run402 1.3.0 → 1.4.0

package/cli.mjs

@@ -23,6 +23,8 @@ Commands:
   subdomains  Manage custom subdomains (claim, list, delete)
   apps        Browse and manage the app marketplace
   image       Generate AI images via x402 micropayments
+  message     Send messages to Run402 developers
+  agent       Manage agent identity (contact info)
 
 Run 'run402 <command> --help' for detailed usage of each command.
 
@@ -98,6 +100,16 @@ switch (cmd) {
     await run(sub, rest);
     break;
   }
+  case "message": {
+    const { run } = await import("./lib/message.mjs");
+    await run(sub, rest);
+    break;
+  }
+  case "agent": {
+    const { run } = await import("./lib/agent.mjs");
+    await run(sub, rest);
+    break;
+  }
   default:
     console.error(`Unknown command: ${cmd}\n`);
     console.log(HELP);

package/lib/agent.mjs

@@ -0,0 +1,68 @@
+import { readWallet, API, WALLET_FILE } from "./config.mjs";
+import { existsSync } from "fs";
+
+const HELP = `run402 agent — Manage agent identity
+
+Usage:
+  run402 agent contact --name <name> [--email <email>] [--webhook <url>]
+
+Notes:
+  - Costs $0.001 USDC via x402
+  - Registers contact info so Run402 can reach your agent
+  - Only name is required; email and webhook are optional
+
+Examples:
+  run402 agent contact --name my-agent
+  run402 agent contact --name my-agent --email ops@example.com --webhook https://example.com/hook
+`;
+
+async function contact(args) {
+  let name = null, email = null, webhook = null;
+  for (let i = 0; i < args.length; i++) {
+    if (args[i] === "--name" && args[i + 1]) name = args[++i];
+    if (args[i] === "--email" && args[i + 1]) email = args[++i];
+    if (args[i] === "--webhook" && args[i + 1]) webhook = args[++i];
+  }
+  if (!name) { console.error(JSON.stringify({ status: "error", message: "Missing --name <name>" })); process.exit(1); }
+  if (!existsSync(WALLET_FILE)) {
+    console.error(JSON.stringify({ status: "error", message: "No wallet found. Run: run402 wallet create && run402 wallet fund" }));
+    process.exit(1);
+  }
+
+  const wallet = readWallet();
+  const { privateKeyToAccount } = await import("viem/accounts");
+  const { createPublicClient, http } = await import("viem");
+  const { baseSepolia } = await import("viem/chains");
+  const { x402Client, wrapFetchWithPayment } = await import("@x402/fetch");
+  const { ExactEvmScheme } = await import("@x402/evm/exact/client");
+  const { toClientEvmSigner } = await import("@x402/evm");
+  const account = privateKeyToAccount(wallet.privateKey);
+  const publicClient = createPublicClient({ chain: baseSepolia, transport: http() });
+  const signer = toClientEvmSigner(account, publicClient);
+  const client = new x402Client();
+  client.register("eip155:84532", new ExactEvmScheme(signer));
+  const fetchPaid = wrapFetchWithPayment(fetch, client);
+
+  const body = { name };
+  if (email) body.email = email;
+  if (webhook) body.webhook = webhook;
+
+  const res = await fetchPaid(`${API}/v1/agent/contact`, {
+    method: "PUT",
+    headers: { "Content-Type": "application/json" },
+    body: JSON.stringify(body),
+  });
+  const data = await res.json();
+  if (!res.ok) { console.error(JSON.stringify({ status: "error", http: res.status, ...data })); process.exit(1); }
+  console.log(JSON.stringify(data, null, 2));
+}
+
+export async function run(sub, args) {
+  if (!sub || sub === '--help' || sub === '-h') { console.log(HELP); process.exit(0); }
+  if (sub !== "contact") {
+    console.error(`Unknown subcommand: ${sub}\n`);
+    console.log(HELP);
+    process.exit(1);
+  }
+  await contact(args);
+}

package/lib/apps.mjs

@@ -14,6 +14,10 @@ Subcommands:
   publish <id> [--description <desc>] [--tags <t1,t2>] [--visibility <v>] [--fork-allowed]
                                            Publish a project as an app
   versions <id>                            List published versions of a project
+  inspect <version_id>                     Inspect a published app version
+  update  <project_id> <version_id> [--description <desc>] [--tags <t1,t2>] [--visibility <v>] [--fork-allowed] [--no-fork]
+                                           Update a published version
+  delete  <project_id> <version_id>        Delete a published version
 
 Examples:
   run402 apps browse
@@ -21,6 +25,9 @@ Examples:
   run402 apps fork ver_abc123 my-todo --tier prototype
   run402 apps publish proj123 --description "Todo app" --tags todo,auth --visibility public --fork-allowed
   run402 apps versions proj123
+  run402 apps inspect ver_abc123
+  run402 apps update proj123 ver_abc123 --description "Updated" --tags todo
+  run402 apps delete proj123 ver_abc123
 `;
 
 async function browse(args) {
@@ -122,6 +129,49 @@ async function versions(projectId) {
   console.log(JSON.stringify(data, null, 2));
 }
 
+async function inspect(versionId) {
+  if (!versionId) { console.error(JSON.stringify({ status: "error", message: "Missing version ID" })); process.exit(1); }
+  const res = await fetch(`${API}/v1/apps/${versionId}`);
+  const data = await res.json();
+  if (!res.ok) { console.error(JSON.stringify({ status: "error", http: res.status, ...data })); process.exit(1); }
+  console.log(JSON.stringify(data, null, 2));
+}
+
+async function update(projectId, versionId, args) {
+  const p = findProject(projectId);
+  const body = {};
+  for (let i = 0; i < args.length; i++) {
+    if (args[i] === "--description" && args[i + 1]) body.description = args[++i];
+    if (args[i] === "--tags" && args[i + 1]) body.tags = args[++i].split(",");
+    if (args[i] === "--visibility" && args[i + 1]) body.visibility = args[++i];
+    if (args[i] === "--fork-allowed") body.fork_allowed = true;
+    if (args[i] === "--no-fork") body.fork_allowed = false;
+  }
+  const res = await fetch(`${API}/admin/v1/projects/${projectId}/versions/${versionId}`, {
+    method: "PATCH",
+    headers: { "Authorization": `Bearer ${p.service_key}`, "Content-Type": "application/json" },
+    body: JSON.stringify(body),
+  });
+  const data = await res.json();
+  if (!res.ok) { console.error(JSON.stringify({ status: "error", http: res.status, ...data })); process.exit(1); }
+  console.log(JSON.stringify(data, null, 2));
+}
+
+async function deleteVersion(projectId, versionId) {
+  const p = findProject(projectId);
+  const res = await fetch(`${API}/admin/v1/projects/${projectId}/versions/${versionId}`, {
+    method: "DELETE",
+    headers: { "Authorization": `Bearer ${p.service_key}` },
+  });
+  if (res.status === 204 || res.ok) {
+    console.log(JSON.stringify({ status: "ok", message: `Version ${versionId} deleted.` }));
+  } else {
+    const data = await res.json();
+    console.error(JSON.stringify({ status: "error", http: res.status, ...data }));
+    process.exit(1);
+  }
+}
+
 export async function run(sub, args) {
   if (!sub || sub === '--help' || sub === '-h') { console.log(HELP); process.exit(0); }
   switch (sub) {
@@ -129,6 +179,9 @@ export async function run(sub, args) {
     case "fork":     await fork(args[0], args[1], args.slice(2)); break;
     case "publish":  await publish(args[0], args.slice(1)); break;
     case "versions": await versions(args[0]); break;
+    case "inspect":  await inspect(args[0]); break;
+    case "update":   await update(args[0], args[1], args.slice(2)); break;
+    case "delete":   await deleteVersion(args[0], args[1]); break;
     default:
       console.error(`Unknown subcommand: ${sub}\n`);
       console.log(HELP);

package/lib/config.mjs

@@ -3,9 +3,10 @@
  * Kept in a separate module so credential reads stay isolated.
  */
 
-import { readFileSync, writeFileSync, existsSync, mkdirSync, chmodSync } from "fs";
-import { join } from "path";
+import { readFileSync, writeFileSync, existsSync, mkdirSync, chmodSync, renameSync } from "fs";
+import { join, dirname } from "path";
 import { homedir } from "os";
+import { randomBytes } from "crypto";
 
 export const CONFIG_DIR = join(homedir(), ".config", "run402");
 export const WALLET_FILE = join(CONFIG_DIR, "wallet.json");
@@ -19,8 +20,10 @@ export function readWallet() {
 
 export function saveWallet(data) {
   mkdirSync(CONFIG_DIR, { recursive: true });
-  writeFileSync(WALLET_FILE, JSON.stringify(data, null, 2), { mode: 0o600 });
-  try { chmodSync(WALLET_FILE, 0o600); } catch {}
+  const tmp = join(CONFIG_DIR, `.wallet.${randomBytes(4).toString("hex")}.tmp`);
+  writeFileSync(tmp, JSON.stringify(data, null, 2), { mode: 0o600 });
+  renameSync(tmp, WALLET_FILE);
+  chmodSync(WALLET_FILE, 0o600);
 }
 
 export function loadProjects() {

package/lib/message.mjs

@@ -0,0 +1,56 @@
+import { readWallet, API, WALLET_FILE } from "./config.mjs";
+import { existsSync } from "fs";
+
+const HELP = `run402 message — Send messages to Run402 developers
+
+Usage:
+  run402 message send <text>
+
+Notes:
+  - Costs $0.01 USDC via x402
+  - Requires a funded wallet
+
+Examples:
+  run402 message send "Hello from my agent!"
+`;
+
+async function send(text) {
+  if (!text) { console.error(JSON.stringify({ status: "error", message: "Missing message text" })); process.exit(1); }
+  if (!existsSync(WALLET_FILE)) {
+    console.error(JSON.stringify({ status: "error", message: "No wallet found. Run: run402 wallet create && run402 wallet fund" }));
+    process.exit(1);
+  }
+
+  const wallet = readWallet();
+  const { privateKeyToAccount } = await import("viem/accounts");
+  const { createPublicClient, http } = await import("viem");
+  const { baseSepolia } = await import("viem/chains");
+  const { x402Client, wrapFetchWithPayment } = await import("@x402/fetch");
+  const { ExactEvmScheme } = await import("@x402/evm/exact/client");
+  const { toClientEvmSigner } = await import("@x402/evm");
+  const account = privateKeyToAccount(wallet.privateKey);
+  const publicClient = createPublicClient({ chain: baseSepolia, transport: http() });
+  const signer = toClientEvmSigner(account, publicClient);
+  const client = new x402Client();
+  client.register("eip155:84532", new ExactEvmScheme(signer));
+  const fetchPaid = wrapFetchWithPayment(fetch, client);
+
+  const res = await fetchPaid(`${API}/v1/message`, {
+    method: "POST",
+    headers: { "Content-Type": "application/json" },
+    body: JSON.stringify({ message: text }),
+  });
+  const data = await res.json();
+  if (!res.ok) { console.error(JSON.stringify({ status: "error", http: res.status, ...data })); process.exit(1); }
+  console.log(JSON.stringify(data, null, 2));
+}
+
+export async function run(sub, args) {
+  if (!sub || sub === '--help' || sub === '-h') { console.log(HELP); process.exit(0); }
+  if (sub !== "send") {
+    console.error(`Unknown subcommand: ${sub}\n`);
+    console.log(HELP);
+    process.exit(1);
+  }
+  await send(args.join(" "));
+}

package/lib/sites.mjs

@@ -1,13 +1,18 @@
 import { readFileSync, existsSync } from "fs";
 import { readWallet, API, WALLET_FILE } from "./config.mjs";
 
-const HELP = `run402 sites — Deploy static sites
+const HELP = `run402 sites — Deploy and manage static sites
 
 Usage:
   run402 sites deploy --name <name> --manifest <file> [--project <id>] [--target <target>]
+  run402 sites status <deployment_id>
   cat manifest.json | run402 sites deploy --name <name>
 
-Options:
+Subcommands:
+  deploy  Deploy a static site
+  status  Check the status of a deployment
+
+Options (deploy):
   --name <name>         Site name (e.g. 'portfolio', 'family-todo')
   --manifest <file>     Path to manifest JSON file (or read from stdin)
   --project <id>        Optional project ID to link this deployment to
@@ -24,6 +29,7 @@ Manifest format (JSON):
 
 Examples:
   run402 sites deploy --name my-site --manifest site.json
+  run402 sites status dep_abc123
   cat site.json | run402 sites deploy --name my-site
 
 Notes:
@@ -81,12 +87,26 @@ async function deploy(args) {
   console.log(JSON.stringify(data, null, 2));
 }
 
+async function status(args) {
+  let deploymentId = null;
+  for (let i = 0; i < args.length; i++) {
+    if (!args[i].startsWith("-")) { deploymentId = args[i]; break; }
+  }
+  if (!deploymentId) { console.error(JSON.stringify({ status: "error", message: "Missing deployment ID" })); process.exit(1); }
+  const res = await fetch(`${API}/v1/deployments/${deploymentId}`);
+  const data = await res.json();
+  if (!res.ok) { console.error(JSON.stringify({ status: "error", http: res.status, ...data })); process.exit(1); }
+  console.log(JSON.stringify(data, null, 2));
+}
+
 export async function run(sub, args) {
   if (!sub || sub === '--help' || sub === '-h') { console.log(HELP); process.exit(0); }
-  if (sub !== "deploy") {
-    console.error(`Unknown subcommand: ${sub}\n`);
-    console.log(HELP);
-    process.exit(1);
+  switch (sub) {
+    case "deploy":  await deploy(args); break;
+    case "status":  await status(args); break;
+    default:
+      console.error(`Unknown subcommand: ${sub}\n`);
+      console.log(HELP);
+      process.exit(1);
   }
-  await deploy(args);
 }

package/lib/wallet.mjs

@@ -1,4 +1,4 @@
-import { readWallet, saveWallet, API } from "./config.mjs";
+import { readWallet, saveWallet, WALLET_FILE, API } from "./config.mjs";
 
 const HELP = `run402 wallet — Manage your x402 wallet
 
@@ -9,26 +9,34 @@ Subcommands:
   status    Show wallet address, network, and funding status
   create    Generate a new wallet and save it locally
   fund      Request test USDC from the Run402 faucet (Base Sepolia)
-  balance   Check billing balance for this wallet
+  balance   Show on-chain USDC (mainnet + testnet) and Run402 billing balance
   export    Print the wallet address (useful for scripting)
+  checkout  Create a billing checkout session (--amount <usd_micros>)
+  history   View billing transaction history (--limit <n>)
 
 Notes:
   - Wallet is stored locally at ~/.run402/wallet.json
-  - Network: Base Sepolia (testnet) — uses USDC for x402 payments
-  - You need to create and fund a wallet before deploying or generating images
+  - The wallet works on any EVM chain (currently Run402 uses Base Mainnet and Sepolia for testnet)
+  - You need to create and fund a wallet before any x402 transaction with Run402
 
 Examples:
   run402 wallet create
   run402 wallet status
   run402 wallet fund
   run402 wallet export
+  run402 wallet checkout --amount 5000000
+  run402 wallet history --limit 10
 `;
 
+const USDC_ABI = [{ name: "balanceOf", type: "function", stateMutability: "view", inputs: [{ name: "account", type: "address" }], outputs: [{ name: "", type: "uint256" }] }];
+const USDC_MAINNET = "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913";
+const USDC_SEPOLIA = "0x036CbD53842c5426634e7929541eC2318f3dCF7e";
+
 async function loadDeps() {
   const { generatePrivateKey, privateKeyToAccount } = await import("viem/accounts");
   const { createPublicClient, http } = await import("viem");
-  const { baseSepolia } = await import("viem/chains");
-  return { generatePrivateKey, privateKeyToAccount, createPublicClient, http, baseSepolia };
+  const { base, baseSepolia } = await import("viem/chains");
+  return { generatePrivateKey, privateKeyToAccount, createPublicClient, http, base, baseSepolia };
 }
 
 async function status() {
@@ -37,7 +45,7 @@ async function status() {
     console.log(JSON.stringify({ status: "no_wallet", message: "No wallet found. Run: run402 wallet create" }));
     return;
   }
-  console.log(JSON.stringify({ status: "ok", address: w.address, network: w.network || "base-sepolia", created: w.created, funded: w.funded || false }));
+  console.log(JSON.stringify({ status: "ok", address: w.address, created: w.created, funded: w.funded || false, path: WALLET_FILE }));
 }
 
 async function create() {
@@ -48,31 +56,74 @@ async function create() {
   const { generatePrivateKey, privateKeyToAccount } = await loadDeps();
   const privateKey = generatePrivateKey();
   const account = privateKeyToAccount(privateKey);
-  saveWallet({ address: account.address, privateKey, network: "base-sepolia", created: new Date().toISOString(), funded: false });
-  console.log(JSON.stringify({ status: "ok", address: account.address, message: "Wallet created and saved." }));
+  saveWallet({ address: account.address, privateKey, created: new Date().toISOString(), funded: false });
+  console.log(JSON.stringify({ status: "ok", address: account.address, message: `Wallet created. Stored locally at ${WALLET_FILE}` }));
 }
 
 async function fund() {
   const w = readWallet();
   if (!w) { console.log(JSON.stringify({ status: "error", message: "No wallet. Run: run402 wallet create" })); process.exit(1); }
+
+  const { createPublicClient, http, baseSepolia } = await loadDeps();
+  const client = createPublicClient({ chain: baseSepolia, transport: http() });
+  const before = await readUsdcBalance(client, USDC_SEPOLIA, w.address).catch(() => 0);
+
   const res = await fetch(`${API}/v1/faucet`, { method: "POST", headers: { "Content-Type": "application/json" }, body: JSON.stringify({ address: w.address }) });
   const data = await res.json();
-  if (res.ok) {
-    saveWallet({ ...w, funded: true, lastFaucet: new Date().toISOString() });
-    console.log(JSON.stringify({ status: "ok", ...data }));
-  } else {
+  if (!res.ok) {
     console.log(JSON.stringify({ status: "error", ...data }));
     process.exit(1);
   }
+
+  const MAX_WAIT = 30;
+  for (let i = 0; i < MAX_WAIT; i++) {
+    await new Promise(r => setTimeout(r, 1000));
+    const now = await readUsdcBalance(client, USDC_SEPOLIA, w.address).catch(() => before);
+    if (now > before) {
+      saveWallet({ ...w, funded: true, lastFaucet: new Date().toISOString() });
+      console.log(JSON.stringify({
+        address: w.address,
+        onchain: {
+          "base-sepolia_usd_micros": now,
+        },
+      }, null, 2));
+      return;
+    }
+  }
+
+  saveWallet({ ...w, funded: true, lastFaucet: new Date().toISOString() });
+  console.log(JSON.stringify({ status: "ok", message: "Faucet request sent but balance not yet confirmed", ...data }));
+}
+
+async function readUsdcBalance(client, usdc, address) {
+  const raw = await client.readContract({ address: usdc, abi: USDC_ABI, functionName: "balanceOf", args: [address] });
+  return Number(raw);
 }
 
 async function balance() {
   const w = readWallet();
   if (!w) { console.log(JSON.stringify({ status: "error", message: "No wallet. Run: run402 wallet create" })); process.exit(1); }
-  const res = await fetch(`${API}/v1/billing/accounts/${w.address.toLowerCase()}`);
-  const data = await res.json();
-  if (!res.ok) { console.error(JSON.stringify({ status: "error", http: res.status, ...data })); process.exit(1); }
-  console.log(JSON.stringify(data, null, 2));
+
+  const { createPublicClient, http, base, baseSepolia } = await loadDeps();
+  const mainnetClient = createPublicClient({ chain: base, transport: http() });
+  const sepoliaClient = createPublicClient({ chain: baseSepolia, transport: http() });
+
+  const [mainnetUsdc, sepoliaUsdc, billingRes] = await Promise.all([
+    readUsdcBalance(mainnetClient, USDC_MAINNET, w.address).catch(() => null),
+    readUsdcBalance(sepoliaClient, USDC_SEPOLIA, w.address).catch(() => null),
+    fetch(`${API}/v1/billing/accounts/${w.address.toLowerCase()}`),
+  ]);
+
+  const billing = billingRes.ok ? await billingRes.json() : null;
+
+  console.log(JSON.stringify({
+    address: w.address,
+    onchain: {
+      "base-mainnet_usd_micros": mainnetUsdc,
+      "base-sepolia_usd_micros": sepoliaUsdc,
+    },
+    run402: billing ? { balance_usd_micros: billing.available_usd_micros } : "no billing account",
+  }, null, 2));
 }
 
 async function exportAddr() {
@@ -81,6 +132,37 @@ async function exportAddr() {
   console.log(w.address);
 }
 
+async function checkout(args) {
+  const w = readWallet();
+  if (!w) { console.log(JSON.stringify({ status: "error", message: "No wallet. Run: run402 wallet create" })); process.exit(1); }
+  let amount = null;
+  for (let i = 0; i < args.length; i++) {
+    if (args[i] === "--amount" && args[i + 1]) amount = parseInt(args[++i], 10);
+  }
+  if (!amount) { console.error(JSON.stringify({ status: "error", message: "Missing --amount <usd_micros> (e.g. --amount 5000000 for $5)" })); process.exit(1); }
+  const res = await fetch(`${API}/v1/billing/checkouts`, {
+    method: "POST",
+    headers: { "Content-Type": "application/json" },
+    body: JSON.stringify({ wallet: w.address.toLowerCase(), amount_usd_micros: amount }),
+  });
+  const data = await res.json();
+  if (!res.ok) { console.error(JSON.stringify({ status: "error", http: res.status, ...data })); process.exit(1); }
+  console.log(JSON.stringify(data, null, 2));
+}
+
+async function history(args) {
+  const w = readWallet();
+  if (!w) { console.log(JSON.stringify({ status: "error", message: "No wallet. Run: run402 wallet create" })); process.exit(1); }
+  let limit = 20;
+  for (let i = 0; i < args.length; i++) {
+    if (args[i] === "--limit" && args[i + 1]) limit = parseInt(args[++i], 10);
+  }
+  const res = await fetch(`${API}/v1/billing/accounts/${w.address.toLowerCase()}/history?limit=${limit}`);
+  const data = await res.json();
+  if (!res.ok) { console.error(JSON.stringify({ status: "error", http: res.status, ...data })); process.exit(1); }
+  console.log(JSON.stringify(data, null, 2));
+}
+
 export async function run(sub, args) {
   if (!sub || sub === '--help' || sub === '-h') {
     console.log(HELP);
@@ -91,7 +173,9 @@ export async function run(sub, args) {
     case "create":  await create(); break;
     case "fund":    await fund(); break;
     case "balance": await balance(); break;
-    case "export":  await exportAddr(); break;
+    case "export":   await exportAddr(); break;
+    case "checkout": await checkout(args); break;
+    case "history":  await history(args); break;
     default:
       console.error(`Unknown subcommand: ${sub}\n`);
       console.log(HELP);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "run402",
-  "version": "1.3.0",
+  "version": "1.4.0",
   "description": "CLI for Run402 — provision Postgres databases, deploy static sites, generate images, and manage wallets via x402 micropayments.",
   "type": "module",
   "bin": {