run402 1.70.0 → 2.0.0

package/README.md

@@ -100,10 +100,10 @@ CI deploys can ship `site`, `functions`, `database`, and absent/current `base` c
 ### Storage (paste-and-go CDN assets)
 
 ```bash
-run402 blob put ./logo.png        # → AssetRef with cdn_url, sri, etag
-run402 blob put ./asset --key assets/logo --content-type image/svg+xml
-run402 blob get <key> --output /tmp/logo.png
-run402 blob diagnose <url>        # exit 0 if fresh, 1 if stale
+run402 assets put ./logo.png        # → AssetRef with cdn_url, sri, etag
+run402 assets put ./asset --key assets/logo --content-type image/svg+xml
+run402 assets get <key> --output /tmp/logo.png
+run402 assets diagnose <url>        # exit 0 if fresh, 1 if stale
 ```
 
 The returned `cdn_url` is content-addressed (`pr-<public_id>.run402.com/_blob/<key>-<8hex>.<ext>`) — paste it straight into HTML. SRI is bundled in `sri`.
@@ -199,7 +199,7 @@ Every command supports `--help` / `-h`:
 run402 --help
 run402 projects --help
 run402 sites --help
-run402 blob --help
+run402 assets --help
 run402 functions --help
 ```
 

package/cli.mjs

@@ -29,9 +29,9 @@ Commands:
   ci          Link GitHub Actions OIDC deploy bindings
   functions   Manage serverless functions (deploy, invoke, logs, list, delete)
   secrets     Manage project secrets (set, list, delete)
-  blob        Direct-to-S3 blob storage (put, get, ls, rm, sign, diagnose) — up to 5 TiB
+  assets      Direct-to-S3 asset storage (put, get, ls, rm, sign, diagnose) — up to 5 TiB
   sites       Deploy static sites
-  cdn         CloudFront CDN diagnostics (wait-fresh) for public blob URLs
+  cdn         CloudFront CDN diagnostics (wait-fresh) for public asset URLs
   subdomains  Manage custom subdomains (claim, list, delete)
   domains     Manage custom domains (add, list, status, delete)
   apps        Browse and manage the app marketplace
@@ -139,8 +139,8 @@ switch (cmd) {
     await run(sub, rest);
     break;
   }
-  case "blob": {
-    const { run } = await import("./lib/blob.mjs");
+  case "assets": {
+    const { run } = await import("./lib/assets.mjs");
     await run(sub, rest);
     break;
   }

package/lib/{blob.mjs → assets.mjs}

@@ -1,12 +1,12 @@
 /**
- * run402 blob — direct-to-S3 storage CLI.
+ * run402 assets — direct-to-S3 storage CLI.
  *
  * Usage:
- *   run402 blob put <file> [files...] [--project <id>] [--key <dest>] [--content-type <mime>] [--private] [--immutable] [--concurrency N] [--no-resume]
- *   run402 blob get <key> --output <file> [--project <id>]
- *   run402 blob ls [--project <id>] [--prefix <p>] [--limit <n>]
- *   run402 blob rm <key> [--project <id>]
- *   run402 blob sign <key> [--project <id>] [--ttl <seconds>]
+ *   run402 assets put <file> [files...] [--project <id>] [--key <dest>] [--content-type <mime>] [--private] [--immutable] [--concurrency N] [--no-resume]
+ *   run402 assets get <key> --output <file> [--project <id>]
+ *   run402 assets ls [--project <id>] [--prefix <p>] [--limit <n>]
+ *   run402 assets rm <key> [--project <id>]
+ *   run402 assets sign <key> [--project <id>] [--ttl <seconds>]
  *
  * For any file ≤ 5 GiB a single presigned PUT is used. Larger files use S3
  * multipart uploads with 16 MiB parts (640 parts at 10 GiB; up to 10 000
@@ -43,12 +43,12 @@ import { assertKnownFlags, hasHelp, normalizeArgv, parseIntegerFlag } from "./ar
 const HELP = `run402 blob — Direct-to-S3 blob storage
 
 Usage:
-  run402 blob put <file> [files...] [options]
-  run402 blob get <key> --output <file> [options]
-  run402 blob ls [options]
-  run402 blob rm <key> [options]
-  run402 blob sign <key> [options]
-  run402 blob diagnose <url> [options]
+  run402 assets put <file> [files...] [options]
+  run402 assets get <key> --output <file> [options]
+  run402 assets ls [options]
+  run402 assets rm <key> [options]
+  run402 assets sign <key> [options]
+  run402 assets diagnose <url> [options]
 
 Options:
   --project <id>      Project ID (defaults to active project from 'run402 projects use')
@@ -65,20 +65,20 @@ Options:
   --ttl <seconds>     Signed-URL TTL (sign only; default 3600, min 60, max 604800)
 
 Examples:
-  run402 blob put ./artifact.tgz --project prj_abc123
-  run402 blob put ./dist/**/*.png --project prj_abc123 --key assets/
-  run402 blob put huge.bin --project prj_abc123 --immutable
-  run402 blob get images/logo.png --output /tmp/logo.png --project prj_abc123
-  run402 blob ls --project prj_abc123 --prefix images/
-  run402 blob rm images/logo.png --project prj_abc123
-  run402 blob sign images/logo.png --project prj_abc123 --ttl 600
+  run402 assets put ./artifact.tgz --project prj_abc123
+  run402 assets put ./dist/**/*.png --project prj_abc123 --key assets/
+  run402 assets put huge.bin --project prj_abc123 --immutable
+  run402 assets get images/logo.png --output /tmp/logo.png --project prj_abc123
+  run402 assets ls --project prj_abc123 --prefix images/
+  run402 assets rm images/logo.png --project prj_abc123
+  run402 assets sign images/logo.png --project prj_abc123 --ttl 600
 `;
 
 const SUB_HELP = {
-  put: `run402 blob put — Upload one or more files to blob storage
+  put: `run402 assets put — Upload one or more files to blob storage
 
 Usage:
-  run402 blob put <file> [files...] [options]
+  run402 assets put <file> [files...] [options]
 
 Arguments:
   <file>              Path to a file (or glob); pass multiple files to batch-upload
@@ -94,15 +94,15 @@ Options:
   --json              Emit NDJSON progress events on stdout (for agent consumption)
 
 Examples:
-  run402 blob put ./artifact.tgz --project prj_abc123
-  run402 blob put ./dist/**/*.png --project prj_abc123 --key assets/
-  run402 blob put ./asset --project prj_abc123 --key assets/logo --content-type image/svg+xml
-  run402 blob put huge.bin --project prj_abc123 --immutable --concurrency 8
+  run402 assets put ./artifact.tgz --project prj_abc123
+  run402 assets put ./dist/**/*.png --project prj_abc123 --key assets/
+  run402 assets put ./asset --project prj_abc123 --key assets/logo --content-type image/svg+xml
+  run402 assets put huge.bin --project prj_abc123 --immutable --concurrency 8
 `,
-  get: `run402 blob get — Download a blob by key
+  get: `run402 assets get — Download a blob by key
 
 Usage:
-  run402 blob get <key> --output <file> [options]
+  run402 assets get <key> --output <file> [options]
 
 Arguments:
   <key>               Blob key to download
@@ -112,12 +112,12 @@ Options:
   --project <id>      Project ID (defaults to active project)
 
 Examples:
-  run402 blob get images/logo.png --output /tmp/logo.png --project prj_abc123
+  run402 assets get images/logo.png --output /tmp/logo.png --project prj_abc123
 `,
-  ls: `run402 blob ls — List blob keys in a project
+  ls: `run402 assets ls — List blob keys in a project
 
 Usage:
-  run402 blob ls [options]
+  run402 assets ls [options]
 
 Options:
   --project <id>      Project ID (defaults to active project)
@@ -125,13 +125,13 @@ Options:
   --limit <n>         Max results (default 100, max 1000)
 
 Examples:
-  run402 blob ls --project prj_abc123
-  run402 blob ls --project prj_abc123 --prefix images/ --limit 500
+  run402 assets ls --project prj_abc123
+  run402 assets ls --project prj_abc123 --prefix images/ --limit 500
 `,
-  rm: `run402 blob rm — Delete a blob
+  rm: `run402 assets rm — Delete a blob
 
 Usage:
-  run402 blob rm <key> [options]
+  run402 assets rm <key> [options]
 
 Arguments:
   <key>               Blob key to delete
@@ -140,12 +140,12 @@ Options:
   --project <id>      Project ID (defaults to active project)
 
 Examples:
-  run402 blob rm images/logo.png --project prj_abc123
+  run402 assets rm images/logo.png --project prj_abc123
 `,
-  sign: `run402 blob sign — Create a presigned download URL for a blob
+  sign: `run402 assets sign — Create a presigned download URL for a blob
 
 Usage:
-  run402 blob sign <key> [options]
+  run402 assets sign <key> [options]
 
 Arguments:
   <key>               Blob key to sign
@@ -155,12 +155,12 @@ Options:
   --ttl <seconds>     Signed-URL TTL (default 3600, min 60, max 604800)
 
 Examples:
-  run402 blob sign reports/2025-q4.pdf --project prj_abc123 --ttl 600
+  run402 assets sign reports/2025-q4.pdf --project prj_abc123 --ttl 600
 `,
-  diagnose: `run402 blob diagnose — Inspect the live CDN state for a public blob URL
+  diagnose: `run402 assets diagnose — Inspect the live CDN state for a public blob URL
 
 Usage:
-  run402 blob diagnose <url> [options]
+  run402 assets diagnose <url> [options]
 
 Arguments:
   <url>               Full blob URL (e.g. https://app.run402.com/_blob/avatar.png)
@@ -178,10 +178,10 @@ Exit codes:
   1   observed SHA does not match (or probe returned no SHA)
 
 Agent loop pattern:
-  until run402 blob diagnose <url>; do sleep 1; done
+  until run402 assets diagnose <url>; do sleep 1; done
 
 Examples:
-  run402 blob diagnose https://app.run402.com/_blob/avatar.png
+  run402 assets diagnose https://app.run402.com/_blob/avatar.png
 `,
 };
 
@@ -352,7 +352,7 @@ async function putOne(projectId, filePath, opts) {
   let initRes;
   if (state) {
     // Re-poll the session; if it's still active, resume. Otherwise start fresh.
-    const poll = await getSdk().blobs.getUploadSession(projectId, state.upload_id);
+    const poll = await getSdk().assets.getUploadSession(projectId, state.upload_id);
     if (poll.status === "active") {
       log(opts, { event: "resume", upload_id: state.upload_id, key: destKey });
       initRes = {
@@ -369,7 +369,7 @@ async function putOne(projectId, filePath, opts) {
   }
 
   if (!state) {
-    initRes = await getSdk().blobs.initUploadSession(projectId, {
+    initRes = await getSdk().assets.initUploadSession(projectId, {
       key: destKey,
       size_bytes: size,
       content_type: opts.contentType ?? guessContentType(destKey),
@@ -417,7 +417,7 @@ async function putOne(projectId, filePath, opts) {
   const body = initRes.mode === "multipart"
     ? { parts: etags.map((e, i) => ({ part_number: i + 1, etag: e.etag, sha256: e.sha256 })) }
     : {};
-  const result = await getSdk().blobs.completeUploadSession(projectId, state.upload_id, body, {
+  const result = await getSdk().assets.completeUploadSession(projectId, state.upload_id, body, {
     contentType: opts.contentType ?? guessContentType(destKey),
   });
 
@@ -504,7 +504,7 @@ async function get(projectId, argv) {
 
   let res;
   try {
-    res = await getSdk().blobs.get(resolvedId, key);
+    res = await getSdk().assets.get(resolvedId, key);
   } catch (err) {
     reportSdkError(err);
     return;
@@ -526,7 +526,7 @@ async function ls(projectId, argv) {
   const resolvedId = resolveProjectId(opts.project);
 
   try {
-    const data = await getSdk().blobs.ls(resolvedId, {
+    const data = await getSdk().assets.ls(resolvedId, {
       prefix: opts.prefix ?? undefined,
       limit: opts.limit ?? undefined,
     });
@@ -549,7 +549,7 @@ async function rm(projectId, argv) {
   const key = opts.positional[0];
 
   try {
-    await getSdk().blobs.rm(resolvedId, key);
+    await getSdk().assets.rm(resolvedId, key);
     console.log(JSON.stringify({ status: "ok", key }));
   } catch (err) {
     reportSdkError(err);
@@ -569,7 +569,7 @@ async function diagnose(projectId, argv) {
   const url = opts.positional[0];
 
   try {
-    const env = await getSdk().blobs.diagnoseUrl(resolvedId, url);
+    const env = await getSdk().assets.diagnoseUrl(resolvedId, url);
     // Always print the JSON envelope for agent consumption (parseable).
     console.log(JSON.stringify(env, null, 2));
     // Vantage caveat to stderr so a TTY operator sees it; agent shell loops
@@ -578,7 +578,7 @@ async function diagnose(projectId, argv) {
       `\n# probed once from ${env.vantage}; not a global view\n`,
     );
     // Exit code: 0 if observed === expected, 1 otherwise. Lets agents
-    // shell-script `until run402 blob diagnose <url>; do sleep 1; done`.
+    // shell-script `until run402 assets diagnose <url>; do sleep 1; done`.
     if (env.observedSha256 && env.observedSha256 === env.expectedSha256) {
       process.exit(0);
     }
@@ -597,7 +597,7 @@ async function sign(projectId, argv) {
   const key = opts.positional[0];
 
   try {
-    const data = await getSdk().blobs.sign(resolvedId, key, {
+    const data = await getSdk().assets.sign(resolvedId, key, {
       ttl_seconds: opts.ttl ?? undefined,
     });
     console.log(JSON.stringify(data, null, 2));

package/lib/billing.mjs

@@ -117,6 +117,16 @@ Arguments:
   <account_id>        Billing account ID (e.g. acct_abc123)
   <wallet>            Wallet address (0x...) to link
 
+Notes:
+  - Tier and quotas are per-billing-account. Linking a wallet merges its
+    spend into the account-wide pool that already includes every project
+    on this billing account.
+  - The response includes a 'pool_implications' block on v1.46+ gateways:
+    tier, projects_in_pool_count, account_api_calls_current,
+    account_storage_bytes_current, tier_limits, over_limit. Inspect
+    'over_limit' before linking a wallet whose existing usage might push
+    the merged pool past the tier cap.
+
 Examples:
   run402 billing link-wallet acct_abc123 0x1234abcd...
 `,
@@ -179,8 +189,14 @@ async function linkWallet(args) {
     });
   }
   try {
-    await getSdk().billing.linkWallet(accountId, wallet);
-    console.log(JSON.stringify({ status: "ok", billing_account_id: accountId, wallet }));
+    const data = await getSdk().billing.linkWallet(accountId, wallet);
+    const output = {
+      status: data?.status ?? "ok",
+      billing_account_id: data?.billing_account_id ?? accountId,
+      wallet: data?.wallet ?? wallet.toLowerCase(),
+      ...(data?.pool_implications ? { pool_implications: data.pool_implications } : {}),
+    };
+    console.log(JSON.stringify(output, null, 2));
   } catch (err) {
     reportSdkError(err);
   }

package/lib/deploy-v2.mjs

@@ -410,7 +410,7 @@ async function applyCmd(args) {
 
   // GH-232: Reject empty specs client-side. Without this guard,
   // `run402 deploy apply --spec '{}'` (and `--manifest <empty>`) would silently
-  // send an empty ReleaseSpec to /deploy/v2/plans with no signal that nothing
+  // send an empty ReleaseSpec to /apply/v1/plans with no signal that nothing
   // was deployed.
   //
   // `deploy apply` is v2-only — only meaningful keys are the v2 ReleaseSpec
@@ -488,11 +488,11 @@ async function applyCmd(args) {
     };
   } else {
     // Preserve the aggressive early exit when no allowance is configured.
-    allowanceAuthHeaders("/deploy/v2/plans");
+    allowanceAuthHeaders("/apply/v1/plans");
   }
 
   try {
-    const result = await getSdk(sdkOpts).deploy.apply(releaseSpec, {
+    const result = await getSdk(sdkOpts)._applyEngine.apply(releaseSpec, {
       onEvent: makeStderrEventWriter(opts.quiet),
       idempotencyKey,
       allowWarnings: opts.allowWarnings,
@@ -815,10 +815,10 @@ async function resumeCmd(args) {
   });
   const opts = { operationId, quiet: Boolean(parsed.flags["--quiet"]) };
 
-  allowanceAuthHeaders("/deploy/v2/operations");
+  allowanceAuthHeaders("/apply/v1/operations");
 
   try {
-    const result = await getSdk().deploy.resume(opts.operationId, {
+    const result = await getSdk()._applyEngine.resume(opts.operationId, {
       onEvent: makeStderrEventWriter(opts.quiet),
     });
     console.log(JSON.stringify({ status: "ok", ...result }, null, 2));
@@ -843,12 +843,12 @@ async function listCmd(args) {
   };
 
   const project = resolveProjectId(opts.project);
-  allowanceAuthHeaders("/deploy/v2/operations");
+  allowanceAuthHeaders("/apply/v1/operations");
 
   try {
     const sdkOpts = { project };
     if (opts.limit !== null) sdkOpts.limit = opts.limit;
-    const result = await getSdk().deploy.list(sdkOpts);
+    const result = await getSdk()._applyEngine.list(sdkOpts);
     console.log(JSON.stringify({ status: "ok", ...result }, null, 2));
   } catch (err) {
     reportSdkError(err);
@@ -870,10 +870,10 @@ async function eventsCmd(args) {
   const opts = { operationId, project: parsed.flags["--project"] ?? null };
 
   const project = resolveProjectId(opts.project);
-  allowanceAuthHeaders("/deploy/v2/operations");
+  allowanceAuthHeaders("/apply/v1/operations");
 
   try {
-    const result = await getSdk().deploy.events(opts.operationId, { project });
+    const result = await getSdk()._applyEngine.events(opts.operationId, { project });
     console.log(JSON.stringify({ status: "ok", ...result }, null, 2));
   } catch (err) {
     reportSdkError(err);
@@ -921,7 +921,7 @@ async function releaseGetCmd(args) {
   try {
     const sdkOpts = { project, releaseId: opts.releaseId };
     if (opts.siteLimit !== null) sdkOpts.siteLimit = opts.siteLimit;
-    const release = await getSdk().deploy.getRelease(sdkOpts);
+    const release = await getSdk()._applyEngine.getRelease(sdkOpts);
     console.log(JSON.stringify({ status: "ok", release }, null, 2));
   } catch (err) {
     reportSdkError(err);
@@ -950,7 +950,7 @@ async function releaseActiveCmd(args) {
   try {
     const sdkOpts = { project };
     if (opts.siteLimit !== null) sdkOpts.siteLimit = opts.siteLimit;
-    const release = await getSdk().deploy.getActiveRelease(sdkOpts);
+    const release = await getSdk()._applyEngine.getActiveRelease(sdkOpts);
     console.log(JSON.stringify({ status: "ok", release }, null, 2));
   } catch (err) {
     reportSdkError(err);
@@ -993,7 +993,7 @@ async function releaseDiffCmd(args) {
   try {
     const sdkOpts = { project, from: opts.from, to: opts.to };
     if (opts.limit !== null) sdkOpts.limit = opts.limit;
-    const diff = await getSdk().deploy.diff(sdkOpts);
+    const diff = await getSdk()._applyEngine.diff(sdkOpts);
     console.log(JSON.stringify({ status: "ok", diff }, null, 2));
   } catch (err) {
     reportSdkError(err);
@@ -1092,7 +1092,7 @@ async function printResolveEnvelope(input) {
   }
 
   try {
-    const resolution = await getSdk().deploy.resolve(input);
+    const resolution = await getSdk()._applyEngine.resolve(input);
     const summary = buildDeployResolveSummary(resolution, request);
     console.log(JSON.stringify({
       status: "ok",

package/lib/sites.mjs

@@ -221,7 +221,7 @@ async function deploy(args) {
   if (opts.manifest) resolveFilePathsInManifest(manifest, dirname(resolve(opts.manifest)));
 
   // Preserve the aggressive early exit when no allowance is configured.
-  allowanceAuthHeaders("/deploy/v2/plans");
+  allowanceAuthHeaders("/apply/v1/plans");
 
   const stage = stageFilesToTempDir(manifest.files || []);
   try {
@@ -288,7 +288,7 @@ async function deployDir(args) {
   if (opts.target !== undefined) failUnsupportedTarget();
 
   // Preserve the aggressive early exit when no allowance is configured.
-  allowanceAuthHeaders("/deploy/v2/plans");
+  allowanceAuthHeaders("/apply/v1/plans");
 
   let fileSet;
   try {
@@ -323,7 +323,7 @@ async function deployDir(args) {
 
   if (opts.dryRun) {
     try {
-      const { plan } = await getSdk().deploy.plan({
+      const { plan } = await getSdk()._applyEngine.plan({
         project: projectId,
         site: { replace: fileSet },
       }, { dryRun: true });

package/lib/tier.mjs

@@ -8,11 +8,14 @@ Usage:
   run402 tier <subcommand> [args...]
 
 Subcommands:
-  status                Show current tier, expiry, usage, and function caps when returned
+  status                Show current tier, expiry, pool usage, and function caps when returned
   set <tier>            Subscribe, renew, or upgrade (pays via x402)
 
 Tiers: prototype ($0.10/7d, free with testnet faucet), hobby ($5/30d), team ($20/30d)
 
+Tier is per billing account. A single subscription covers every project on
+the account; api_calls and storage_bytes are pooled across all of them.
+
 The server auto-detects the action based on your allowance state:
   - No tier or expired  → subscribe
   - Same tier, active   → renew (extends from expiry)
@@ -32,7 +35,10 @@ Usage:
   run402 tier status
 
 Notes:
-  - Returns the current tier name, status, expiry, and usage
+  - Tier and quotas are per billing account. The 'pool_usage' block sums
+    api_calls and storage_bytes across every project on this account
+    (across every wallet linked to it), not just the requesting wallet.
+  - Returns the current tier name, status, expiry, and pool usage
   - Newer gateways include function authoring caps such as max timeout,
     max memory, max scheduled functions, minimum cron interval, and current
     scheduled-function usage
@@ -55,6 +61,9 @@ Tiers:
   team                $20/30d
 
 Notes:
+  Tier is per billing account, not per project. A successful subscribe,
+  renew, or upgrade applies immediately to every project on the account.
+
   Server auto-detects action based on current allowance state:
     - No tier or expired -> subscribe
     - Same tier, active  -> renew (extends from expiry)
@@ -62,6 +71,9 @@ Notes:
     - Lower tier, active -> rejected (wait for expiry)
   Pays via x402 micropayments.
 
+  After the call, the CLI refetches /tiers/v1/status and includes the
+  refreshed account-pooled usage as 'status_after' in the JSON output.
+
 Examples:
   run402 tier set prototype
   run402 tier set hobby
@@ -107,8 +119,18 @@ async function set(args = []) {
     });
   }
   try {
-    const data = await getSdk().tier.set(tierName);
-    console.log(JSON.stringify(data, null, 2));
+    const sdk = getSdk();
+    const data = await sdk.tier.set(tierName);
+    let statusAfter = null;
+    try {
+      statusAfter = await sdk.tier.status();
+    } catch {
+      // Refetch failure is non-fatal; the set call already succeeded and
+      // the caller has the canonical lease/payment receipt in `data`.
+      statusAfter = null;
+    }
+    const output = statusAfter ? { ...data, status_after: statusAfter } : data;
+    console.log(JSON.stringify(output, null, 2));
   } catch (err) {
     reportSdkError(err);
   }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "run402",
-  "version": "1.70.0",
+  "version": "2.0.0",
   "description": "CLI for Run402 — provision Postgres databases, deploy static sites, generate images, and manage wallets via x402 and MPP micropayments.",
   "type": "module",
   "bin": {

package/sdk/dist/errors.d.ts

@@ -16,6 +16,14 @@
  * and realms — value comparison, no class-identity dependency.
  */
 export type Run402ErrorKind = "payment_required" | "project_not_found" | "unauthorized" | "api_error" | "network_error" | "local_error" | "deploy_error";
+/**
+ * Quota-denial scope discriminator (v1.46+). Indicates whether a quota-related
+ * denial was enforced against the pooled billing-account total (`"account"`)
+ * or against an orphan project whose billing account row has been purged but
+ * cascade has not yet run (`"project"`). Lifted from `details.scope` on the
+ * gateway envelope; absent for errors unrelated to quota.
+ */
+export type Run402QuotaScope = "account" | "project";
 export declare abstract class Run402Error extends Error {
     /**
      * Structural brand. Always `true` on any {@link Run402Error} subclass
@@ -52,6 +60,14 @@ export declare abstract class Run402Error extends Error {
     readonly details?: unknown;
     /** Advisory next actions from the gateway. Rendering them must not execute them. */
     readonly nextActions?: unknown[];
+    /**
+     * Quota-denial scope (v1.46+). `"account"` for pooled billing-account
+     * denials; `"project"` for the orphan fallback (project whose billing
+     * account row was purged but cascade has not yet run). Lifted from
+     * `details.scope` when the gateway returned it. Undefined for errors
+     * that are not quota-related.
+     */
+    readonly quotaScope?: Run402QuotaScope;
     constructor(message: string, status: number | null, body: unknown, context: string);
     /**
      * Canonical structured envelope for `JSON.stringify`. Without this, an
@@ -175,6 +191,13 @@ export declare function isNetworkError(e: unknown): e is NetworkError;
 export declare function isLocalError(e: unknown): e is LocalError;
 /** True if `e` is a {@link Run402DeployError}. */
 export declare function isDeployError(e: unknown): e is Run402DeployError;
+/**
+ * Extract the v1.46+ quota-denial scope from an error. Returns `"account"`
+ * for pooled denials, `"project"` for the orphan fallback, or `undefined`
+ * when the error is not quota-related (or originated from a pre-v1.46
+ * gateway that did not set `details.scope`). Safe to call with `unknown`.
+ */
+export declare function getQuotaScope(e: unknown): Run402QuotaScope | undefined;
 /**
  * Canonical "should I retry this?" policy. Returns true when `e` is a
  * {@link Run402Error} AND any of:

package/sdk/dist/errors.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH;;;;GAIG;AACH,MAAM,MAAM,eAAe,GACvB,kBAAkB,GAClB,mBAAmB,GACnB,cAAc,GACd,WAAW,GACX,eAAe,GACf,aAAa,GACb,cAAc,CAAC;AAEnB,8BAAsB,WAAY,SAAQ,KAAK;IAC7C;;;;;OAKG;IACH,QAAQ,CAAC,aAAa,EAAG,IAAI,CAAU;IACvC;;;;OAIG;IACH,QAAQ,CAAC,QAAQ,CAAC,IAAI,EAAE,eAAe,CAAC;IACxC,iFAAiF;IACjF,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,+DAA+D;IAC/D,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IACvB,2FAA2F;IAC3F,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,mFAAmF;IACnF,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,+DAA+D;IAC/D,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,kDAAkD;IAClD,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,CAAC;IAC7B,yFAAyF;IACzF,QAAQ,CAAC,WAAW,CAAC,EAAE,OAAO,CAAC;IAC/B,sEAAsE;IACtE,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC,+CAA+C;IAC/C,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,mFAAmF;IACnF,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC;IAC3B,oFAAoF;IACpF,QAAQ,CAAC,WAAW,CAAC,EAAE,OAAO,EAAE,CAAC;gBAErB,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM;IA8BlF;;;;;;OAMG;IACH,MAAM,IAAI,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;CAkBlC;AAQD,oGAAoG;AACpG,qBAAa,eAAgB,SAAQ,WAAW;IAC9C,MAAM,CAAC,QAAQ,CAAC,YAAY,sBAAsB;IAClD,MAAM,CAAC,QAAQ,CAAC,gBAAgB,sBAAsB;IACtD,MAAM,CAAC,QAAQ,CAAC,iBAAiB,SAAS;IAC1C,QAAQ,CAAC,IAAI,EAAG,kBAAkB,CAAU;CAC7C;AAED,qGAAqG;AACrG,qBAAa,eAAgB,SAAQ,WAAW;IAC9C,MAAM,CAAC,QAAQ,CAAC,YAAY,uBAAuB;IACnD,MAAM,CAAC,QAAQ,CAAC,gBAAgB,eAAe;IAC/C,MAAM,CAAC,QAAQ,CAAC,iBAAiB,SAAS;IAC1C,QAAQ,CAAC,IAAI,EAAG,mBAAmB,CAAU;IAC7C,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;gBACf,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,GAAE,MAAM,GAAG,IAAW,EAAE,IAAI,GAAE,OAAc;CAInG;AAED,4FAA4F;AAC5F,qBAAa,YAAa,SAAQ,WAAW;IAC3C,MAAM,CAAC,QAAQ,CAAC,YAAY,kBAAkB;IAC9C,MAAM,CAAC,QAAQ,CAAC,gBAAgB,UAAU;IAC1C,MAAM,CAAC,QAAQ,CAAC,iBAAiB,SAAS;IAC1C,QAAQ,CAAC,IAAI,EAAG,cAAc,CAAU;CACzC;AAED,wDAAwD;AACxD,qBAAa,QAAS,SAAQ,WAAW;IACvC,MAAM,CAAC,QAAQ,CAAC,YAAY,eAAe;IAC3C,MAAM,CAAC,QAAQ,CAAC,gBAAgB,SAAS;IACzC,MAAM,CAAC,QAAQ,CAAC,iBAAiB,SAAS;IAC1C,QAAQ,CAAC,IAAI,EAAG,WAAW,CAAU;CACtC;AAED,iGAAiG;AACjG,qBAAa,YAAa,SAAQ,WAAW;IAC3C,MAAM,CAAC,QAAQ,CAAC,YAAY,mBAAmB;IAC/C,MAAM,CAAC,QAAQ,CAAC,gBAAgB,aAAa;IAC7C,MAAM,CAAC,QAAQ,CAAC,iBAAiB,QAAQ;IACzC,QAAQ,CAAC,IAAI,EAAG,eAAe,CAAU;IACzC,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;gBACZ,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM;CAI7D;AAED,iGAAiG;AACjG,qBAAa,UAAW,SAAQ,WAAW;IACzC,MAAM,CAAC,QAAQ,CAAC,YAAY,iBAAiB;IAC7C,MAAM,CAAC,QAAQ,CAAC,gBAAgB,WAAW;IAC3C,MAAM,CAAC,QAAQ,CAAC,iBAAiB,SAAS;IAC1C,QAAQ,CAAC,IAAI,EAAG,aAAa,CAAU;IACvC,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC;gBACb,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,OAAO;CAI9D;AAED;;;;;;;;;GASG;AACH,MAAM,MAAM,qBAAqB,GAC7B,kBAAkB,GAClB,6BAA6B,GAC7B,yBAAyB,GACzB,uBAAuB,GACvB,kBAAkB,GAClB,+BAA+B,GAC/B,uBAAuB,GACvB,mBAAmB,GACnB,qBAAqB,GACrB,mBAAmB,GACnB,uBAAuB,GACvB,uBAAuB,GACvB,cAAc,GACd,qBAAqB,GACrB,gBAAgB,GAChB,qBAAqB,GACrB,eAAe,GACf,eAAe,GACf,eAAe,GACf,gBAAgB,GAChB,eAAe,GACf,mBAAmB,GACnB,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;AAElB,MAAM,WAAW,oBAAoB;IACnC,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED,qBAAa,iBAAkB,SAAQ,WAAW;IAChD,QAAQ,CAAC,IAAI,EAAG,cAAc,CAAU;IACxC,QAAQ,CAAC,IAAI,EAAE,qBAAqB,CAAC;IACrC,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;IAC5B,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,QAAQ,CAAC,GAAG,EAAE,oBAAoB,GAAG,IAAI,CAAC;IAC1C,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;IAC/B,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC;IAC7B,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,aAAa,CAAC,EAAE,qBAAqB,CAAC;gBAG7C,OAAO,EAAE,MAAM,EACf,IAAI,EAAE;QACJ,IAAI,EAAE,qBAAqB,CAAC;QAC5B,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QACtB,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QACzB,SAAS,CAAC,EAAE,OAAO,CAAC;QACpB,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAC5B,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QACvB,GAAG,CAAC,EAAE,oBAAoB,GAAG,IAAI,CAAC;QAClC,IAAI,CAAC,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;QACvB,UAAU,CAAC,EAAE,OAAO,CAAC;QACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,aAAa,CAAC,EAAE,qBAAqB,CAAC;QACtC,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QACvB,IAAI,CAAC,EAAE,OAAO,CAAC;QACf,OAAO,EAAE,MAAM,CAAC;KACjB;IAiBM,MAAM,IAAI,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;CAgB3C;AAUD,yGAAyG;AACzG,wBAAgB,aAAa,CAAC,CAAC,EAAE,OAAO,GAAG,CAAC,IAAI,WAAW,CAM1D;AAED,0FAA0F;AAC1F,wBAAgB,iBAAiB,CAAC,CAAC,EAAE,OAAO,GAAG,CAAC,IAAI,eAAe,CAElE;AAED,gDAAgD;AAChD,wBAAgB,iBAAiB,CAAC,CAAC,EAAE,OAAO,GAAG,CAAC,IAAI,eAAe,CAElE;AAED,8CAA8C;AAC9C,wBAAgB,cAAc,CAAC,CAAC,EAAE,OAAO,GAAG,CAAC,IAAI,YAAY,CAE5D;AAED,0CAA0C;AAC1C,wBAAgB,UAAU,CAAC,CAAC,EAAE,OAAO,GAAG,CAAC,IAAI,QAAQ,CAEpD;AAED,6CAA6C;AAC7C,wBAAgB,cAAc,CAAC,CAAC,EAAE,OAAO,GAAG,CAAC,IAAI,YAAY,CAE5D;AAED,2CAA2C;AAC3C,wBAAgB,YAAY,CAAC,CAAC,EAAE,OAAO,GAAG,CAAC,IAAI,UAAU,CAExD;AAED,kDAAkD;AAClD,wBAAgB,aAAa,CAAC,CAAC,EAAE,OAAO,GAAG,CAAC,IAAI,iBAAiB,CAEhE;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,sBAAsB,CAAC,CAAC,EAAE,OAAO,GAAG,OAAO,CAU1D"}
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH;;;;GAIG;AACH,MAAM,MAAM,eAAe,GACvB,kBAAkB,GAClB,mBAAmB,GACnB,cAAc,GACd,WAAW,GACX,eAAe,GACf,aAAa,GACb,cAAc,CAAC;AAEnB;;;;;;GAMG;AACH,MAAM,MAAM,gBAAgB,GAAG,SAAS,GAAG,SAAS,CAAC;AAErD,8BAAsB,WAAY,SAAQ,KAAK;IAC7C;;;;;OAKG;IACH,QAAQ,CAAC,aAAa,EAAG,IAAI,CAAU;IACvC;;;;OAIG;IACH,QAAQ,CAAC,QAAQ,CAAC,IAAI,EAAE,eAAe,CAAC;IACxC,iFAAiF;IACjF,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,+DAA+D;IAC/D,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IACvB,2FAA2F;IAC3F,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,mFAAmF;IACnF,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,+DAA+D;IAC/D,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,kDAAkD;IAClD,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,CAAC;IAC7B,yFAAyF;IACzF,QAAQ,CAAC,WAAW,CAAC,EAAE,OAAO,CAAC;IAC/B,sEAAsE;IACtE,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC,+CAA+C;IAC/C,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,mFAAmF;IACnF,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC;IAC3B,oFAAoF;IACpF,QAAQ,CAAC,WAAW,CAAC,EAAE,OAAO,EAAE,CAAC;IACjC;;;;;;OAMG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE,gBAAgB,CAAC;gBAE3B,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM;IAgClF;;;;;;OAMG;IACH,MAAM,IAAI,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;CAmBlC;AAkBD,oGAAoG;AACpG,qBAAa,eAAgB,SAAQ,WAAW;IAC9C,MAAM,CAAC,QAAQ,CAAC,YAAY,sBAAsB;IAClD,MAAM,CAAC,QAAQ,CAAC,gBAAgB,sBAAsB;IACtD,MAAM,CAAC,QAAQ,CAAC,iBAAiB,SAAS;IAC1C,QAAQ,CAAC,IAAI,EAAG,kBAAkB,CAAU;CAC7C;AAED,qGAAqG;AACrG,qBAAa,eAAgB,SAAQ,WAAW;IAC9C,MAAM,CAAC,QAAQ,CAAC,YAAY,uBAAuB;IACnD,MAAM,CAAC,QAAQ,CAAC,gBAAgB,eAAe;IAC/C,MAAM,CAAC,QAAQ,CAAC,iBAAiB,SAAS;IAC1C,QAAQ,CAAC,IAAI,EAAG,mBAAmB,CAAU;IAC7C,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;gBACf,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,GAAE,MAAM,GAAG,IAAW,EAAE,IAAI,GAAE,OAAc;CAInG;AAED,4FAA4F;AAC5F,qBAAa,YAAa,SAAQ,WAAW;IAC3C,MAAM,CAAC,QAAQ,CAAC,YAAY,kBAAkB;IAC9C,MAAM,CAAC,QAAQ,CAAC,gBAAgB,UAAU;IAC1C,MAAM,CAAC,QAAQ,CAAC,iBAAiB,SAAS;IAC1C,QAAQ,CAAC,IAAI,EAAG,cAAc,CAAU;CACzC;AAED,wDAAwD;AACxD,qBAAa,QAAS,SAAQ,WAAW;IACvC,MAAM,CAAC,QAAQ,CAAC,YAAY,eAAe;IAC3C,MAAM,CAAC,QAAQ,CAAC,gBAAgB,SAAS;IACzC,MAAM,CAAC,QAAQ,CAAC,iBAAiB,SAAS;IAC1C,QAAQ,CAAC,IAAI,EAAG,WAAW,CAAU;CACtC;AAED,iGAAiG;AACjG,qBAAa,YAAa,SAAQ,WAAW;IAC3C,MAAM,CAAC,QAAQ,CAAC,YAAY,mBAAmB;IAC/C,MAAM,CAAC,QAAQ,CAAC,gBAAgB,aAAa;IAC7C,MAAM,CAAC,QAAQ,CAAC,iBAAiB,QAAQ;IACzC,QAAQ,CAAC,IAAI,EAAG,eAAe,CAAU;IACzC,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;gBACZ,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM;CAI7D;AAED,iGAAiG;AACjG,qBAAa,UAAW,SAAQ,WAAW;IACzC,MAAM,CAAC,QAAQ,CAAC,YAAY,iBAAiB;IAC7C,MAAM,CAAC,QAAQ,CAAC,gBAAgB,WAAW;IAC3C,MAAM,CAAC,QAAQ,CAAC,iBAAiB,SAAS;IAC1C,QAAQ,CAAC,IAAI,EAAG,aAAa,CAAU;IACvC,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC;gBACb,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,OAAO;CAI9D;AAED;;;;;;;;;GASG;AACH,MAAM,MAAM,qBAAqB,GAC7B,kBAAkB,GAClB,6BAA6B,GAC7B,yBAAyB,GACzB,uBAAuB,GACvB,kBAAkB,GAClB,+BAA+B,GAC/B,uBAAuB,GACvB,mBAAmB,GACnB,qBAAqB,GACrB,mBAAmB,GACnB,uBAAuB,GACvB,uBAAuB,GACvB,cAAc,GACd,qBAAqB,GACrB,gBAAgB,GAChB,qBAAqB,GACrB,eAAe,GACf,eAAe,GACf,eAAe,GACf,gBAAgB,GAChB,eAAe,GACf,mBAAmB,GACnB,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;AAElB,MAAM,WAAW,oBAAoB;IACnC,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED,qBAAa,iBAAkB,SAAQ,WAAW;IAChD,QAAQ,CAAC,IAAI,EAAG,cAAc,CAAU;IACxC,QAAQ,CAAC,IAAI,EAAE,qBAAqB,CAAC;IACrC,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;IAC5B,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,QAAQ,CAAC,GAAG,EAAE,oBAAoB,GAAG,IAAI,CAAC;IAC1C,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;IAC/B,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC;IAC7B,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,aAAa,CAAC,EAAE,qBAAqB,CAAC;gBAG7C,OAAO,EAAE,MAAM,EACf,IAAI,EAAE;QACJ,IAAI,EAAE,qBAAqB,CAAC;QAC5B,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QACtB,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QACzB,SAAS,CAAC,EAAE,OAAO,CAAC;QACpB,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAC5B,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QACvB,GAAG,CAAC,EAAE,oBAAoB,GAAG,IAAI,CAAC;QAClC,IAAI,CAAC,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;QACvB,UAAU,CAAC,EAAE,OAAO,CAAC;QACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,aAAa,CAAC,EAAE,qBAAqB,CAAC;QACtC,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QACvB,IAAI,CAAC,EAAE,OAAO,CAAC;QACf,OAAO,EAAE,MAAM,CAAC;KACjB;IAiBM,MAAM,IAAI,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;CAgB3C;AAUD,yGAAyG;AACzG,wBAAgB,aAAa,CAAC,CAAC,EAAE,OAAO,GAAG,CAAC,IAAI,WAAW,CAM1D;AAED,0FAA0F;AAC1F,wBAAgB,iBAAiB,CAAC,CAAC,EAAE,OAAO,GAAG,CAAC,IAAI,eAAe,CAElE;AAED,gDAAgD;AAChD,wBAAgB,iBAAiB,CAAC,CAAC,EAAE,OAAO,GAAG,CAAC,IAAI,eAAe,CAElE;AAED,8CAA8C;AAC9C,wBAAgB,cAAc,CAAC,CAAC,EAAE,OAAO,GAAG,CAAC,IAAI,YAAY,CAE5D;AAED,0CAA0C;AAC1C,wBAAgB,UAAU,CAAC,CAAC,EAAE,OAAO,GAAG,CAAC,IAAI,QAAQ,CAEpD;AAED,6CAA6C;AAC7C,wBAAgB,cAAc,CAAC,CAAC,EAAE,OAAO,GAAG,CAAC,IAAI,YAAY,CAE5D;AAED,2CAA2C;AAC3C,wBAAgB,YAAY,CAAC,CAAC,EAAE,OAAO,GAAG,CAAC,IAAI,UAAU,CAExD;AAED,kDAAkD;AAClD,wBAAgB,aAAa,CAAC,CAAC,EAAE,OAAO,GAAG,CAAC,IAAI,iBAAiB,CAEhE;AAED;;;;;GAKG;AACH,wBAAgB,aAAa,CAAC,CAAC,EAAE,OAAO,GAAG,gBAAgB,GAAG,SAAS,CAEtE;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,sBAAsB,CAAC,CAAC,EAAE,OAAO,GAAG,OAAO,CAU1D"}

package/sdk/dist/errors.js

@@ -40,6 +40,14 @@ export class Run402Error extends Error {
     details;
     /** Advisory next actions from the gateway. Rendering them must not execute them. */
     nextActions;
+    /**
+     * Quota-denial scope (v1.46+). `"account"` for pooled billing-account
+     * denials; `"project"` for the orphan fallback (project whose billing
+     * account row was purged but cascade has not yet run). Lifted from
+     * `details.scope` when the gateway returned it. Undefined for errors
+     * that are not quota-related.
+     */
+    quotaScope;
     constructor(message, status, body, context) {
         super(message);
         this.name = this.constructor.name;
@@ -74,6 +82,9 @@ export class Run402Error extends Error {
         }
         if (Array.isArray(envelope?.next_actions))
             this.nextActions = envelope.next_actions;
+        const scope = extractQuotaScope(envelope);
+        if (scope !== undefined)
+            this.quotaScope = scope;
     }
     /**
      * Canonical structured envelope for `JSON.stringify`. Without this, an
@@ -97,6 +108,7 @@ export class Run402Error extends Error {
             context: this.context,
             details: this.details,
             nextActions: this.nextActions,
+            quotaScope: this.quotaScope,
             body: this.body,
         };
     }
@@ -106,6 +118,15 @@ function canonicalEnvelope(body) {
         ? body
         : null;
 }
+function extractQuotaScope(envelope) {
+    if (!envelope)
+        return undefined;
+    const details = envelope.details;
+    if (!details || typeof details !== "object" || Array.isArray(details))
+        return undefined;
+    const scope = details.scope;
+    return scope === "account" || scope === "project" ? scope : undefined;
+}
 /** HTTP 402 — the gateway requires payment (lease expired, insufficient balance, or x402 quote). */
 export class PaymentRequired extends Run402Error {
     static DEFAULT_CODE = "PAYMENT_REQUIRED";
@@ -254,6 +275,15 @@ export function isLocalError(e) {
 export function isDeployError(e) {
     return isRun402Error(e) && e.kind === "deploy_error";
 }
+/**
+ * Extract the v1.46+ quota-denial scope from an error. Returns `"account"`
+ * for pooled denials, `"project"` for the orphan fallback, or `undefined`
+ * when the error is not quota-related (or originated from a pre-v1.46
+ * gateway that did not set `details.scope`). Safe to call with `unknown`.
+ */
+export function getQuotaScope(e) {
+    return isRun402Error(e) ? e.quotaScope : undefined;
+}
 /**
  * Canonical "should I retry this?" policy. Returns true when `e` is a
  * {@link Run402Error} AND any of: