run402 4.1.0 → 4.1.1

package/cli.mjs

@@ -27,7 +27,7 @@ Commands:
   credentials Manage local credential material (project-keys)
   allowance   Manage your agent allowance (create, fund, balance, status)
   tier        Manage tier subscription (status, set)
-  projects    Manage projects (provision, list, query, inspect, delete)
+  projects    Manage projects (provision, list, get, sql, delete)
   apply       Alias for deploy apply; supports --rehearse for migration rehearsal
   snapshots   Create/list/restore/delete project data snapshots
   branches    Create/list/renew/delete contained project branches

package/lib/allowance.mjs

@@ -242,7 +242,17 @@ async function balance() {
   }, null, 2));
 }
 
-async function exportAddr() {
+async function exportAddr(args = []) {
+  const parsedArgs = normalizeArgv(args);
+  assertKnownFlags(parsedArgs, [], []);
+  const bare = positionalArgs(parsedArgs, []);
+  if (bare.length > 0) {
+    fail({
+      code: "BAD_USAGE",
+      message: `Unexpected argument for allowance export: ${bare[0]}`,
+      details: { argument: bare[0] },
+    });
+  }
   try {
     const address = await getSdk().allowance.export();
     console.log(JSON.stringify({ address }));
@@ -333,7 +343,7 @@ export async function run(sub, args) {
     case "create":  await create(); break;
     case "fund":    await fund(); break;
     case "balance": await balance(); break;
-    case "export":   await exportAddr(); break;
+    case "export":   await exportAddr(args); break;
     case "checkout": await checkout(args); break;
     case "history":  await history(args); break;
     default:

package/lib/doctor.mjs

@@ -56,6 +56,13 @@ Exit codes:
   1  — one or more checks failed (details in output)
 `;
 
+function redactAllowanceForDiagnostics(allowance) {
+  if (!allowance || typeof allowance !== "object") return allowance;
+  const safe = { ...allowance };
+  delete safe.privateKey;
+  return safe;
+}
+
 export async function run(sub, args = []) {
   const all = [sub, ...args].filter(Boolean);
   if (all.includes("--help") || all.includes("-h")) {
@@ -113,8 +120,9 @@ export async function run(sub, args = []) {
         value: {
           rail: allowance.rail,
           // Don't surface amounts or addresses unless --verbose; agents
-          // checking for config presence don't need wallet details.
-          ...(verbose && { details: allowance }),
+          // checking for config presence don't need wallet details. Never
+          // include keystore secrets in diagnostics, even in verbose mode.
+          ...(verbose && { details: redactAllowanceForDiagnostics(allowance) }),
         },
       });
     } else {
@@ -182,19 +190,34 @@ export async function run(sub, args = []) {
     const sdk = getSdk();
     const tier = await sdk.tier.status();
     const tierName = tier?.tier ?? null;
-    if (tierName && tierName !== "past_due" && tierName !== "frozen" && tierName !== "dormant") {
+    const lifecycle = tier?.organization_lifecycle_state ?? null;
+    const active = tier?.active === true;
+    if (tierName && active && lifecycle === "active") {
       checks.push({
         name: "tier",
         status: "ok",
-        value: { tier: tierName },
+        value: { tier: tierName, active, organization_lifecycle_state: lifecycle },
       });
     } else {
+      const status = lifecycle && lifecycle !== "active"
+        ? lifecycle
+        : tierName && !active
+          ? "inactive"
+          : tierName && lifecycle === null
+            ? "unknown"
+            : tierName ?? "missing";
       checks.push({
         name: "tier",
-        status: tierName ?? "missing",
-        ...(tierName && {
-          hint: "Run 'run402 tier set prototype' to subscribe (or upgrade).",
-        }),
+        status,
+        value: {
+          tier: tierName,
+          active,
+          organization_lifecycle_state: lifecycle,
+          lease_expires_at: tier?.lease_expires_at ?? null,
+        },
+        hint: lifecycle === null && tierName
+          ? "Tier resolved, but organization lifecycle could not be determined. Check `run402 tier status` before assuming the account is healthy."
+          : "Run 'run402 tier set prototype' to subscribe, renew, or reactivate the tier.",
       });
     }
   } catch (err) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "run402",
-  "version": "4.1.0",
+  "version": "4.1.1",
   "description": "CLI for Run402 — provision Postgres databases, deploy static sites, generate images, and manage wallets via x402 and MPP micropayments.",
   "type": "module",
   "bin": {