run402 4.1.0 → 4.2.0

package/cli.mjs

@@ -27,7 +27,7 @@ Commands:
   credentials Manage local credential material (project-keys)
   allowance   Manage your agent allowance (create, fund, balance, status)
   tier        Manage tier subscription (status, set)
-  projects    Manage projects (provision, list, query, inspect, delete)
+  projects    Manage projects (provision, list, get, sql, delete)
   apply       Alias for deploy apply; supports --rehearse for migration rehearsal
   snapshots   Create/list/restore/delete project data snapshots
   branches    Create/list/renew/delete contained project branches

package/lib/allowance.mjs

@@ -242,7 +242,17 @@ async function balance() {
   }, null, 2));
 }
 
-async function exportAddr() {
+async function exportAddr(args = []) {
+  const parsedArgs = normalizeArgv(args);
+  assertKnownFlags(parsedArgs, [], []);
+  const bare = positionalArgs(parsedArgs, []);
+  if (bare.length > 0) {
+    fail({
+      code: "BAD_USAGE",
+      message: `Unexpected argument for allowance export: ${bare[0]}`,
+      details: { argument: bare[0] },
+    });
+  }
   try {
     const address = await getSdk().allowance.export();
     console.log(JSON.stringify({ address }));
@@ -333,7 +343,7 @@ export async function run(sub, args) {
     case "create":  await create(); break;
     case "fund":    await fund(); break;
     case "balance": await balance(); break;
-    case "export":   await exportAddr(); break;
+    case "export":   await exportAddr(args); break;
     case "checkout": await checkout(args); break;
     case "history":  await history(args); break;
     default:

package/lib/billing.mjs

@@ -9,7 +9,7 @@ Usage:
 
 Subcommands:
   create-email <email>                     Create an email organization
-  link-wallet <org_id> <wallet>            Link a wallet to an email organization
+  link-wallet <org_id> <wallet_address>    Link a wallet to an email organization
   checkout <identifier> --product <p>      Create an org checkout
   auto-recharge <org_id> <on|off> [--threshold <n>]
   balance <identifier>                     Balance by organization id (UUID), wallet (0x...), or email
@@ -114,11 +114,11 @@ Examples:
   "link-wallet": `run402 billing link-wallet — Link a wallet to an email organization
 
 Usage:
-  run402 billing link-wallet <org_id> <wallet>
+  run402 billing link-wallet <org_id> <wallet_address>
 
 Arguments:
   <org_id>        Organization ID (e.g. org_abc123)
-  <wallet>            Wallet address (0x...) to link
+  <wallet_address>    Wallet address (0x...) to link
 
 Notes:
   - Tier and quotas are per-organization. Linking a wallet merges its
@@ -242,8 +242,8 @@ async function linkWallet(args) {
   if (!organizationId || !wallet) {
     fail({
       code: "BAD_USAGE",
-      message: "Missing <org_id> and/or <wallet>.",
-      hint: "run402 billing link-wallet <org_id> <wallet>",
+      message: "Missing <org_id> and/or <wallet_address>.",
+      hint: "run402 billing link-wallet <org_id> <wallet_address>",
     });
   }
   try {
@@ -305,7 +305,7 @@ async function balance(args) {
     fail({
       code: "BAD_USAGE",
       message: "Missing <identifier>.",
-      hint: "run402 billing balance <org-id | wallet | email>",
+      hint: "run402 billing balance <org_id | wallet | email>",
     });
   }
   try {
@@ -329,7 +329,7 @@ async function history(args) {
     fail({
       code: "BAD_USAGE",
       message: "Missing <identifier>.",
-      hint: "run402 billing history <org-id | wallet | email> [--limit <n>] [--after <cursor>]",
+      hint: "run402 billing history <org_id | wallet | email> [--limit <n>] [--after <cursor>]",
     });
   }
   const limit = parsedArgs.includes("--limit")

package/lib/doctor.mjs

@@ -56,6 +56,13 @@ Exit codes:
   1  — one or more checks failed (details in output)
 `;
 
+function redactAllowanceForDiagnostics(allowance) {
+  if (!allowance || typeof allowance !== "object") return allowance;
+  const safe = { ...allowance };
+  delete safe.privateKey;
+  return safe;
+}
+
 export async function run(sub, args = []) {
   const all = [sub, ...args].filter(Boolean);
   if (all.includes("--help") || all.includes("-h")) {
@@ -113,8 +120,9 @@ export async function run(sub, args = []) {
         value: {
           rail: allowance.rail,
           // Don't surface amounts or addresses unless --verbose; agents
-          // checking for config presence don't need wallet details.
-          ...(verbose && { details: allowance }),
+          // checking for config presence don't need wallet details. Never
+          // include keystore secrets in diagnostics, even in verbose mode.
+          ...(verbose && { details: redactAllowanceForDiagnostics(allowance) }),
         },
       });
     } else {
@@ -182,19 +190,34 @@ export async function run(sub, args = []) {
     const sdk = getSdk();
     const tier = await sdk.tier.status();
     const tierName = tier?.tier ?? null;
-    if (tierName && tierName !== "past_due" && tierName !== "frozen" && tierName !== "dormant") {
+    const lifecycle = tier?.organization_lifecycle_state ?? null;
+    const active = tier?.active === true;
+    if (tierName && active && lifecycle === "active") {
       checks.push({
         name: "tier",
         status: "ok",
-        value: { tier: tierName },
+        value: { tier: tierName, active, organization_lifecycle_state: lifecycle },
       });
     } else {
+      const status = lifecycle && lifecycle !== "active"
+        ? lifecycle
+        : tierName && !active
+          ? "inactive"
+          : tierName && lifecycle === null
+            ? "unknown"
+            : tierName ?? "missing";
       checks.push({
         name: "tier",
-        status: tierName ?? "missing",
-        ...(tierName && {
-          hint: "Run 'run402 tier set prototype' to subscribe (or upgrade).",
-        }),
+        status,
+        value: {
+          tier: tierName,
+          active,
+          organization_lifecycle_state: lifecycle,
+          lease_expires_at: tier?.lease_expires_at ?? null,
+        },
+        hint: lifecycle === null && tierName
+          ? "Tier resolved, but organization lifecycle could not be determined. Check `run402 tier status` before assuming the account is healthy."
+          : "Run 'run402 tier set prototype' to subscribe, renew, or reactivate the tier.",
       });
     }
   } catch (err) {

package/lib/org.mjs

@@ -15,23 +15,25 @@ const HELP = `run402 org — organizations: create, label, membership, invites
 Usage:
   run402 org create [--name <label>]
   run402 org list
-  run402 org get    <org>
-  run402 org rename <org> <display_name>   (or: --clear to remove the label)
+  run402 org get    <org_id>
+  run402 org rename <org_id> <display_name>   (or: --clear to remove the label)
+  run402 org payout-wallet <org_id> <wallet_address>  (or: --clear to remove the explicit default)
   run402 org whoami
-  run402 org audit  <org> [--limit N] [--after <cursor>] [--before <cursor>]
-  run402 org member list <org>
-  run402 org member add  <org> <wallet> [--role <role>]
-  run402 org member role <org> <principal_id> <role>
-  run402 org member rm   <org> <principal_id>
-  run402 org invite list   <org>
-  run402 org invite create <org> <email> [--role <role>] [--ttl-hours N]
-  run402 org invite rm     <org> <principal_id>
+  run402 org audit  <org_id> [--limit N] [--after <cursor>] [--before <cursor>]
+  run402 org member list <org_id>
+  run402 org member add  <org_id> <wallet_address> [--role <role>]
+  run402 org member role <org_id> <principal_id> <role>
+  run402 org member rm   <org_id> <principal_id>
+  run402 org invite list   <org_id>
+  run402 org invite create <org_id> <email> [--role <role>] [--ttl-hours N]
+  run402 org invite rm     <org_id> <principal_id>
 
 Subcommands:
   create      Create an empty org on the prototype tier (you become owner)
   list        Orgs you are a member of
   get         Read one org (label + tier/lease + your role)
   rename      Set or clear an org's display label (owner-only)
+  payout-wallet  Set or clear the tenant route payout wallet (admin+)
   whoami      Resolved principal + org memberships (GET /agent/v1/whoami)
   member      Manage members (list, add, role, rm) — mutations require owner
   invite      Manage email invites (list, create, rm) — mutations require owner
@@ -40,7 +42,7 @@ Subcommands:
 Notes:
   - A wallet AUTHENTICATES; an org owns projects. Membership/role authorizes.
   - Roles: ${ROLE_LIST}. Member/invite changes need an active owner.
-  - create/rename/member/invite are step-up gated for control-plane sessions.
+  - create/rename/payout-wallet/member/invite are step-up gated for control-plane sessions.
   - Removing/demoting the org's only active owner fails with 409 LAST_OWNER.
   - JSON in, JSON out.
 
@@ -50,6 +52,8 @@ Examples:
   run402 org get org_abc
   run402 org rename org_abc "New Name"
   run402 org rename org_abc --clear
+  run402 org payout-wallet org_abc 0xf39Fd6e51aad88F6F4ce6aB8827279cffFb92266
+  run402 org payout-wallet org_abc --clear
   run402 org member add org_abc 0xf39Fd6e51aad88F6F4ce6aB8827279cffFb92266 --role admin
   run402 org invite create org_abc dev@example.com --role developer
   run402 org audit org_abc --limit 50
@@ -75,7 +79,7 @@ Usage:
   get: `run402 org get — read one org (label + tier/lease + your role)
 
 Usage:
-  run402 org get <org>
+  run402 org get <org_id>
 
 Any active member may read. A non-member (including a guessed id) gets the same
 non-revealing 403.
@@ -83,11 +87,25 @@ non-revealing 403.
   rename: `run402 org rename — set or clear an org's display label (owner-only)
 
 Usage:
-  run402 org rename <org> <display_name>
-  run402 org rename <org> --clear
+  run402 org rename <org_id> <display_name>
+  run402 org rename <org_id> --clear
 
 Owner-only + step-up gated. Pass --clear (or an empty display_name) to remove
 the label. Output includes the updated tier and lease timestamps.
+`,
+  "payout-wallet": `run402 org payout-wallet — set or clear the tenant route payout wallet
+
+Usage:
+  run402 org payout-wallet <org_id> <wallet_address>
+  run402 org payout-wallet <org_id> --clear
+
+Admin/owner-only + step-up gated. The wallet must already be active and linked
+to the same org. This wallet receives x402 settlement for function web routes
+that declare pricing.pay_to = "org_default_payout". Pass --clear to remove the
+explicit default; a single active org wallet may still resolve automatically.
+
+The JSON response includes recovery.status, active_wallet_count, and
+next_actions for PAYOUT_WALLET_REQUIRED / PAYOUT_WALLET_AMBIGUOUS setup.
 `,
   whoami: `run402 org whoami — resolved principal + org memberships
 
@@ -101,10 +119,10 @@ for local wallet/profile state use 'run402 status'.
   member: `run402 org member — manage org members
 
 Usage:
-  run402 org member list <org>
-  run402 org member add  <org> <wallet> [--role <role>]
-  run402 org member role <org> <principal_id> <role>
-  run402 org member rm   <org> <principal_id>
+  run402 org member list <org_id>
+  run402 org member add  <org_id> <wallet_address> [--role <role>]
+  run402 org member role <org_id> <principal_id> <role>
+  run402 org member rm   <org_id> <principal_id>
 
 Roles: ${ROLE_LIST} (add defaults to developer). Mutations require an active owner.
 Demoting/removing the org's only active owner fails with 409 LAST_OWNER.
@@ -112,9 +130,9 @@ Demoting/removing the org's only active owner fails with 409 LAST_OWNER.
   invite: `run402 org invite — manage email invites
 
 Usage:
-  run402 org invite list   <org>
-  run402 org invite create <org> <email> [--role <role>] [--ttl-hours N]
-  run402 org invite rm     <org> <principal_id>
+  run402 org invite list   <org_id>
+  run402 org invite create <org_id> <email> [--role <role>] [--ttl-hours N]
+  run402 org invite rm     <org_id> <principal_id>
 
 An invite is claimed at the recipient's first login. Mutations require an active owner
 (plus step-up when driven by a control-plane session).
@@ -122,7 +140,7 @@ An invite is claimed at the recipient's first login. Mutations require an active
   audit: `run402 org audit — control-plane audit trail
 
 Usage:
-  run402 org audit <org> [--limit N] [--after <cursor>] [--before <cursor>]
+  run402 org audit <org_id> [--limit N] [--after <cursor>] [--before <cursor>]
 
 Requires an admin+ membership on the org. Newest-first. Page forward with --after
 (next_cursor from a prior page); --before is the legacy cursor. Returns
@@ -171,7 +189,7 @@ async function get(args) {
   const a = normalizeArgv(args);
   assertKnownFlags(a, ["--help", "-h"]);
   const [org] = requirePositionalCount(a, [], {
-    min: 1, max: 1, command: "run402 org get <org>", missing: "Missing <org>.",
+    min: 1, max: 1, command: "run402 org get <org_id>", missing: "Missing <org_id>.",
   });
   try {
     console.log(JSON.stringify(await getSdk().org(org).get(), null, 2));
@@ -187,8 +205,8 @@ async function rename(args) {
   const positionals = requirePositionalCount(a, [], {
     min: clear ? 1 : 2,
     max: clear ? 1 : 2,
-    command: "run402 org rename <org> <display_name>",
-    missing: clear ? "Missing <org>." : "Missing <org> and/or <display_name> (or pass --clear).",
+    command: "run402 org rename <org_id> <display_name>",
+    missing: clear ? "Missing <org_id>." : "Missing <org_id> and/or <display_name> (or pass --clear).",
   });
   const org = positionals[0];
   const displayName = clear ? null : positionals[1];
@@ -199,6 +217,25 @@ async function rename(args) {
   }
 }
 
+async function payoutWallet(args) {
+  const a = normalizeArgv(args);
+  assertKnownFlags(a, ["--clear", "--help", "-h"]);
+  const clear = a.includes("--clear");
+  const positionals = requirePositionalCount(a, [], {
+    min: clear ? 1 : 2,
+    max: clear ? 1 : 2,
+    command: "run402 org payout-wallet <org_id> <wallet_address>",
+    missing: clear ? "Missing <org_id>." : "Missing <org_id> and/or <wallet_address> (or pass --clear).",
+  });
+  const org = positionals[0];
+  const walletAddress = clear ? null : positionals[1];
+  try {
+    console.log(JSON.stringify(await getSdk().org(org).setPayoutWallet({ walletAddress }), null, 2));
+  } catch (err) {
+    reportSdkError(err);
+  }
+}
+
 async function audit(args) {
   const a = normalizeArgv(args);
   const valueFlags = ["--limit", "--after", "--before"];
@@ -206,8 +243,8 @@ async function audit(args) {
   const [org] = requirePositionalCount(a, valueFlags, {
     min: 1,
     max: 1,
-    command: "run402 org audit <org>",
-    missing: "Missing <org>.",
+    command: "run402 org audit <org_id>",
+    missing: "Missing <org_id>.",
   });
   const limitFlag = flagValue(a, "--limit");
   const after = flagValue(a, "--after");
@@ -243,7 +280,7 @@ async function runMember(args) {
     const a = normalizeArgv(rest);
     assertKnownFlags(a, ["--help", "-h"]);
     const [org] = requirePositionalCount(a, [], {
-      min: 1, max: 1, command: "run402 org member list <org>", missing: "Missing <org>.",
+      min: 1, max: 1, command: "run402 org member list <org_id>", missing: "Missing <org_id>.",
     });
     try {
       console.log(JSON.stringify({ members: await getSdk().org(org).members.list() }, null, 2));
@@ -258,8 +295,8 @@ async function runMember(args) {
     assertKnownFlags(a, ["--role", "--help", "-h"], ["--role"]);
     const role = flagValue(a, "--role");
     const [org, wallet] = requirePositionalCount(a, ["--role"], {
-      min: 2, max: 2, command: "run402 org member add <org> <wallet> [--role <role>]",
-      missing: "Missing <org> and/or <wallet>.",
+      min: 2, max: 2, command: "run402 org member add <org_id> <wallet_address> [--role <role>]",
+      missing: "Missing <org_id> and/or <wallet_address>.",
     });
     try {
       const res = await getSdk().org(org).members.add({ wallet, role: role || undefined });
@@ -274,8 +311,8 @@ async function runMember(args) {
     const a = normalizeArgv(rest);
     assertKnownFlags(a, ["--help", "-h"]);
     const [org, principalId, role] = requirePositionalCount(a, [], {
-      min: 3, max: 3, command: "run402 org member role <org> <principal_id> <role>",
-      missing: "Missing <org>, <principal_id>, and/or <role>.",
+      min: 3, max: 3, command: "run402 org member role <org_id> <principal_id> <role>",
+      missing: "Missing <org_id>, <principal_id>, and/or <role>.",
     });
     try {
       console.log(JSON.stringify(await getSdk().org(org).members.setRole(principalId, { role }), null, 2));
@@ -289,8 +326,8 @@ async function runMember(args) {
     const a = normalizeArgv(rest);
     assertKnownFlags(a, ["--help", "-h"]);
     const [org, principalId] = requirePositionalCount(a, [], {
-      min: 2, max: 2, command: "run402 org member rm <org> <principal_id>",
-      missing: "Missing <org> and/or <principal_id>.",
+      min: 2, max: 2, command: "run402 org member rm <org_id> <principal_id>",
+      missing: "Missing <org_id> and/or <principal_id>.",
     });
     try {
       console.log(JSON.stringify(await getSdk().org(org).members.revoke(principalId), null, 2));
@@ -321,7 +358,7 @@ async function runInvite(args) {
     const a = normalizeArgv(rest);
     assertKnownFlags(a, ["--help", "-h"]);
     const [org] = requirePositionalCount(a, [], {
-      min: 1, max: 1, command: "run402 org invite list <org>", missing: "Missing <org>.",
+      min: 1, max: 1, command: "run402 org invite list <org_id>", missing: "Missing <org_id>.",
     });
     try {
       console.log(JSON.stringify({ invites: await getSdk().org(org).invites.list() }, null, 2));
@@ -338,8 +375,8 @@ async function runInvite(args) {
     const role = flagValue(a, "--role");
     const ttlFlag = flagValue(a, "--ttl-hours");
     const [org, email] = requirePositionalCount(a, valueFlags, {
-      min: 2, max: 2, command: "run402 org invite create <org> <email> [--role <role>]",
-      missing: "Missing <org> and/or <email>.",
+      min: 2, max: 2, command: "run402 org invite create <org_id> <email> [--role <role>]",
+      missing: "Missing <org_id> and/or <email>.",
     });
     const inviteTtlHours = ttlFlag === null ? undefined : parseIntegerFlag("--ttl-hours", ttlFlag, { min: 1, max: 8760 });
     try {
@@ -355,8 +392,8 @@ async function runInvite(args) {
     const a = normalizeArgv(rest);
     assertKnownFlags(a, ["--help", "-h"]);
     const [org, principalId] = requirePositionalCount(a, [], {
-      min: 2, max: 2, command: "run402 org invite rm <org> <principal_id>",
-      missing: "Missing <org> and/or <principal_id>.",
+      min: 2, max: 2, command: "run402 org invite rm <org_id> <principal_id>",
+      missing: "Missing <org_id> and/or <principal_id>.",
     });
     try {
       console.log(JSON.stringify(await getSdk().org(org).invites.revoke(principalId), null, 2));
@@ -393,6 +430,7 @@ export async function run(sub, args) {
     case "list": await list(args); break;
     case "get": await get(args); break;
     case "rename": await rename(args); break;
+    case "payout-wallet": await payoutWallet(args); break;
     case "whoami": await whoami(args); break;
     case "audit": await audit(args); break;
     default:

package/lib/projects.mjs

@@ -18,6 +18,7 @@ Subcommands:
   use   <id>                              Set the active project (used as default for other commands)
   list [--org <id>] [--all]               List your projects from the server (name, site_url, custom domains, org_id, active marker)
   rename <id> --name <label>              Rename a project (fix an auto-generated name)
+  tenant-payments [project_id] [--status <s>]  List redacted tenant x402 payments for priced routes
   get   [id]                              Authoritative server read: status, org, tier, active deploy, mailbox, usage vs limits (live; no keys)
   current                                 Show the active project pointer and validation status
   sql   [id] "<query>" [--file <path>] [--params '<json>']  Run a SQL query (supports parameterized queries)
@@ -44,6 +45,7 @@ Examples:
   run402 projects list --org 11111111-2222-3333-4444-555555555555
   run402 projects list --all
   run402 projects rename prj_abc123 --name "My Site"
+  run402 projects tenant-payments prj_abc123 --status settled
   run402 projects get prj_abc123
   run402 projects current
   run402 projects sql prj_abc123 "SELECT * FROM users LIMIT 5"
@@ -150,6 +152,25 @@ Notes:
 Examples:
   run402 projects rename prj_abc123 --name "My Site"
 	`,
+  "tenant-payments": `run402 projects tenant-payments — List tenant x402 payments
+
+Usage:
+  run402 projects tenant-payments [project_id] [--status <settling|settled|settle_failed|ambiguous>] [--limit N] [--after <cursor>]
+
+Arguments:
+  [project_id]        Project ID (defaults to the active project if omitted)
+
+Options:
+  --status <s>        Optional payment status filter
+  --limit N           Page size (server default 50, max 200)
+  --after <cursor>    Opaque cursor from a previous next_cursor
+
+Notes:
+  - Requires project.tenant_payments.read: org developer+ or a read-scoped
+    project grant/delegate.
+  - Output is the gateway's redacted payment page. Raw X-PAYMENT headers,
+    authorization hashes, and internal metadata are never returned.
+`,
   current: `run402 projects current — Inspect active project selection
 
 Usage:
@@ -544,6 +565,34 @@ async function rename(projectId, args = []) {
   }
 }
 
+async function tenantPayments(projectId, args = []) {
+  const status = flagValue(args, "--status") ?? undefined;
+  const after = flagValue(args, "--after") ?? undefined;
+  const limitFlag = flagValue(args, "--limit");
+  const limit = limitFlag === null ? undefined : Number(limitFlag);
+  if (limitFlag !== null && (!Number.isInteger(limit) || limit <= 0 || limit > 200)) {
+    fail({
+      code: "BAD_FLAG",
+      message: `--limit must be an integer from 1 to 200; got ${limitFlag}.`,
+      details: { flag: "--limit", value: limitFlag },
+    });
+  }
+  const allowed = new Set(["settling", "settled", "settle_failed", "ambiguous"]);
+  if (status !== undefined && !allowed.has(status)) {
+    fail({
+      code: "BAD_FLAG",
+      message: `--status must be one of settling, settled, settle_failed, ambiguous; got ${status}.`,
+      details: { flag: "--status", value: status },
+    });
+  }
+  try {
+    const data = await getSdk().projects.listTenantPayments(projectId, { status, after, limit });
+    console.log(JSON.stringify(data, null, 2));
+  } catch (err) {
+    reportSdkError(err);
+  }
+}
+
 async function get(projectId) {
   try {
     const data = await getSdk().projects.get(projectId);
@@ -793,6 +842,7 @@ const FLAGS_BY_SUB = {
   },
   list: { known: ["--org", "--all"], values: ["--org"] },
   rename: { known: ["--name"], values: ["--name"] },
+  "tenant-payments": { known: ["--status", "--limit", "--after"], values: ["--status", "--limit", "--after"] },
   sql: { known: ["--file", "--params"], values: ["--file", "--params"] },
   costs: { known: ["--window"], values: ["--window"] },
   "apply-expose": { known: ["--file"], values: ["--file"] },
@@ -839,6 +889,7 @@ export async function run(sub, args) {
     case "list":      await list(args); break;
     case "current":   await current(); break;
     case "rename":    { const { projectId, rest } = resolvePositionalProject(args, { rejectBareFirst: true, valueFlags: FLAGS_BY_SUB.rename.values }); await rename(projectId, rest); break; }
+    case "tenant-payments": { const { projectId, rest } = resolvePositionalProject(args, { rejectBareFirst: true, valueFlags: FLAGS_BY_SUB["tenant-payments"].values }); await tenantPayments(projectId, rest); break; }
     case "get":       { const { projectId } = resolvePositionalProject(args, { rejectBareFirst: true }); await get(projectId); break; }
     case "info":      commandMoved("info"); break;
     case "keys":      commandMoved("keys"); break;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "run402",
-  "version": "4.1.0",
+  "version": "4.2.0",
   "description": "CLI for Run402 — provision Postgres databases, deploy static sites, generate images, and manage wallets via x402 and MPP micropayments.",
   "type": "module",
   "bin": {

package/sdk/dist/namespaces/deploy.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"deploy.d.ts","sourceRoot":"","sources":["../../src/namespaces/deploy.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AAkB3C,OAAO,KAAK,EACV,YAAY,EACZ,sBAAsB,EAQtB,WAAW,EACX,oBAAoB,EAEpB,iBAAiB,EACjB,kBAAkB,EAClB,eAAe,EACf,YAAY,EACZ,oBAAoB,EACpB,qBAAqB,EACrB,mBAAmB,EACnB,wBAAwB,EACxB,uBAAuB,EAavB,iBAAiB,EAGjB,YAAY,EACZ,cAAc,EACd,aAAa,EACb,kBAAkB,EAClB,gBAAgB,EAChB,2BAA2B,EAC3B,uBAAuB,EACvB,WAAW,EACX,oBAAoB,EACpB,mBAAmB,EACnB,kBAAkB,EAClB,YAAY,EAEb,MAAM,mBAAmB,CAAC;AAiF3B,qBAAa,MAAM;IACL,OAAO,CAAC,QAAQ,CAAC,MAAM;gBAAN,MAAM,EAAE,MAAM;IAE3C;;;;OAIG;IACG,KAAK,CAAC,IAAI,EAAE,WAAW,EAAE,IAAI,GAAE,YAAiB,GAAG,OAAO,CAAC,YAAY,CAAC;IA4C9E;;;OAGG;IACH,KAAK,CAAC,IAAI,EAAE,WAAW,EAAE,IAAI,GAAE,YAAiB,GAAG,OAAO,CAAC,eAAe,CAAC;IAI3E;;;;OAIG;IACG,IAAI,CACR,IAAI,EAAE,WAAW,EACjB,IAAI,GAAE;QACJ,cAAc,CAAC,EAAE,MAAM,CAAC;QACxB,MAAM,CAAC,EAAE,OAAO,CAAC;QACjB,IAAI,CAAC,EAAE,cAAc,GAAG,cAAc,CAAC;QACvC,YAAY,CAAC,EAAE;YAAE,MAAM,EAAE,MAAM,CAAC;YAAC,eAAe,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC;KACxD,GACL,OAAO,CAAC;QAAE,IAAI,EAAE,YAAY,CAAC;QAAC,WAAW,EAAE,GAAG,CAAC,MAAM,EAAE,UAAU,CAAC,CAAA;KAAE,CAAC;IAQxE;;;;;OAKG;IACG,MAAM,CACV,IAAI,EAAE,YAAY,EAClB,IAAI,EAAE;QACJ,OAAO,EAAE,MAAM,CAAC;QAChB,WAAW,EAAE,GAAG,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;QACrC,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,WAAW,KAAK,IAAI,CAAC;KACxC,GACA,OAAO,CAAC,IAAI,CAAC;IAWhB;;;;;OAKG;IACG,MAAM,CACV,MAAM,EAAE,MAAM,EACd,IAAI,GAAE;QACJ,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,WAAW,KAAK,IAAI,CAAC;QACvC,cAAc,CAAC,EAAE,MAAM,CAAC;QACxB,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,YAAY,CAAC,EAAE;YAAE,MAAM,EAAE,MAAM,CAAC;YAAC,eAAe,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC;KACxD,GACL,OAAO,CAAC,YAAY,CAAC;IASlB,QAAQ,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,GAAE,mBAAwB,GAAG,OAAO,CAAC,kBAAkB,CAAC;IAkC3F;;;;;;;;;OASG;IACG,MAAM,CACV,WAAW,EAAE,MAAM,EACnB,IAAI,GAAE;QAAE,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,WAAW,KAAK,IAAI,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAO,GACtE,OAAO,CAAC,YAAY,CAAC;IAqBxB;;;;;;;;;;;;;;;;;;;;;;;;;;;OA2BG;IACG,OAAO,CACX,OAAO,EAAE,MAAM,EACf,SAAS,EAAE,MAAM,EACjB,IAAI,GAAE,cAAmB,GACxB,OAAO,CAAC,aAAa,CAAC;IA2CzB;;;;OAIG;IACG,MAAM,CACV,WAAW,EAAE,MAAM,EACnB,IAAI,GAAE;QAAE,OAAO,CAAC,EAAE,MAAM,CAAA;KAAO,GAC9B,OAAO,CAAC,iBAAiB,CAAC;IAmB7B;;;;;;OAMG;IACG,IAAI,CACR,IAAI,EAAE,MAAM,GAAG,iBAAiB,GAC/B,OAAO,CAAC,kBAAkB,CAAC;IA6B9B;;;;;;;;OAQG;IACG,MAAM,CACV,WAAW,EAAE,MAAM,EACnB,IAAI,EAAE;QAAE,OAAO,EAAE,MAAM,CAAA;KAAE,GACxB,OAAO,CAAC,oBAAoB,CAAC;IAmBhC;;;;OAIG;IACG,aAAa,CACjB,WAAW,EAAE,MAAM,EACnB,IAAI,EAAE;QAAE,OAAO,EAAE,MAAM,CAAA;KAAE,GACxB,OAAO,CAAC,mBAAmB,CAAC;IAyB/B;;;;OAIG;IACG,gBAAgB,CACpB,WAAW,EAAE,MAAM,EACnB,IAAI,EAAE,wBAAwB,GAC7B,OAAO,CAAC,uBAAuB,CAAC;IAoCnC;;;;OAIG;IACG,UAAU,CAAC,IAAI,EAAE,2BAA2B,GAAG,OAAO,CAAC,gBAAgB,CAAC;IA2B9E;;;;OAIG;IACG,gBAAgB,CACpB,IAAI,EAAE,uBAAuB,GAC5B,OAAO,CAAC,sBAAsB,CAAC;IAqBlC;;;;OAIG;IACG,IAAI,CAAC,IAAI,EAAE,kBAAkB,GAAG,OAAO,CAAC,oBAAoB,CAAC;IA+BnE;;;;OAIG;IACG,OAAO,CAAC,IAAI,EAAE,oBAAoB,GAAG,OAAO,CAAC,qBAAqB,CAAC;CAW1E;AAk5DD;;;;;GAKG;AACH,MAAM,WAAW,UAAU;IACzB,IAAI,OAAO,CAAC,UAAU,CAAC,CAAC;IACxB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;iEAG6D;IAC7D,KAAK,CAAC,EAAE,SAAS,GAAG,OAAO,GAAG,OAAO,CAAC;CACvC"}
+{"version":3,"file":"deploy.d.ts","sourceRoot":"","sources":["../../src/namespaces/deploy.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AAmB3C,OAAO,KAAK,EACV,YAAY,EACZ,sBAAsB,EAQtB,WAAW,EACX,oBAAoB,EAEpB,iBAAiB,EACjB,kBAAkB,EAClB,eAAe,EACf,YAAY,EACZ,oBAAoB,EACpB,qBAAqB,EACrB,mBAAmB,EACnB,wBAAwB,EACxB,uBAAuB,EAavB,iBAAiB,EAGjB,YAAY,EACZ,cAAc,EACd,aAAa,EACb,kBAAkB,EAClB,gBAAgB,EAChB,2BAA2B,EAC3B,uBAAuB,EACvB,WAAW,EACX,oBAAoB,EACpB,mBAAmB,EACnB,kBAAkB,EAClB,YAAY,EAEb,MAAM,mBAAmB,CAAC;AAiF3B,qBAAa,MAAM;IACL,OAAO,CAAC,QAAQ,CAAC,MAAM;gBAAN,MAAM,EAAE,MAAM;IAE3C;;;;OAIG;IACG,KAAK,CAAC,IAAI,EAAE,WAAW,EAAE,IAAI,GAAE,YAAiB,GAAG,OAAO,CAAC,YAAY,CAAC;IA4C9E;;;OAGG;IACH,KAAK,CAAC,IAAI,EAAE,WAAW,EAAE,IAAI,GAAE,YAAiB,GAAG,OAAO,CAAC,eAAe,CAAC;IAI3E;;;;OAIG;IACG,IAAI,CACR,IAAI,EAAE,WAAW,EACjB,IAAI,GAAE;QACJ,cAAc,CAAC,EAAE,MAAM,CAAC;QACxB,MAAM,CAAC,EAAE,OAAO,CAAC;QACjB,IAAI,CAAC,EAAE,cAAc,GAAG,cAAc,CAAC;QACvC,YAAY,CAAC,EAAE;YAAE,MAAM,EAAE,MAAM,CAAC;YAAC,eAAe,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC;KACxD,GACL,OAAO,CAAC;QAAE,IAAI,EAAE,YAAY,CAAC;QAAC,WAAW,EAAE,GAAG,CAAC,MAAM,EAAE,UAAU,CAAC,CAAA;KAAE,CAAC;IAQxE;;;;;OAKG;IACG,MAAM,CACV,IAAI,EAAE,YAAY,EAClB,IAAI,EAAE;QACJ,OAAO,EAAE,MAAM,CAAC;QAChB,WAAW,EAAE,GAAG,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;QACrC,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,WAAW,KAAK,IAAI,CAAC;KACxC,GACA,OAAO,CAAC,IAAI,CAAC;IAWhB;;;;;OAKG;IACG,MAAM,CACV,MAAM,EAAE,MAAM,EACd,IAAI,GAAE;QACJ,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,WAAW,KAAK,IAAI,CAAC;QACvC,cAAc,CAAC,EAAE,MAAM,CAAC;QACxB,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,YAAY,CAAC,EAAE;YAAE,MAAM,EAAE,MAAM,CAAC;YAAC,eAAe,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC;KACxD,GACL,OAAO,CAAC,YAAY,CAAC;IASlB,QAAQ,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,GAAE,mBAAwB,GAAG,OAAO,CAAC,kBAAkB,CAAC;IAkC3F;;;;;;;;;OASG;IACG,MAAM,CACV,WAAW,EAAE,MAAM,EACnB,IAAI,GAAE;QAAE,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,WAAW,KAAK,IAAI,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAO,GACtE,OAAO,CAAC,YAAY,CAAC;IAqBxB;;;;;;;;;;;;;;;;;;;;;;;;;;;OA2BG;IACG,OAAO,CACX,OAAO,EAAE,MAAM,EACf,SAAS,EAAE,MAAM,EACjB,IAAI,GAAE,cAAmB,GACxB,OAAO,CAAC,aAAa,CAAC;IA2CzB;;;;OAIG;IACG,MAAM,CACV,WAAW,EAAE,MAAM,EACnB,IAAI,GAAE;QAAE,OAAO,CAAC,EAAE,MAAM,CAAA;KAAO,GAC9B,OAAO,CAAC,iBAAiB,CAAC;IAmB7B;;;;;;OAMG;IACG,IAAI,CACR,IAAI,EAAE,MAAM,GAAG,iBAAiB,GAC/B,OAAO,CAAC,kBAAkB,CAAC;IA6B9B;;;;;;;;OAQG;IACG,MAAM,CACV,WAAW,EAAE,MAAM,EACnB,IAAI,EAAE;QAAE,OAAO,EAAE,MAAM,CAAA;KAAE,GACxB,OAAO,CAAC,oBAAoB,CAAC;IAmBhC;;;;OAIG;IACG,aAAa,CACjB,WAAW,EAAE,MAAM,EACnB,IAAI,EAAE;QAAE,OAAO,EAAE,MAAM,CAAA;KAAE,GACxB,OAAO,CAAC,mBAAmB,CAAC;IAyB/B;;;;OAIG;IACG,gBAAgB,CACpB,WAAW,EAAE,MAAM,EACnB,IAAI,EAAE,wBAAwB,GAC7B,OAAO,CAAC,uBAAuB,CAAC;IAoCnC;;;;OAIG;IACG,UAAU,CAAC,IAAI,EAAE,2BAA2B,GAAG,OAAO,CAAC,gBAAgB,CAAC;IA2B9E;;;;OAIG;IACG,gBAAgB,CACpB,IAAI,EAAE,uBAAuB,GAC5B,OAAO,CAAC,sBAAsB,CAAC;IAqBlC;;;;OAIG;IACG,IAAI,CAAC,IAAI,EAAE,kBAAkB,GAAG,OAAO,CAAC,oBAAoB,CAAC;IA+BnE;;;;OAIG;IACG,OAAO,CAAC,IAAI,EAAE,oBAAoB,GAAG,OAAO,CAAC,qBAAqB,CAAC;CAW1E;AAk5DD;;;;;GAKG;AACH,MAAM,WAAW,UAAU;IACzB,IAAI,OAAO,CAAC,UAAU,CAAC,CAAC;IACxB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;iEAG6D;IAC7D,KAAK,CAAC,EAAE,SAAS,GAAG,OAAO,GAAG,OAAO,CAAC;CACvC"}

package/sdk/dist/namespaces/deploy.js

@@ -20,7 +20,7 @@
  */
 import { isCiSessionCredentials } from "../ci-credentials.js";
 import { assertCiDeployableSpec } from "./ci.js";
-import { ROUTE_HTTP_METHODS, normalizeDeployResolveRequest, } from "./deploy.types.js";
+import { ROUTE_PRICING_NETWORKS, ROUTE_HTTP_METHODS, normalizeDeployResolveRequest, } from "./deploy.types.js";
 import { ApiError, LocalError, NetworkError, PaymentRequired, Run402DeployError, Unauthorized, isTransferFreezeError, } from "../errors.js";
 import { assertAssetMetadata, assertExifPolicy, } from "./assets-validation.js";
 // ─── Constants ───────────────────────────────────────────────────────────────
@@ -2073,10 +2073,12 @@ const SITE_PUBLIC_PATHS_FIELDS = new Set(["mode", "replace"]);
 const PUBLIC_STATIC_PATH_FIELDS = new Set(["asset", "cache_class"]);
 const SUBDOMAINS_SPEC_FIELDS = new Set(["set", "add", "remove"]);
 const ROUTES_SPEC_FIELDS = new Set(["replace"]);
-const ROUTE_ENTRY_FIELDS = new Set(["pattern", "methods", "target", "acknowledge_readonly"]);
+const ROUTE_ENTRY_FIELDS = new Set(["pattern", "methods", "target", "pricing", "acknowledge_readonly"]);
 const FUNCTION_ROUTE_TARGET_FIELDS = new Set(["type", "name"]);
 const STATIC_ROUTE_TARGET_FIELDS = new Set(["type", "file"]);
 const ROUTE_METHOD_SET = new Set(ROUTE_HTTP_METHODS);
+const ROUTE_PRICING_FIELDS = new Set(["mode", "amount_usd_micros", "pay_to", "networks"]);
+const ROUTE_PRICING_NETWORK_SET = new Set(ROUTE_PRICING_NETWORKS);
 const I18N_SPEC_FIELDS = new Set(["defaultLocale", "locales", "detect", "unknownLocalePolicy"]);
 const I18N_LOCALE_TAG_REGEX = /^[A-Za-z0-9][A-Za-z0-9._-]{0,63}$/;
 const I18N_COOKIE_NAME_REGEX = /^[!#$%&'*+\-.^_`|~0-9A-Za-z]+$/;
@@ -2493,11 +2495,48 @@ function validateRouteEntry(route, resource) {
         }
     }
     const targetType = validateRouteTarget(entry.target, `${resource}.target`);
+    validateRoutePricing(entry.pricing, resource, targetType);
     validateRouteReadOnlyAcknowledgement(entry, targetType, resource);
     if (targetType === "static") {
         validateStaticRouteEntry(entry, resource);
     }
 }
+function validateRoutePricing(pricing, resource, targetType) {
+    if (pricing === undefined)
+        return;
+    if (targetType !== "function") {
+        throw invalidRouteSpec(`ReleaseSpec.${resource}.pricing is only supported on function route targets`, `${resource}.pricing`);
+    }
+    const obj = requireObject(pricing, `${resource}.pricing`);
+    validateKnownFields(obj, `${resource}.pricing`, ROUTE_PRICING_FIELDS);
+    if (obj.mode !== "always") {
+        throw invalidRouteSpec(`ReleaseSpec.${resource}.pricing.mode must be "always"`, `${resource}.pricing.mode`);
+    }
+    if (typeof obj.amount_usd_micros !== "number" || !Number.isSafeInteger(obj.amount_usd_micros) || obj.amount_usd_micros <= 0) {
+        throw invalidRouteSpec(`ReleaseSpec.${resource}.pricing.amount_usd_micros must be a positive safe JSON integer`, `${resource}.pricing.amount_usd_micros`);
+    }
+    if (obj.pay_to !== "org_default_payout") {
+        throw invalidRouteSpec(`ReleaseSpec.${resource}.pricing.pay_to must be "org_default_payout"`, `${resource}.pricing.pay_to`);
+    }
+    if (obj.networks === undefined)
+        return;
+    if (!Array.isArray(obj.networks)) {
+        throw invalidRouteSpec(`ReleaseSpec.${resource}.pricing.networks must be an array`, `${resource}.pricing.networks`);
+    }
+    if (obj.networks.length === 0) {
+        throw invalidRouteSpec(`ReleaseSpec.${resource}.pricing.networks must not be empty; omit networks for production mainnet only`, `${resource}.pricing.networks`);
+    }
+    const seen = new Set();
+    for (const network of obj.networks) {
+        if (typeof network !== "string" || !ROUTE_PRICING_NETWORK_SET.has(network)) {
+            throw invalidRouteSpec(`Unsupported route pricing network ${JSON.stringify(network)} at ReleaseSpec.${resource}.pricing.networks. Supported networks: ${ROUTE_PRICING_NETWORKS.join(", ")}`, `${resource}.pricing.networks`);
+        }
+        if (seen.has(network)) {
+            throw invalidRouteSpec(`ReleaseSpec.${resource}.pricing.networks contains duplicate network ${JSON.stringify(network)}`, `${resource}.pricing.networks`);
+        }
+        seen.add(network);
+    }
+}
 function validateRouteReadOnlyAcknowledgement(entry, targetType, resource) {
     if (entry.acknowledge_readonly === undefined)
         return;