run402-mcp 4.93.2 → 4.95.0

package/{sdk/core-dist/allowance-auth.js → core/dist/wallet-auth.js}

@@ -1,12 +1,12 @@
 /**
- * Allowance auth helper — generates SIWX (Sign-In With X / EIP-4361) headers for Run402 API.
+ * SIWX auth helper — generates SIWX (Sign-In With X / EIP-4361) headers for Run402 API.
  * Uses @noble/curves (lighter than viem) for signing.
  */
 import { randomBytes } from "node:crypto";
 import { secp256k1 } from "@noble/curves/secp256k1.js";
 import { keccak_256 } from "@noble/hashes/sha3.js";
 import { bytesToHex } from "@noble/hashes/utils.js";
-import { readAllowance } from "./allowance.js";
+import { readWallet } from "./wallet.js";
 import { getApiBase } from "./config.js";
 /**
  * EIP-55 mixed-case checksum encoding.
@@ -21,7 +21,7 @@ export function toChecksumAddress(address) {
     return checksummed;
 }
 /**
- * EIP-191 personal_sign: sign a message with the allowance's private key.
+ * EIP-191 personal_sign: sign a message with the wallet's private key.
  */
 function personalSign(privateKeyHex, address, message) {
     const msgBytes = new TextEncoder().encode(message);
@@ -86,11 +86,11 @@ export function formatSIWEMessage(opts, address) {
     return lines.join("\n");
 }
 export function buildSIWxAuthHeaders(opts) {
-    const message = formatSIWEMessage(opts, opts.allowance.address);
-    const signature = personalSign(opts.allowance.privateKey, opts.allowance.address, message);
+    const message = formatSIWEMessage(opts, opts.wallet.address);
+    const signature = personalSign(opts.wallet.privateKey, opts.wallet.address, message);
     const payload = {
         domain: opts.domain,
-        address: toChecksumAddress(opts.allowance.address),
+        address: toChecksumAddress(opts.wallet.address),
         statement: opts.statement,
         uri: opts.uri,
         version: opts.version ?? "1",
@@ -110,18 +110,18 @@ export function buildSIWxAuthHeaders(opts) {
 }
 /**
  * Get SIWX auth headers for the Run402 API.
- * Returns null if no allowance is configured.
+ * Returns null if no local wallet is configured.
  *
  * @param path - API path (e.g. "/projects/v1") used to build the SIWE uri field.
  */
-export function getAllowanceAuthHeaders(path, allowancePath) {
-    // readAllowance throws on a malformed-shape allowance file. The
-    // CLI's higher-level readAllowance wrapper surfaces this as a structured
-    // BAD_ALLOWANCE_FILE envelope; here we preserve the public contract that
+export function getWalletAuthHeaders(path, walletPath) {
+    // readWallet throws on a malformed-shape wallet file. The
+    // CLI's higher-level readWallet wrapper surfaces this as a structured
+    // BAD_WALLET_FILE envelope; here we preserve the public contract that
     // this helper returns SIWxAuthHeaders | null. Re-throw so callers above
     // the CLI's wrapper (e.g. SDK paid-fetch) can decide whether to swallow it.
-    const allowance = readAllowance(allowancePath);
-    if (!allowance || !allowance.address || !allowance.privateKey)
+    const localWallet = readWallet(walletPath);
+    if (!localWallet || !localWallet.address || !localWallet.privateKey)
         return null;
     const apiBase = getApiBase();
     const url = new URL(apiBase);
@@ -132,7 +132,7 @@ export function getAllowanceAuthHeaders(path, allowancePath) {
     const issuedAt = now.toISOString();
     const expirationTime = new Date(now.getTime() + 5 * 60 * 1000).toISOString();
     return buildSIWxAuthHeaders({
-        allowance,
+        wallet: localWallet,
         domain,
         uri,
         statement: "Sign in to Run402",
@@ -151,4 +151,4 @@ function messageChainId(chainId) {
 function payloadChainId(chainId) {
     return typeof chainId === "number" ? `eip155:${chainId}` : chainId;
 }
-//# sourceMappingURL=allowance-auth.js.map
+//# sourceMappingURL=wallet-auth.js.map

package/core/dist/wallet-auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"wallet-auth.js","sourceRoot":"","sources":["../src/wallet-auth.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,SAAS,EAAE,MAAM,4BAA4B,CAAC;AACvD,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AACnD,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AACpD,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAOzC;;GAEG;AACH,MAAM,UAAU,iBAAiB,CAAC,OAAe;IAC/C,MAAM,KAAK,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IACtD,MAAM,IAAI,GAAG,UAAU,CAAC,UAAU,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACrE,IAAI,WAAW,GAAG,IAAI,CAAC;IACvB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,WAAW,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAE,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAClF,CAAC;IACD,OAAO,WAAW,CAAC;AACrB,CAAC;AAED;;GAEG;AACH,SAAS,YAAY,CAAC,aAAqB,EAAE,OAAe,EAAE,OAAe;IAC3E,MAAM,QAAQ,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACnD,MAAM,MAAM,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CACrC,iCAAiC,QAAQ,CAAC,MAAM,EAAE,CACnD,CAAC;IACF,MAAM,QAAQ,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC;IACjE,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACrB,QAAQ,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;IAEtC,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;IAClC,MAAM,KAAK,GAAG,aAAa,CAAC,UAAU,CAAC,IAAI,CAAC;QAC1C,CAAC,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC;QACxB,CAAC,CAAC,aAAa,CAAC;IAClB,MAAM,OAAO,GAAG,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC;IAC3D,MAAM,MAAM,GAAG,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;IACjE,MAAM,GAAG,GAAG,SAAS,CAAC,SAAS,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IAElD,iEAAiE;IACjE,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;QACvB,IAAI,CAAC;YACH,MAAM,SAAS,GAAG,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC;YAC/D,MAAM,QAAQ,GAAG,SAAS,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,+BAA+B;YACnF,MAAM,SAAS,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;YAClD,IAAI,IAAI,GAAG,UAAU,CAAC,SAAS,CAAC,KAAK,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC;gBAC3D,QAAQ,GAAG,CAAC,CAAC;gBACb,MAAM;YACR,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,SAAS;QACX,CAAC;IACH,CAAC;IAED,MAAM,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;IAC/C,MAAM,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;IAC/C,MAAM,IAAI,GAAG,CAAC,QAAQ,GAAG,EAAE,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IAC3D,OAAO,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC;AAC7B,CAAC;AAmBD;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAAC,IAAqB,EAAE,OAAe;IACtE,MAAM,WAAW,GAAG,iBAAiB,CAAC,OAAO,CAAC,CAAC;IAC/C,MAAM,KAAK,GAAG;QACZ,GAAG,IAAI,CAAC,MAAM,mDAAmD;QACjE,WAAW;QACX,EAAE;QACF,IAAI,CAAC,SAAS;QACd,EAAE;QACF,QAAQ,IAAI,CAAC,GAAG,EAAE;QAClB,YAAY,IAAI,CAAC,OAAO,IAAI,GAAG,EAAE;QACjC,aAAa,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE;QAC3C,UAAU,IAAI,CAAC,KAAK,EAAE;QACtB,cAAc,IAAI,CAAC,QAAQ,EAAE;KAC9B,CAAC;IACF,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;QACxB,KAAK,CAAC,IAAI,CAAC,oBAAoB,IAAI,CAAC,cAAc,EAAE,CAAC,CAAC;IACxD,CAAC;IACD,IAAI,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAChD,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QACzB,KAAK,MAAM,QAAQ,IAAI,IAAI,CAAC,SAAS;YAAE,KAAK,CAAC,IAAI,CAAC,KAAK,QAAQ,EAAE,CAAC,CAAC;IACrE,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,IAAqB;IACxD,MAAM,OAAO,GAAG,iBAAiB,CAAC,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAC7D,MAAM,SAAS,GAAG,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAErF,MAAM,OAAO,GAA4B;QACvC,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,OAAO,EAAE,iBAAiB,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC;QAC/C,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,GAAG,EAAE,IAAI,CAAC,GAAG;QACb,OAAO,EAAE,IAAI,CAAC,OAAO,IAAI,GAAG;QAC5B,OAAO,EAAE,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC;QACrC,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,QAAQ;QAC3B,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,cAAc,EAAE,IAAI,CAAC,cAAc;QACnC,SAAS;KACV,CAAC;IACF,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;QACjC,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC;IACrC,CAAC;IAED,OAAO;QACL,gBAAgB,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC;KAC1E,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,oBAAoB,CAAC,IAAY,EAAE,UAAmB;IACpE,0DAA0D;IAC1D,sEAAsE;IACtE,sEAAsE;IACtE,wEAAwE;IACxE,4EAA4E;IAC5E,MAAM,WAAW,GAAG,UAAU,CAAC,UAAU,CAAC,CAAC;IAC3C,IAAI,CAAC,WAAW,IAAI,CAAC,WAAW,CAAC,OAAO,IAAI,CAAC,WAAW,CAAC,UAAU;QAAE,OAAO,IAAI,CAAC;IAEjF,MAAM,OAAO,GAAG,UAAU,EAAE,CAAC;IAC7B,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC;IAC7B,MAAM,MAAM,GAAG,GAAG,CAAC,QAAQ,CAAC;IAC5B,MAAM,GAAG,GAAG,GAAG,OAAO,GAAG,IAAI,EAAE,CAAC;IAChC,MAAM,KAAK,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC9C,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;IACvB,MAAM,QAAQ,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC;IACnC,MAAM,cAAc,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;IAE7E,OAAO,oBAAoB,CAAC;QAC1B,MAAM,EAAE,WAAW;QACnB,MAAM;QACN,GAAG;QACH,SAAS,EAAE,mBAAmB;QAC9B,OAAO,EAAE,cAAc;QACvB,KAAK;QACL,QAAQ;QACR,cAAc;KACf,CAAC,CAAC;AACL,CAAC;AAED,SAAS,cAAc,CAAC,OAAwB;IAC9C,IAAI,OAAO,OAAO,KAAK,QAAQ;QAAE,OAAO,MAAM,CAAC,OAAO,CAAC,CAAC;IACxD,MAAM,KAAK,GAAG,gBAAgB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC7C,OAAO,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,OAAO,CAAC;AACrC,CAAC;AAED,SAAS,cAAc,CAAC,OAAwB;IAC9C,OAAO,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,UAAU,OAAO,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC;AACrE,CAAC"}

package/core/dist/wallet.d.ts

@@ -0,0 +1,22 @@
+export interface WalletData {
+    address: string;
+    privateKey: string;
+    created?: string;
+    funded?: boolean;
+    lastFaucet?: string;
+    rail?: "x402" | "mpp" | "lightning";
+    /** The Lightning wallet (`run402 init lightning`): a budgeted wallet on Run402's Hub. `nwc` is the pairing secret. */
+    lightning?: WalletLightning;
+}
+export interface WalletLightning {
+    wallet_id: string;
+    nwc: string;
+    lightning_address: string | null;
+    budget_sats: number;
+    starter_sats: number;
+    custody: "run402_hub";
+    minted_at: string;
+}
+export declare function readWallet(path?: string): WalletData | null;
+export declare function saveWallet(data: WalletData, path?: string): void;
+//# sourceMappingURL=wallet.d.ts.map

package/core/dist/wallet.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"wallet.d.ts","sourceRoot":"","sources":["../src/wallet.ts"],"names":[],"mappings":"AAKA,MAAM,WAAW,UAAU;IACzB,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,IAAI,CAAC,EAAE,MAAM,GAAG,KAAK,GAAG,WAAW,CAAC;IACpC,sHAAsH;IACtH,SAAS,CAAC,EAAE,eAAe,CAAC;CAC7B;AAED,MAAM,WAAW,eAAe;IAC9B,SAAS,EAAE,MAAM,CAAC;IAClB,GAAG,EAAE,MAAM,CAAC;IACZ,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,OAAO,EAAE,YAAY,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;CACnB;AAkDD,wBAAgB,UAAU,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,UAAU,GAAG,IAAI,CAwC3D;AAED,wBAAgB,UAAU,CAAC,IAAI,EAAE,UAAU,EAAE,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAQhE"}

package/core/dist/{allowance.js → wallet.js}

@@ -1,36 +1,36 @@
 import { readFileSync, writeFileSync, mkdirSync, existsSync, chmodSync, renameSync, statSync } from "node:fs";
 import { dirname, join } from "node:path";
 import { randomBytes } from "node:crypto";
-import { getAllowancePath } from "./config.js";
+import { getWalletPath } from "./config.js";
 // 0x-prefixed 40-hex EVM address.
 const ADDRESS_RE = /^0x[a-fA-F0-9]{40}$/;
 // 0x-prefixed 64-hex secp256k1 private key (32 bytes).
 const PRIVATE_KEY_RE = /^0x[a-fA-F0-9]{64}$/;
 /**
- * Load the agent allowance from disk.
+ * Load the agent wallet from disk.
  *
- * Returns `null` for the two "no allowance configured" cases:
+ * Returns `null` for the two "no local wallet configured" cases:
  *   - the file does not exist
  *   - the file exists but is not parseable JSON (preserve existing UX —
- *     consumers print "no_allowance" and tell the user to run init)
+ *     consumers print "no_wallet" and tell the user to run init)
  *
  * Throws a structured `Error` when the file parses as JSON but the
  * shape is wrong (missing/wrong-type/wrong-length fields). Without this guard
  * downstream callers crash with raw stack traces:
- *   - `cli/lib/status.mjs` reaches for `allowance.address.toLowerCase()`
+ *   - `cli/lib/status.mjs` reaches for `wallet.address.toLowerCase()`
  *     and crashes with `TypeError: Cannot read properties of undefined`.
- *   - `core/src/allowance-auth.ts` passes a malformed `privateKey` to
+ *   - `core/src/wallet-auth.ts` passes a malformed `privateKey` to
  *     `@noble/curves` which throws "expected 32 bytes, got N".
  *
- * The CLI's `cli/lib/config.mjs:readAllowance()` wrapper and the MCP
+ * The CLI's `cli/lib/config.mjs:readWallet()` wrapper and the MCP
  * `src/tools/{status,init}.ts` callers translate the throw into their own
- * structured envelopes (`code: BAD_ALLOWANCE_FILE`).
+ * structured envelopes (`code: BAD_WALLET_FILE`).
  */
 /**
- * If an allowance file is readable by group or other (any of the low 0o077
+ * If a wallet file is readable by group or other (any of the low 0o077
  * bits set), tighten it to 0600 and warn once on stderr. This self-heals the
  * historical case where a legacy world-readable `wallet.json` (mode 0644) was
- * migrated to `allowance.json` via a mode-preserving rename, leaving the
+ * migrated to `wallet.json` via a mode-preserving rename, leaving the
  * private key exposed on a shared machine. Best-effort: POSIX-only and silent
  * on platforms without meaningful Unix modes (e.g. Windows).
  */
@@ -48,8 +48,8 @@ function selfHealPermissions(p) {
         // Best-effort; never block a read on a chmod/stat failure.
     }
 }
-export function readAllowance(path) {
-    const p = path ?? getAllowancePath();
+export function readWallet(path) {
+    const p = path ?? getWalletPath();
     if (!existsSync(p))
         return null;
     selfHealPermissions(p);
@@ -66,31 +66,31 @@ export function readAllowance(path) {
     }
     catch {
         // Preserve historical UX — completely unparseable input reads as "no
-        // allowance configured" rather than as an error. Consumers already handle
+        // wallet configured" rather than as an error. Consumers already handle
         // null with a friendly "run 'run402 init'" message.
         return null;
     }
     if (parsed === null || typeof parsed !== "object" || Array.isArray(parsed)) {
-        throw new Error(`allowance.json must contain a JSON object (got ${Array.isArray(parsed) ? "array" : parsed === null ? "null" : typeof parsed}). Back up the file and run 'run402 init' to recreate it.`);
+        throw new Error(`wallet.json must contain a JSON object (got ${Array.isArray(parsed) ? "array" : parsed === null ? "null" : typeof parsed}). Back up the file and run 'run402 init' to recreate it.`);
     }
     const data = parsed;
     if (typeof data.address !== "string" || !ADDRESS_RE.test(data.address)) {
-        throw new Error("allowance.json missing valid 'address' (expected 0x-prefixed 40-hex string). " +
+        throw new Error("wallet.json missing valid 'address' (expected 0x-prefixed 40-hex string). " +
             "Back up the file and run 'run402 init' to recreate it.");
     }
     if (typeof data.privateKey !== "string" || !PRIVATE_KEY_RE.test(data.privateKey)) {
-        throw new Error("allowance.json missing valid 'privateKey' (expected 0x-prefixed 64-hex string). " +
+        throw new Error("wallet.json missing valid 'privateKey' (expected 0x-prefixed 64-hex string). " +
             "Back up the file and run 'run402 init' to recreate it.");
     }
     return data;
 }
-export function saveAllowance(data, path) {
-    const p = path ?? getAllowancePath();
+export function saveWallet(data, path) {
+    const p = path ?? getWalletPath();
     const dir = dirname(p);
     mkdirSync(dir, { recursive: true });
-    const tmp = join(dir, `.allowance.${randomBytes(4).toString("hex")}.tmp`);
+    const tmp = join(dir, `.wallet.${randomBytes(4).toString("hex")}.tmp`);
     writeFileSync(tmp, JSON.stringify(data, null, 2), { mode: 0o600 });
     renameSync(tmp, p);
     chmodSync(p, 0o600);
 }
-//# sourceMappingURL=allowance.js.map
+//# sourceMappingURL=wallet.js.map

package/core/dist/wallet.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"wallet.js","sourceRoot":"","sources":["../src/wallet.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAC9G,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAuB5C,kCAAkC;AAClC,MAAM,UAAU,GAAG,qBAAqB,CAAC;AACzC,uDAAuD;AACvD,MAAM,cAAc,GAAG,qBAAqB,CAAC;AAE7C;;;;;;;;;;;;;;;;;;;GAmBG;AACH;;;;;;;GAOG;AACH,SAAS,mBAAmB,CAAC,CAAS;IACpC,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO;QAAE,OAAO;IACzC,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,KAAK,CAAC;QACtC,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;YACzB,SAAS,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;YACpB,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,qCAAqC,CAAC,SAAS,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,0CAA0C,CAC1G,CAAC;QACJ,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,2DAA2D;IAC7D,CAAC;AACH,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,IAAa;IACtC,MAAM,CAAC,GAAG,IAAI,IAAI,aAAa,EAAE,CAAC;IAClC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAChC,mBAAmB,CAAC,CAAC,CAAC,CAAC;IACvB,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACH,GAAG,GAAG,YAAY,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;IACjC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC3B,CAAC;IAAC,MAAM,CAAC;QACP,qEAAqE;QACrE,uEAAuE;QACvE,oDAAoD;QACpD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,MAAM,KAAK,IAAI,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3E,MAAM,IAAI,KAAK,CACb,+CACE,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,MACtE,2DAA2D,CAC5D,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,GAAG,MAA6B,CAAC;IAC3C,IAAI,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QACvE,MAAM,IAAI,KAAK,CACb,4EAA4E;YAC1E,wDAAwD,CAC3D,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,IAAI,CAAC,UAAU,KAAK,QAAQ,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;QACjF,MAAM,IAAI,KAAK,CACb,+EAA+E;YAC7E,wDAAwD,CAC3D,CAAC;IACJ,CAAC;IACD,OAAO,IAAkB,CAAC;AAC5B,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,IAAgB,EAAE,IAAa;IACxD,MAAM,CAAC,GAAG,IAAI,IAAI,aAAa,EAAE,CAAC;IAClC,MAAM,GAAG,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;IACvB,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACpC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,WAAW,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACvE,aAAa,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACnE,UAAU,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;IACnB,SAAS,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;AACtB,CAAC"}

package/core/dist/{write-auth-session.d.ts → write-approvals.d.ts}

@@ -1,19 +1,20 @@
 /**
- * Cache of **operator-approval** tokens — the passkey-fresh write-auth tokens a
- * wallet-less human mints to provision/deploy (gateway v1.85/v1.87). Distinct
- * from the control-plane session ({@link ControlPlaneSessionCache}) it pairs
- * with: the gateway scopes each token to one `(action, target)`, so this is a
+ * Cache of **write approvals** — the passkey-signed, target-scoped tokens a
+ * wallet-less person mints with `run402 approve` to provision, deploy, or write
+ * secrets from the command line. Distinct from the sign-in session
+ * ({@link ControlPlaneSessionCache}) it pairs with, and never a step-up. The
+ * gateway scopes each token to one `(action, target)`, so this is a
  * **multi-entry** cache keyed by `(api_origin, control_plane_session_hash,
  * action, target)`. An `org.project.create` approval for org Y and a
  * `project.deploy` approval for project X coexist.
  *
  * Stored at the BASE config dir (principal-scoped), mode 0600 — as sensitive as
- * the allowance key. The token dies with its control-plane session; the
+ * the wallet key. The token dies with its sign-in session; the
  * `control_plane_session_hash` binding lets the client drop a stale approval
- * locally rather than replay it into a `WRITE_AUTH_BINDING_MISMATCH`.
+ * locally rather than replay it into a `WRITE_APPROVAL_BINDING_MISMATCH`.
  */
-export interface WriteAuthApproval {
-    write_auth_token: string;
+export interface WriteApproval {
+    write_approval_token: string;
     token_type: string;
     header: string;
     /** Gateway capability: `org.project.create` | `project.deploy` | `project.secret.write`. */
@@ -30,13 +31,14 @@ export interface WriteAuthApproval {
     amr?: string[];
     minted_at: number;
 }
-/** The token payload from `POST /agent/v1/control-plane/write-auth/cli/token`. */
-export interface WriteAuthTokenResponse {
-    write_auth_token: string;
+/** The token payload from `POST /agent/v1/control-plane/write-approval/cli/token`. */
+export interface WriteApprovalTokenResponse {
+    write_approval_token: string;
     token_type?: string;
     header?: string;
-    /** The write-auth session; its expiry is the token's expiry. */
+    /** The write-approval session; its idle expiry is the token's expiry. */
     session?: {
+        idle_expires_at?: string | number;
         expires_at?: string | number;
         absolute_expires_at?: string | number;
         amr?: string[];
@@ -45,15 +47,15 @@ export interface WriteAuthTokenResponse {
     [k: string]: unknown;
 }
 /** A capability target — exactly one of these is set per approval. */
-export interface WriteAuthTargetKey {
+export interface WriteApprovalTargetKey {
     org_id?: string;
     project_id?: string;
 }
 /**
- * Path to the approval cache: `{base}/write-auth-session.json`.
- * `RUN402_WRITE_AUTH_SESSION_PATH` overrides for testing.
+ * Path to the approval cache: `{base}/write-approvals.json`.
+ * `RUN402_WRITE_APPROVALS_PATH` overrides for testing.
  */
-export declare function getWriteAuthSessionPath(): string;
+export declare function getWriteApprovalsPath(): string;
 /** Stable short hash binding an approval to a control-plane session token. */
 export declare function hashControlPlaneSession(token: string): string;
 /**
@@ -61,17 +63,17 @@ export declare function hashControlPlaneSession(token: string): string;
  * unreadable, unparseable). Throws when the file parses as JSON but the shape
  * is wrong, so a corrupted cache surfaces a clear fix-it.
  */
-export declare function readApprovals(path?: string): WriteAuthApproval[];
+export declare function readApprovals(path?: string): WriteApproval[];
 /**
  * Persist an approval. Replaces any existing entry with the same
  * `(api_origin, control_plane_session_hash, action, target)` key and leaves
  * every other entry intact (multi-entry, non-thrashing). Atomic, mode 0600.
  */
-export declare function saveApproval(approval: WriteAuthApproval, path?: string): void;
-/** Delete the whole approval cache — local half of `operator logout`. Idempotent. */
+export declare function saveApproval(approval: WriteApproval, path?: string): void;
+/** Delete the whole approval cache — local half of `run402 logout`. Idempotent. */
 export declare function clearApprovals(path?: string): void;
 /** Whether an approval is past its usable life (with a small skew buffer). */
-export declare function isApprovalExpired(approval: WriteAuthApproval, nowMs?: number, skewMs?: number): boolean;
+export declare function isApprovalExpired(approval: WriteApproval, nowMs?: number, skewMs?: number): boolean;
 /**
  * Return the cached approval matching ALL of `(apiOrigin, cpSessionHash,
  * capability, target)` and still live, or `null` if none matches or it is
@@ -82,18 +84,18 @@ export declare function loadLiveApproval(q: {
     apiOrigin: string;
     cpSessionHash: string;
     capability: string;
-    target: WriteAuthTargetKey;
-}, path?: string, nowMs?: number): WriteAuthApproval | null;
+    target: WriteApprovalTargetKey;
+}, path?: string, nowMs?: number): WriteApproval | null;
 /**
  * Build a cache entry from the gateway token response + the binding context
  * (the cp-session it was minted under, the API origin, and the `(action,
  * target)` it covers). Expiry is taken from the returned `session`.
  */
-export declare function approvalFromTokenResponse(resp: WriteAuthTokenResponse, binding: {
+export declare function approvalFromTokenResponse(resp: WriteApprovalTokenResponse, binding: {
     action: string;
-    target: WriteAuthTargetKey;
+    target: WriteApprovalTargetKey;
     apiOrigin: string;
     controlPlaneSessionHash: string;
     controlPlanePrincipalId: string;
-}, nowMs?: number): WriteAuthApproval;
-//# sourceMappingURL=write-auth-session.d.ts.map
+}, nowMs?: number): WriteApproval;
+//# sourceMappingURL=write-approvals.d.ts.map

package/core/dist/write-approvals.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"write-approvals.d.ts","sourceRoot":"","sources":["../src/write-approvals.ts"],"names":[],"mappings":"AAcA;;;;;;;;;;;;;;GAcG;AACH,MAAM,WAAW,aAAa;IAC5B,oBAAoB,EAAE,MAAM,CAAC;IAC7B,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,4FAA4F;IAC5F,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,sFAAsF;IACtF,UAAU,EAAE,MAAM,CAAC;IACnB,yEAAyE;IACzE,0BAA0B,EAAE,MAAM,CAAC;IACnC,0BAA0B,EAAE,MAAM,CAAC;IACnC,+EAA+E;IAC/E,UAAU,EAAE,MAAM,CAAC;IACnB,GAAG,CAAC,EAAE,MAAM,EAAE,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,sFAAsF;AACtF,MAAM,WAAW,0BAA0B;IACzC,oBAAoB,EAAE,MAAM,CAAC;IAC7B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,yEAAyE;IACzE,OAAO,CAAC,EAAE;QAAE,eAAe,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;QAAC,UAAU,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;QAAC,mBAAmB,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;QAAC,GAAG,CAAC,EAAE,MAAM,EAAE,CAAC;QAAC,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAAA;KAAE,GAAG,IAAI,CAAC;IAClK,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;CACtB;AAED,sEAAsE;AACtE,MAAM,WAAW,sBAAsB;IACrC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAID;;;GAGG;AACH,wBAAgB,qBAAqB,IAAI,MAAM,CAK9C;AAED,8EAA8E;AAC9E,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAE7D;AAgCD;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,aAAa,EAAE,CA4B5D;AAyBD;;;;GAIG;AACH,wBAAgB,YAAY,CAAC,QAAQ,EAAE,aAAa,EAAE,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAIzE;AAED,mFAAmF;AACnF,wBAAgB,cAAc,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAOlD;AAED,8EAA8E;AAC9E,wBAAgB,iBAAiB,CAC/B,QAAQ,EAAE,aAAa,EACvB,KAAK,GAAE,MAAmB,EAC1B,MAAM,SAAS,GACd,OAAO,CAET;AAED;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAC9B,CAAC,EAAE;IACD,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,EAAE,MAAM,CAAC;IACtB,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,sBAAsB,CAAC;CAChC,EACD,IAAI,CAAC,EAAE,MAAM,EACb,KAAK,GAAE,MAAmB,GACzB,aAAa,GAAG,IAAI,CAatB;AAgBD;;;;GAIG;AACH,wBAAgB,yBAAyB,CACvC,IAAI,EAAE,0BAA0B,EAChC,OAAO,EAAE;IACP,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,sBAAsB,CAAC;IAC/B,SAAS,EAAE,MAAM,CAAC;IAClB,uBAAuB,EAAE,MAAM,CAAC;IAChC,uBAAuB,EAAE,MAAM,CAAC;CACjC,EACD,KAAK,GAAE,MAAmB,GACzB,aAAa,CAkBf"}

package/{sdk/core-dist/write-auth-session.js → core/dist/write-approvals.js}

@@ -4,12 +4,12 @@ import { randomBytes, createHash } from "node:crypto";
 import { getConfigBaseDir } from "./config.js";
 const DEFAULT_TTL_MS = 30 * 60 * 1000;
 /**
- * Path to the approval cache: `{base}/write-auth-session.json`.
- * `RUN402_WRITE_AUTH_SESSION_PATH` overrides for testing.
+ * Path to the approval cache: `{base}/write-approvals.json`.
+ * `RUN402_WRITE_APPROVALS_PATH` overrides for testing.
  */
-export function getWriteAuthSessionPath() {
-    return (process.env.RUN402_WRITE_AUTH_SESSION_PATH ||
-        join(getConfigBaseDir(), "write-auth-session.json"));
+export function getWriteApprovalsPath() {
+    return (process.env.RUN402_WRITE_APPROVALS_PATH ||
+        join(getConfigBaseDir(), "write-approvals.json"));
 }
 /** Stable short hash binding an approval to a control-plane session token. */
 export function hashControlPlaneSession(token) {
@@ -34,8 +34,8 @@ function isApproval(x) {
     if (!x || typeof x !== "object")
         return false;
     const a = x;
-    return (typeof a.write_auth_token === "string" &&
-        a.write_auth_token.length > 0 &&
+    return (typeof a.write_approval_token === "string" &&
+        a.write_approval_token.length > 0 &&
         typeof a.action === "string" &&
         typeof a.api_origin === "string" &&
         typeof a.control_plane_session_hash === "string" &&
@@ -48,7 +48,7 @@ function isApproval(x) {
  * is wrong, so a corrupted cache surfaces a clear fix-it.
  */
 export function readApprovals(path) {
-    const p = path ?? getWriteAuthSessionPath();
+    const p = path ?? getWriteApprovalsPath();
     if (!existsSync(p))
         return [];
     selfHealPermissions(p);
@@ -67,19 +67,19 @@ export function readApprovals(path) {
         return [];
     }
     if (parsed === null || typeof parsed !== "object" || Array.isArray(parsed)) {
-        throw new Error("write-auth-session.json must contain a JSON object. Delete it and re-run 'run402 operator approve' to recreate it.");
+        throw new Error("write-approvals.json must contain a JSON object. Delete it and re-run 'run402 approve' to recreate it.");
     }
     const approvals = parsed.approvals;
     if (!Array.isArray(approvals)) {
-        throw new Error("write-auth-session.json missing an 'approvals' array. Delete it and re-run 'run402 operator approve'.");
+        throw new Error("write-approvals.json missing an 'approvals' array. Delete it and re-run 'run402 approve'.");
     }
     return approvals.filter(isApproval);
 }
 function writeApprovals(approvals, path) {
-    const p = path ?? getWriteAuthSessionPath();
+    const p = path ?? getWriteApprovalsPath();
     const dir = dirname(p);
     mkdirSync(dir, { recursive: true });
-    const tmp = join(dir, `.write-auth-session.${randomBytes(4).toString("hex")}.tmp`);
+    const tmp = join(dir, `.write-approvals.${randomBytes(4).toString("hex")}.tmp`);
     writeFileSync(tmp, JSON.stringify({ approvals }, null, 2), { mode: 0o600 });
     renameSync(tmp, p);
     chmodSync(p, 0o600);
@@ -103,9 +103,9 @@ export function saveApproval(approval, path) {
     existing.push(approval);
     writeApprovals(existing, path);
 }
-/** Delete the whole approval cache — local half of `operator logout`. Idempotent. */
+/** Delete the whole approval cache — local half of `run402 logout`. Idempotent. */
 export function clearApprovals(path) {
-    const p = path ?? getWriteAuthSessionPath();
+    const p = path ?? getWriteApprovalsPath();
     try {
         rmSync(p, { force: true });
     }
@@ -137,7 +137,7 @@ export function loadLiveApproval(q, path, nowMs = Date.now()) {
 }
 /** Parse a gateway-returned session expiry (ISO string or epoch) to epoch ms. */
 function sessionExpiryMs(session, nowMs) {
-    const raw = session?.expires_at ?? session?.absolute_expires_at;
+    const raw = session?.idle_expires_at ?? session?.expires_at ?? session?.absolute_expires_at;
     if (typeof raw === "number" && Number.isFinite(raw))
         return raw > 1e12 ? raw : raw * 1000;
     if (typeof raw === "string") {
@@ -157,9 +157,9 @@ export function approvalFromTokenResponse(resp, binding, nowMs = Date.now()) {
         ? resp.session.amr.filter((a) => typeof a === "string")
         : undefined;
     return {
-        write_auth_token: resp.write_auth_token,
-        token_type: typeof resp.token_type === "string" ? resp.token_type : "write_auth",
-        header: typeof resp.header === "string" ? resp.header : "X-Run402-Write-Auth",
+        write_approval_token: resp.write_approval_token,
+        token_type: typeof resp.token_type === "string" ? resp.token_type : "write_approval",
+        header: typeof resp.header === "string" ? resp.header : "X-Run402-Write-Approval",
         action: binding.action,
         ...(binding.target.org_id ? { org_id: binding.target.org_id } : {}),
         ...(binding.target.project_id ? { project_id: binding.target.project_id } : {}),
@@ -171,4 +171,4 @@ export function approvalFromTokenResponse(resp, binding, nowMs = Date.now()) {
         minted_at: nowMs,
     };
 }
-//# sourceMappingURL=write-auth-session.js.map
+//# sourceMappingURL=write-approvals.js.map

package/core/dist/write-approvals.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"write-approvals.js","sourceRoot":"","sources":["../src/write-approvals.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,YAAY,EACZ,aAAa,EACb,SAAS,EACT,UAAU,EACV,SAAS,EACT,UAAU,EACV,QAAQ,EACR,MAAM,GACP,MAAM,SAAS,CAAC;AACjB,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACtD,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAoD/C,MAAM,cAAc,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAEtC;;;GAGG;AACH,MAAM,UAAU,qBAAqB;IACnC,OAAO,CACL,OAAO,CAAC,GAAG,CAAC,2BAA2B;QACvC,IAAI,CAAC,gBAAgB,EAAE,EAAE,sBAAsB,CAAC,CACjD,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,uBAAuB,CAAC,KAAa;IACnD,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AACvE,CAAC;AAED,mFAAmF;AACnF,SAAS,mBAAmB,CAAC,CAAS;IACpC,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO;QAAE,OAAO;IACzC,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,KAAK,CAAC;QACtC,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;YACzB,SAAS,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;YACpB,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,qCAAqC,CAAC,SAAS,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,0CAA0C,CAC1G,CAAC;QACJ,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,2DAA2D;IAC7D,CAAC;AACH,CAAC;AAED,SAAS,UAAU,CAAC,CAAU;IAC5B,IAAI,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC9C,MAAM,CAAC,GAAG,CAA2B,CAAC;IACtC,OAAO,CACL,OAAO,CAAC,CAAC,oBAAoB,KAAK,QAAQ;QAC1C,CAAC,CAAC,oBAAoB,CAAC,MAAM,GAAG,CAAC;QACjC,OAAO,CAAC,CAAC,MAAM,KAAK,QAAQ;QAC5B,OAAO,CAAC,CAAC,UAAU,KAAK,QAAQ;QAChC,OAAO,CAAC,CAAC,0BAA0B,KAAK,QAAQ;QAChD,OAAO,CAAC,CAAC,UAAU,KAAK,QAAQ;QAChC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,CAC9B,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,aAAa,CAAC,IAAa;IACzC,MAAM,CAAC,GAAG,IAAI,IAAI,qBAAqB,EAAE,CAAC;IAC1C,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;QAAE,OAAO,EAAE,CAAC;IAC9B,mBAAmB,CAAC,CAAC,CAAC,CAAC;IACvB,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACH,GAAG,GAAG,YAAY,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;IACjC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC3B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,IAAI,MAAM,KAAK,IAAI,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3E,MAAM,IAAI,KAAK,CACb,wGAAwG,CACzG,CAAC;IACJ,CAAC;IACD,MAAM,SAAS,GAAI,MAAkC,CAAC,SAAS,CAAC;IAChE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CACb,2FAA2F,CAC5F,CAAC;IACJ,CAAC;IACD,OAAO,SAAS,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;AACtC,CAAC;AAED,SAAS,cAAc,CAAC,SAA0B,EAAE,IAAa;IAC/D,MAAM,CAAC,GAAG,IAAI,IAAI,qBAAqB,EAAE,CAAC;IAC1C,MAAM,GAAG,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;IACvB,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACpC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,oBAAoB,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAChF,aAAa,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,SAAS,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC5E,UAAU,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;IACnB,SAAS,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;AACtB,CAAC;AAED,SAAS,UAAU,CAAC,CAA2C,EAAE,CAAyB;IACxF,OAAO,CAAC,CAAC,CAAC,MAAM,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,UAAU,IAAI,IAAI,CAAC,CAAC;AACxG,CAAC;AAED,SAAS,OAAO,CAAC,CAAgB,EAAE,CAAgB;IACjD,OAAO,CACL,CAAC,CAAC,UAAU,KAAK,CAAC,CAAC,UAAU;QAC7B,CAAC,CAAC,0BAA0B,KAAK,CAAC,CAAC,0BAA0B;QAC7D,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM;QACrB,UAAU,CAAC,CAAC,EAAE,CAAC,CAAC,CACjB,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,YAAY,CAAC,QAAuB,EAAE,IAAa;IACjE,MAAM,QAAQ,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,CAAC;IAC1E,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACxB,cAAc,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;AACjC,CAAC;AAED,mFAAmF;AACnF,MAAM,UAAU,cAAc,CAAC,IAAa;IAC1C,MAAM,CAAC,GAAG,IAAI,IAAI,qBAAqB,EAAE,CAAC;IAC1C,IAAI,CAAC;QACH,MAAM,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAC7B,CAAC;IAAC,MAAM,CAAC;QACP,0DAA0D;IAC5D,CAAC;AACH,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,iBAAiB,CAC/B,QAAuB,EACvB,QAAgB,IAAI,CAAC,GAAG,EAAE,EAC1B,MAAM,GAAG,MAAM;IAEf,OAAO,KAAK,GAAG,MAAM,IAAI,QAAQ,CAAC,UAAU,CAAC;AAC/C,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB,CAC9B,CAKC,EACD,IAAa,EACb,QAAgB,IAAI,CAAC,GAAG,EAAE;IAE1B,KAAK,MAAM,CAAC,IAAI,aAAa,CAAC,IAAI,CAAC,EAAE,CAAC;QACpC,IACE,CAAC,CAAC,UAAU,KAAK,CAAC,CAAC,SAAS;YAC5B,CAAC,CAAC,0BAA0B,KAAK,CAAC,CAAC,aAAa;YAChD,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,UAAU;YACzB,UAAU,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC;YACvB,CAAC,iBAAiB,CAAC,CAAC,EAAE,KAAK,CAAC,EAC5B,CAAC;YACD,OAAO,CAAC,CAAC;QACX,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,iFAAiF;AACjF,SAAS,eAAe,CACtB,OAA8C,EAC9C,KAAa;IAEb,MAAM,GAAG,GAAG,OAAO,EAAE,eAAe,IAAI,OAAO,EAAE,UAAU,IAAI,OAAO,EAAE,mBAAmB,CAAC;IAC5F,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,GAAG,IAAI,CAAC;IAC1F,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;QAC5B,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC3B,IAAI,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;YAAE,OAAO,EAAE,CAAC;IACrC,CAAC;IACD,OAAO,KAAK,GAAG,cAAc,CAAC;AAChC,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,yBAAyB,CACvC,IAAgC,EAChC,OAMC,EACD,QAAgB,IAAI,CAAC,GAAG,EAAE;IAE1B,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,CAAC;QAC1C,CAAC,CAAE,IAAI,CAAC,OAAQ,CAAC,GAAiB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC;QACpF,CAAC,CAAC,SAAS,CAAC;IACd,OAAO;QACL,oBAAoB,EAAE,IAAI,CAAC,oBAAoB;QAC/C,UAAU,EAAE,OAAO,IAAI,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,gBAAgB;QACpF,MAAM,EAAE,OAAO,IAAI,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,yBAAyB;QACjF,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACnE,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,OAAO,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/E,UAAU,EAAE,eAAe,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC;QAChD,0BAA0B,EAAE,OAAO,CAAC,uBAAuB;QAC3D,0BAA0B,EAAE,OAAO,CAAC,uBAAuB;QAC3D,UAAU,EAAE,OAAO,CAAC,SAAS;QAC7B,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvB,SAAS,EAAE,KAAK;KACjB,CAAC;AACJ,CAAC"}

package/dist/active-project.js

@@ -3,7 +3,7 @@
  *
  * MCP DB tools (`run_sql`, `get_schema`, `rest_query`) accept an optional
  * `project_id`. When omitted, we fall back to the active project tracked in
- * local state (set by provisioning or `run402 projects use <id>`), so an agent
+ * local state (set by provisioning or `run402 projects use <project_id>`), so an agent
  * working against a single project doesn't have to thread the id through every
  * call. Returns the resolved id, or an error ToolResult when neither an explicit
  * id nor an active project is available.
@@ -28,7 +28,7 @@ export async function resolveProjectId(projectId) {
             {
                 type: "text",
                 text: "No project_id provided and no active project is set. Pass project_id explicitly, " +
-                    "or set an active project first (provision one, or `run402 projects use <id>`).",
+                    "or set an active project first (provision one, or `run402 projects use <project_id>`).",
             },
         ],
     };

package/dist/active-project.js.map

@@ -1 +1 @@
-{"version":3,"file":"active-project.js","sourceRoot":"","sources":["../src/active-project.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,EAAE,MAAM,EAAE,MAAM,UAAU,CAAC;AAGlC,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,SAAkB;IAElB,MAAM,QAAQ,GAAG,SAAS,EAAE,IAAI,EAAE,CAAC;IACnC,IAAI,QAAQ;QAAE,OAAO,QAAQ,CAAC;IAE9B,IAAI,MAAM,GAAkB,IAAI,CAAC;IACjC,IAAI,CAAC;QACH,MAAM,GAAG,MAAM,MAAM,EAAE,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;IAC5C,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,GAAG,IAAI,CAAC;IAChB,CAAC;IACD,IAAI,MAAM;QAAE,OAAO,MAAM,CAAC;IAE1B,OAAO;QACL,OAAO,EAAE,IAAI;QACb,OAAO,EAAE;YACP;gBACE,IAAI,EAAE,MAAM;gBACZ,IAAI,EACF,mFAAmF;oBACnF,gFAAgF;aACnF;SACF;KACF,CAAC;AACJ,CAAC"}
+{"version":3,"file":"active-project.js","sourceRoot":"","sources":["../src/active-project.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,EAAE,MAAM,EAAE,MAAM,UAAU,CAAC;AAGlC,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,SAAkB;IAElB,MAAM,QAAQ,GAAG,SAAS,EAAE,IAAI,EAAE,CAAC;IACnC,IAAI,QAAQ;QAAE,OAAO,QAAQ,CAAC;IAE9B,IAAI,MAAM,GAAkB,IAAI,CAAC;IACjC,IAAI,CAAC;QACH,MAAM,GAAG,MAAM,MAAM,EAAE,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;IAC5C,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,GAAG,IAAI,CAAC;IAChB,CAAC;IACD,IAAI,MAAM;QAAE,OAAO,MAAM,CAAC;IAE1B,OAAO;QACL,OAAO,EAAE,IAAI;QACb,OAAO,EAAE;YACP;gBACE,IAAI,EAAE,MAAM;gBACZ,IAAI,EACF,mFAAmF;oBACnF,wFAAwF;aAC3F;SACF;KACF,CAAC;AACJ,CAAC"}

package/dist/config.d.ts

@@ -1,3 +1,3 @@
-export { getApiBase, getConfigDir, getKeystorePath, getProjectCredentialsPath, getProfileStatePath, getLegacyProjectsPath, getAllowancePath, getActiveProfile, } from "../core/dist/config.js";
+export { getApiBase, getConfigDir, getKeystorePath, getProjectCredentialsPath, getProfileStatePath, getLegacyProjectsPath, getWalletPath, getActiveProfile, } from "../core/dist/config.js";
 export { readMeta } from "../core/dist/profiles.js";
 //# sourceMappingURL=config.d.ts.map

package/dist/config.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,UAAU,EACV,YAAY,EACZ,eAAe,EACf,yBAAyB,EACzB,mBAAmB,EACnB,qBAAqB,EACrB,gBAAgB,EAChB,gBAAgB,GACjB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,QAAQ,EAAE,MAAM,0BAA0B,CAAC"}
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,UAAU,EACV,YAAY,EACZ,eAAe,EACf,yBAAyB,EACzB,mBAAmB,EACnB,qBAAqB,EACrB,aAAa,EACb,gBAAgB,GACjB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,QAAQ,EAAE,MAAM,0BAA0B,CAAC"}

package/dist/config.js

@@ -1,3 +1,3 @@
-export { getApiBase, getConfigDir, getKeystorePath, getProjectCredentialsPath, getProfileStatePath, getLegacyProjectsPath, getAllowancePath, getActiveProfile, } from "../core/dist/config.js";
+export { getApiBase, getConfigDir, getKeystorePath, getProjectCredentialsPath, getProfileStatePath, getLegacyProjectsPath, getWalletPath, getActiveProfile, } from "../core/dist/config.js";
 export { readMeta } from "../core/dist/profiles.js";
 //# sourceMappingURL=config.js.map

package/dist/config.js.map

@@ -1 +1 @@
-{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,UAAU,EACV,YAAY,EACZ,eAAe,EACf,yBAAyB,EACzB,mBAAmB,EACnB,qBAAqB,EACrB,gBAAgB,EAChB,gBAAgB,GACjB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,QAAQ,EAAE,MAAM,0BAA0B,CAAC"}
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,UAAU,EACV,YAAY,EACZ,eAAe,EACf,yBAAyB,EACzB,mBAAmB,EACnB,qBAAqB,EACrB,aAAa,EACb,gBAAgB,GACjB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,QAAQ,EAAE,MAAM,0BAA0B,CAAC"}

package/dist/errors.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAAA,qDAAqD;AAErD,OAAO,EAGL,yBAAyB,IAAI,4BAA4B,EAE1D,MAAM,sBAAsB,CAAC;AAE9B,uDAAuD;AACvD,MAAM,WAAW,UAAU;IACzB,OAAO,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC/C,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,cAAc,CAC5B,GAAG,EAAE;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,OAAO,CAAA;CAAE,EACtC,OAAO,EAAE,MAAM,GACd,UAAU,CA6GZ;AAED,wBAAgB,2BAA2B,CACzC,MAAM,EAAE,OAAO,EACf,IAAI,GAAE;IAAE,cAAc,CAAC,EAAE,OAAO,CAAA;CAAO,GACtC,MAAM,EAAE,CA+BV;AA4KD;;GAEG;AACH,wBAAgB,eAAe,CAAC,SAAS,EAAE,MAAM,GAAG,UAAU,CAY7D;AAED;;GAEG;AACH,wBAAgB,yBAAyB,CAAC,GAAG,EAAE,4BAA4B,GAAG,UAAU,CAWvF;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,WAAW,CAAC,GAAG,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,GAAG,UAAU,CAwCrE"}
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAAA,qDAAqD;AAErD,OAAO,EAGL,yBAAyB,IAAI,4BAA4B,EAE1D,MAAM,sBAAsB,CAAC;AAE9B,uDAAuD;AACvD,MAAM,WAAW,UAAU;IACzB,OAAO,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC/C,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,cAAc,CAC5B,GAAG,EAAE;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,OAAO,CAAA;CAAE,EACtC,OAAO,EAAE,MAAM,GACd,UAAU,CA6GZ;AAED,wBAAgB,2BAA2B,CACzC,MAAM,EAAE,OAAO,EACf,IAAI,GAAE;IAAE,cAAc,CAAC,EAAE,OAAO,CAAA;CAAO,GACtC,MAAM,EAAE,CA+BV;AAiLD;;GAEG;AACH,wBAAgB,eAAe,CAAC,SAAS,EAAE,MAAM,GAAG,UAAU,CAY7D;AAED;;GAEG;AACH,wBAAgB,yBAAyB,CAAC,GAAG,EAAE,4BAA4B,GAAG,UAAU,CAWvF;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,WAAW,CAAC,GAAG,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,GAAG,UAAU,CAwCrE"}

package/dist/errors.js

@@ -71,7 +71,7 @@ export function formatApiError(res, context) {
                 break;
             case 402:
                 if (inGrace) {
-                    lines.push(`\nNext step: Project is in the soft-delete grace window — control-plane mutations are blocked. Use \`set_tier\` to renew/upgrade and reactivate the project in one transaction.`);
+                    lines.push(`\nNext step: Project is in the soft-delete grace window — control-plane mutations are blocked. Use \`tier_set\` to renew/upgrade and reactivate the project in one transaction.`);
                 }
                 break;
             case 403:
@@ -82,10 +82,10 @@ export function formatApiError(res, context) {
                     // Lifecycle (frozen/dormant) denials are 403, not 402 — style.md
                     // reserves 402 for genuine payment challenges. Give the same
                     // richer grace-window guidance as the 402 branch above.
-                    lines.push(`\nNext step: Project is in the soft-delete grace window — control-plane mutations are blocked. Use \`set_tier\` to renew/upgrade and reactivate the project in one transaction.`);
+                    lines.push(`\nNext step: Project is in the soft-delete grace window — control-plane mutations are blocked. Use \`tier_set\` to renew/upgrade and reactivate the project in one transaction.`);
                 }
                 else {
-                    lines.push(`\nNext step: The project lease may have expired. Use \`get_usage\` to check status, or \`set_tier\` to renew the lease.`);
+                    lines.push(`\nNext step: The project lease may have expired. Use \`get_usage\` to check status, or \`tier_set\` to renew the lease.`);
                 }
                 break;
             case 404:
@@ -104,7 +104,7 @@ export function formatApiError(res, context) {
         }
     }
     else if ((res.status === 402 || res.status === 403) && inGrace) {
-        lines.push(`\nNext step: Project is in the soft-delete grace window — control-plane mutations are blocked. Use \`set_tier\` to renew/upgrade and reactivate the project in one transaction.`);
+        lines.push(`\nNext step: Project is in the soft-delete grace window — control-plane mutations are blocked. Use \`tier_set\` to renew/upgrade and reactivate the project in one transaction.`);
     }
     return { content: [{ type: "text", text: lines.join("\n") }], isError: true };
 }
@@ -187,7 +187,7 @@ function addCodeGuidance(lines, code, body) {
             return true;
         case "PAYMENT_REQUIRED":
         case "INSUFFICIENT_FUNDS":
-            lines.push(`\nNext step: Submit payment or fund the allowance, then retry the request.`);
+            lines.push(`\nNext step: Submit payment (top up the organization's allowance or fund the wallet), then retry the request.`);
             return true;
         case "PAYMENT_INTENT_PENDING":
             lines.push(`\nNext step: Repeat the identical request with the same payer and Idempotency-Key after Retry-After. Do not authorize a fresh key while settlement is unresolved.`);
@@ -212,7 +212,7 @@ function addCodeGuidance(lines, code, body) {
         case "PROJECT_FROZEN":
         case "PROJECT_DORMANT":
         case "PROJECT_PAST_DUE":
-            lines.push(`\nNext step: Use \`get_usage\` to inspect lifecycle state, or \`set_tier\` to renew/reactivate the project.`);
+            lines.push(`\nNext step: Use \`get_usage\` to inspect lifecycle state, or \`tier_set\` to renew/reactivate the project.`);
             return true;
         case "RATE_LIMITED":
             lines.push(`\nNext step: Rate limit hit. Wait and retry.`);
@@ -229,7 +229,7 @@ function addCodeGuidance(lines, code, body) {
             lines.push(`\nNext step: Check the deploy plan/operation id, or list recent deploy operations for the project.`);
             return true;
         case "CI_ROUTE_SCOPE_DENIED":
-            lines.push(`\nNext step: Re-link the GitHub Actions binding with covering \`--route-scope\` patterns, or run the route-changing deploy locally with allowance-backed authority.`);
+            lines.push(`\nNext step: Re-link the GitHub Actions binding with covering \`--route-scope\` patterns, or run the route-changing deploy locally with wallet-backed authority.`);
             return true;
         case "PROJECT_HAS_PENDING_TRANSFER":
             lines.push(`\nNext step: The project has a pending transfer; owner-side mutations are blocked until it is accepted, cancelled, or expires (72h). Use \`cancel_project_transfer\` to cancel it or \`preview_project_transfer\` to view it. The transfer id is in \`details.transfer_id\`.`);
@@ -252,9 +252,14 @@ function formatNextActions(actions) {
             const description = stringField(obj, "label") ??
                 stringField(obj, "description") ??
                 stringField(obj, "message") ??
-                stringField(obj, "hint");
+                stringField(obj, "hint") ??
+                stringField(obj, "why");
+            // A client-resolvable action names its literal command (e.g. the
+            // `approve_write` a WriteApprovalRequiredError synthesizes, or a gateway
+            // `register_contact` / `contact_staff` / `hand_to_member` that carries one).
+            const command = stringField(obj, "command");
             if (name) {
-                lines.push(`- ${name}${description ? `: ${description}` : ""}`);
+                lines.push(`- ${name}${description ? `: ${description}` : ""}${command ? ` (\`${command}\`)` : ""}`);
                 continue;
             }
         }