
 /**
  * How many pages `--all` will follow before it stops and says so.
  *
- * **Published, and generous rather than equal to a page.** A ceiling nobody can
- * see is a truncation somebody reports as data loss, and one set at the
- * contract's page maximum would make `--all` mean "one page" for every
- * collection that has ever grown. Fifty pages at the contract's maximum size is
- * five thousand rows; past that, this stops, says how far it got, and hands
- * back the cursor to carry on from — which is the difference between a bound
- * and a lie.
+ * A bounded invocation holds at most fifty response pages in memory. Its
+ * cursor can be used with `--all` again, so this limits one invocation's
+ * allocation and request burst without preventing access to later records.
  */
 export declare const ALL_PAGES_CEILING = 50;
 export interface PageRequest {

package/dist/support.js

@@ -134,24 +134,15 @@ export function parseCount(value, flag, bounds) {
 /**
  * How many pages `--all` will follow before it stops and says so.
  *
- * **Published, and generous rather than equal to a page.** A ceiling nobody can
- * see is a truncation somebody reports as data loss, and one set at the
- * contract's page maximum would make `--all` mean "one page" for every
- * collection that has ever grown. Fifty pages at the contract's maximum size is
- * five thousand rows; past that, this stops, says how far it got, and hands
- * back the cursor to carry on from — which is the difference between a bound
- * and a lie.
+ * A bounded invocation holds at most fifty response pages in memory. Its
+ * cursor can be used with `--all` again, so this limits one invocation's
+ * allocation and request burst without preventing access to later records.
  */
 export const ALL_PAGES_CEILING = 50;
 /** The page arguments, validated against the contract's own bounds. */
 export function pageRequest(args) {
     const limit = args.options["--limit"];
     const cursor = args.options["--cursor"];
-    if (cursor !== undefined && args.booleans.has("--all")) {
-        // Not a contradiction the service can catch: it would follow the cursor and
-        // report a partial collection as the whole of it.
-        throw new CliError("--cursor continues one listing and --all reads every page, so only one of them can be meant", "usage", "Drop --cursor to read from the start, or drop --all to read one page from where you were.");
-    }
     return {
         ...(cursor === undefined ? {} : { cursor }),
         ...(limit === undefined
@@ -229,7 +220,7 @@ export function continuationNote(drained, command) {
     if (drained.nextCursor === undefined)
         return undefined;
     return drained.ceilingReached
-        ? `Stopped after ${String(drained.pages)} pages, which is where --all stops. Continue with: ${command} --cursor ${drained.nextCursor}`
+        ? `Stopped after ${String(drained.pages)} pages; this result is incomplete. Continue with: ${command} --cursor ${drained.nextCursor} --all`
         : `More to read. Continue with: ${command} --cursor ${drained.nextCursor}`;
 }
 /* -------------------------------------------------------------------------- */

package/package.json

@@ -7,10 +7,10 @@
     "url": "https://github.com/flowxo/greatwait/issues"
   },
   "dependencies": {
-    "@greatwait/api-client": "0.1.0-alpha.4",
-    "@greatwait/contracts": "0.1.0-alpha.4"
+    "@greatwait/api-client": "0.1.0-alpha.5",
+    "@greatwait/contracts": "0.1.0-alpha.5"
   },
-  "description": "The Greatwait command line: sign in, create a destination and a one-shot schedule, and wait for the callback, over the public API.",
+  "description": "The GreatWait command line: sign in, create a destination and a one-shot schedule, and wait for the callback, over the public API.",
   "engines": {
     "node": ">=22.13.0"
   },
@@ -48,5 +48,5 @@
   },
   "sideEffects": false,
   "type": "module",
-  "version": "0.1.0-alpha.4"
+  "version": "0.1.0-alpha.5"
 }