run402 1.18.0 → 1.19.0

package/cli.mjs

@@ -33,6 +33,7 @@ Commands:
   subdomains  Manage custom subdomains (claim, list, delete)
   apps        Browse and manage the app marketplace
   image       Generate AI images via x402 or MPP micropayments
+  email       Send template-based emails from your project
   message     Send messages to Run402 developers
   agent       Manage agent identity (contact info)
 
@@ -131,6 +132,11 @@ switch (cmd) {
     await run(sub, rest);
     break;
   }
+  case "email": {
+    const { run } = await import("./lib/email.mjs");
+    await run(sub, rest);
+    break;
+  }
   case "message": {
     const { run } = await import("./lib/message.mjs");
     await run(sub, rest);

package/lib/email.mjs

@@ -0,0 +1,206 @@
+import { findProject, resolveProjectId, API, updateProject, loadKeyStore, saveKeyStore } from "./config.mjs";
+
+const HELP = `run402 email — Send template-based emails from your project
+
+Usage:
+  run402 email <subcommand> [args...]
+
+Subcommands:
+  create <slug> [--project <id>]     Create a mailbox (<slug>@mail.run402.com)
+  send   --template <name> --to <email> [--var key=value ...] [--project <id>]
+                                     Send a template email
+  list   [--project <id>]            List sent emails
+  get    <message_id> [--project <id>]  Get a message with replies
+
+Templates:
+  project_invite  — requires --var project_name=... --var invite_url=...
+  magic_link      — requires --var project_name=... --var link_url=... --var expires_in=...
+  notification    — requires --var project_name=... --var message=... (max 500 chars)
+
+Examples:
+  run402 email create my-app
+  run402 email send --template project_invite --to user@example.com \\
+    --var project_name="My App" --var invite_url="https://example.com/invite/abc"
+  run402 email send --template notification --to admin@example.com \\
+    --var project_name="My App" --var message="Deploy complete"
+  run402 email list
+  run402 email get msg_abc123
+
+Notes:
+  - One mailbox per project
+  - Single recipient per send (no CC/BCC)
+  - Slug: 3-63 chars, lowercase alphanumeric + hyphens, no consecutive hyphens
+  - Rate limits vary by tier (prototype: 10/day, hobby: 50/day, team: 200/day)
+  - --project defaults to the active project
+`;
+
+const SLUG_RE = /^[a-z0-9]([a-z0-9-]*[a-z0-9])?$/;
+
+function parseFlag(args, flag) {
+  for (let i = 0; i < args.length; i++) {
+    if (args[i] === flag && args[i + 1]) return args[i + 1];
+  }
+  return null;
+}
+
+function parseVars(args) {
+  const vars = {};
+  for (let i = 0; i < args.length; i++) {
+    if (args[i] === "--var" && args[i + 1]) {
+      const raw = args[++i];
+      const eq = raw.indexOf("=");
+      if (eq > 0) {
+        vars[raw.slice(0, eq)] = raw.slice(eq + 1);
+      }
+    }
+  }
+  return vars;
+}
+
+async function resolveMailboxId(projectId, serviceKey) {
+  const store = loadKeyStore();
+  const proj = store.projects[projectId];
+  if (proj && proj.mailbox_id) return proj.mailbox_id;
+
+  // Fallback: discover via API
+  const res = await fetch(`${API}/mailboxes/v1`, {
+    headers: { "Authorization": `Bearer ${serviceKey}` },
+  });
+  if (!res.ok) {
+    const data = await res.json().catch(() => ({}));
+    console.error(JSON.stringify({ status: "error", http: res.status, ...data }));
+    process.exit(1);
+  }
+  const mailboxes = await res.json();
+  if (!Array.isArray(mailboxes) || mailboxes.length === 0) {
+    console.error(JSON.stringify({ status: "error", message: "No mailbox found. Run: run402 email create <slug>" }));
+    process.exit(1);
+  }
+  const mb = mailboxes[0];
+  updateProject(projectId, { mailbox_id: mb.id, mailbox_address: mb.address });
+  return mb.id;
+}
+
+async function create(args) {
+  const slug = args.find(a => !a.startsWith("--"));
+  const projectId = resolveProjectId(parseFlag(args, "--project"));
+  const p = findProject(projectId);
+
+  if (!slug) {
+    console.error(JSON.stringify({ status: "error", message: "Missing slug. Usage: run402 email create <slug>" }));
+    process.exit(1);
+  }
+  if (slug.length < 3 || slug.length > 63) {
+    console.error(JSON.stringify({ status: "error", message: "Slug must be 3-63 characters." }));
+    process.exit(1);
+  }
+  if (!SLUG_RE.test(slug)) {
+    console.error(JSON.stringify({ status: "error", message: "Slug must be lowercase alphanumeric + hyphens, start/end with alphanumeric." }));
+    process.exit(1);
+  }
+  if (slug.includes("--")) {
+    console.error(JSON.stringify({ status: "error", message: "Slug must not contain consecutive hyphens." }));
+    process.exit(1);
+  }
+
+  const res = await fetch(`${API}/mailboxes/v1`, {
+    method: "POST",
+    headers: { "Authorization": `Bearer ${p.service_key}`, "Content-Type": "application/json" },
+    body: JSON.stringify({ slug, project_id: projectId }),
+  });
+  const data = await res.json();
+  if (!res.ok) {
+    console.error(JSON.stringify({ status: "error", http: res.status, ...data }));
+    process.exit(1);
+  }
+
+  updateProject(projectId, { mailbox_id: data.id, mailbox_address: data.address });
+  console.log(JSON.stringify({ status: "ok", mailbox_id: data.id, address: data.address, slug: data.slug }));
+}
+
+async function send(args) {
+  const template = parseFlag(args, "--template");
+  const to = parseFlag(args, "--to");
+  const projectId = resolveProjectId(parseFlag(args, "--project"));
+  const p = findProject(projectId);
+  const variables = parseVars(args);
+
+  if (!template) {
+    console.error(JSON.stringify({ status: "error", message: "Missing --template. Options: project_invite, magic_link, notification" }));
+    process.exit(1);
+  }
+  if (!to) {
+    console.error(JSON.stringify({ status: "error", message: "Missing --to <email>" }));
+    process.exit(1);
+  }
+
+  const mailboxId = await resolveMailboxId(projectId, p.service_key);
+
+  const res = await fetch(`${API}/mailboxes/v1/${mailboxId}/messages`, {
+    method: "POST",
+    headers: { "Authorization": `Bearer ${p.service_key}`, "Content-Type": "application/json" },
+    body: JSON.stringify({ template, to, variables }),
+  });
+  const data = await res.json();
+  if (!res.ok) {
+    console.error(JSON.stringify({ status: "error", http: res.status, ...data }));
+    process.exit(1);
+  }
+
+  console.log(JSON.stringify({ status: "ok", message_id: data.id, to: data.to, template: data.template }));
+}
+
+async function list(args) {
+  const projectId = resolveProjectId(parseFlag(args, "--project"));
+  const p = findProject(projectId);
+  const mailboxId = await resolveMailboxId(projectId, p.service_key);
+
+  const res = await fetch(`${API}/mailboxes/v1/${mailboxId}/messages`, {
+    headers: { "Authorization": `Bearer ${p.service_key}` },
+  });
+  const data = await res.json();
+  if (!res.ok) {
+    console.error(JSON.stringify({ status: "error", http: res.status, ...data }));
+    process.exit(1);
+  }
+
+  console.log(JSON.stringify(data, null, 2));
+}
+
+async function get(args) {
+  const messageId = args.find(a => !a.startsWith("--"));
+  const projectId = resolveProjectId(parseFlag(args, "--project"));
+  const p = findProject(projectId);
+
+  if (!messageId) {
+    console.error(JSON.stringify({ status: "error", message: "Missing message_id. Usage: run402 email get <message_id>" }));
+    process.exit(1);
+  }
+
+  const mailboxId = await resolveMailboxId(projectId, p.service_key);
+
+  const res = await fetch(`${API}/mailboxes/v1/${mailboxId}/messages/${messageId}`, {
+    headers: { "Authorization": `Bearer ${p.service_key}` },
+  });
+  const data = await res.json();
+  if (!res.ok) {
+    console.error(JSON.stringify({ status: "error", http: res.status, ...data }));
+    process.exit(1);
+  }
+
+  console.log(JSON.stringify(data, null, 2));
+}
+
+export async function run(sub, args) {
+  if (!sub || sub === '--help' || sub === '-h') { console.log(HELP); process.exit(0); }
+  switch (sub) {
+    case "create": await create(args); break;
+    case "send":   await send(args); break;
+    case "list":   await list(args); break;
+    case "get":    await get(args); break;
+    default:
+      console.error(`Unknown subcommand: ${sub}\n`);
+      console.log(HELP);
+      process.exit(1);
+  }
+}

package/lib/functions.mjs

@@ -1,5 +1,6 @@
-import { readFileSync, existsSync } from "fs";
-import { findProject, readAllowance, API, ALLOWANCE_FILE } from "./config.mjs";
+import { readFileSync } from "fs";
+import { findProject, API } from "./config.mjs";
+import { setupPaidFetch } from "./paid-fetch.mjs";
 
 const HELP = `run402 functions — Manage serverless functions
 
@@ -27,26 +28,6 @@ Notes:
   - Deploy may require payment if the project lease has expired
 `;
 
-async function setupPaidFetch() {
-  if (!existsSync(ALLOWANCE_FILE)) {
-    console.error(JSON.stringify({ status: "error", message: "No agent allowance found. Run: run402 allowance create && run402 allowance fund" }));
-    process.exit(1);
-  }
-  const allowance = readAllowance();
-  const { privateKeyToAccount } = await import("viem/accounts");
-  const { createPublicClient, http } = await import("viem");
-  const { baseSepolia } = await import("viem/chains");
-  const { x402Client, wrapFetchWithPayment } = await import("@x402/fetch");
-  const { ExactEvmScheme } = await import("@x402/evm/exact/client");
-  const { toClientEvmSigner } = await import("@x402/evm");
-  const account = privateKeyToAccount(allowance.privateKey);
-  const publicClient = createPublicClient({ chain: baseSepolia, transport: http() });
-  const signer = toClientEvmSigner(account, publicClient);
-  const client = new x402Client();
-  client.register("eip155:84532", new ExactEvmScheme(signer));
-  return wrapFetchWithPayment(fetch, client);
-}
-
 async function deploy(projectId, name, args) {
   const p = findProject(projectId);
   const opts = { file: null, timeout: undefined, memory: undefined, deps: undefined };

package/lib/paid-fetch.mjs

@@ -3,11 +3,33 @@
  * Branches on allowance rail:
  *   - "mpp": uses mppx.fetch (Tempo pathUSD)
  *   - "x402" (default): uses @x402/fetch (Base USDC)
+ *
+ * Checks on-chain balances at setup time and selects funded networks.
  */
 
 import { readAllowance, ALLOWANCE_FILE } from "./config.mjs";
 import { existsSync } from "fs";
 
+const USDC_ABI = [{ name: "balanceOf", type: "function", stateMutability: "view", inputs: [{ name: "account", type: "address" }], outputs: [{ name: "", type: "uint256" }] }];
+const USDC_MAINNET = "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913";
+const USDC_SEPOLIA = "0x036CbD53842c5426634e7929541eC2318f3dCF7e";
+const PATH_USD = "0x20c0000000000000000000000000000000000000";
+const TEMPO_RPC = "https://rpc.moderato.tempo.xyz/";
+
+async function checkBalance(publicClient, tokenAddress, walletAddress) {
+  try {
+    const raw = await publicClient.readContract({
+      address: tokenAddress,
+      abi: USDC_ABI,
+      functionName: "balanceOf",
+      args: [walletAddress],
+    });
+    return Number(raw);
+  } catch {
+    return 0;
+  }
+}
+
 export async function setupPaidFetch() {
   if (!existsSync(ALLOWANCE_FILE)) {
     console.error(JSON.stringify({ status: "error", message: "No agent allowance found. Run: run402 allowance create && run402 allowance fund" }));
@@ -18,6 +40,23 @@ export async function setupPaidFetch() {
   const account = privateKeyToAccount(allowance.privateKey);
 
   if (allowance.rail === "mpp") {
+    const { createPublicClient, http, defineChain } = await import("viem");
+    const tempoModerato = defineChain({
+      id: 42431,
+      name: "Tempo Moderato",
+      nativeCurrency: { name: "pathUSD", symbol: "pathUSD", decimals: 6 },
+      rpcUrls: { default: { http: [TEMPO_RPC] } },
+    });
+    const tempoClient = createPublicClient({ chain: tempoModerato, transport: http() });
+    const balance = await checkBalance(tempoClient, PATH_USD, allowance.address);
+    if (balance === 0) {
+      console.error(JSON.stringify({
+        status: "error",
+        message: `No pathUSD balance on Tempo Moderato (0). Fund your wallet: run402 allowance fund`,
+      }));
+      process.exit(1);
+    }
+
     const { Mppx, tempo } = await import("mppx/client");
     const mppx = Mppx.create({
       polyfill: false,
@@ -26,7 +65,7 @@ export async function setupPaidFetch() {
     return mppx.fetch;
   }
 
-  // Default: x402 (existing behavior)
+  // Default: x402
   const { createPublicClient, http } = await import("viem");
   const { base, baseSepolia } = await import("viem/chains");
   const { x402Client, wrapFetchWithPayment } = await import("@x402/fetch");
@@ -36,8 +75,33 @@ export async function setupPaidFetch() {
   const mainnetClient = createPublicClient({ chain: base, transport: http() });
   const sepoliaClient = createPublicClient({ chain: baseSepolia, transport: http() });
 
+  // Check balances in parallel
+  const [mainnetBalance, sepoliaBalance] = await Promise.all([
+    checkBalance(mainnetClient, USDC_MAINNET, allowance.address),
+    checkBalance(sepoliaClient, USDC_SEPOLIA, allowance.address),
+  ]);
+
+  if (mainnetBalance === 0 && sepoliaBalance === 0) {
+    console.error(JSON.stringify({
+      status: "error",
+      message: `No USDC balance on any supported network (Base: $${(mainnetBalance / 1e6).toFixed(2)}, Base Sepolia: $${(sepoliaBalance / 1e6).toFixed(2)}). Fund your wallet or run: run402 allowance fund`,
+    }));
+    process.exit(1);
+  }
+
   const client = new x402Client();
   client.register("eip155:8453", new ExactEvmScheme(toClientEvmSigner(account, mainnetClient)));
   client.register("eip155:84532", new ExactEvmScheme(toClientEvmSigner(account, sepoliaClient)));
+
+  // Policy: only allow networks where the wallet has funds
+  client.registerPolicy((_version, reqs) => {
+    const funded = reqs.filter((r) => {
+      if (r.network === "eip155:8453") return mainnetBalance > 0;
+      if (r.network === "eip155:84532") return sepoliaBalance > 0;
+      return false;
+    });
+    return funded.length > 0 ? funded : reqs;
+  });
+
   return wrapFetchWithPayment(fetch, client);
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "run402",
-  "version": "1.18.0",
+  "version": "1.19.0",
   "description": "CLI for Run402 — provision Postgres databases, deploy static sites, generate images, and manage wallets via x402 and MPP micropayments.",
   "type": "module",
   "bin": {