run402 4.70.3 → 4.70.4

package/gitvault-surface.json

@@ -1,5 +1,5 @@
 {
-  "surface_version": "4.70.3",
+  "surface_version": "4.70.4",
   "verbs": [
     "repos create",
     "repos list",

package/lib/wallet-context.mjs

@@ -9,7 +9,8 @@
  * into the env var here, at the edge.
  *
  * Precedence (highest first):
- *   1. --wallet <name> / --profile <name>   (flag)
+ *   1. --wallet <name> / --profile <name>   (flag; under `repos`, only --wallet —
+ *      `repos create|mirror|recover --profile <name>` is the AWS credential profile)
  *   2. RUN402_WALLET / RUN402_PROFILE        (env)
  *   3. nearest .run402.local.json/.run402.json (directory binding, walk up)
  *   4. config.json active_wallet              (global `wallets use`)
@@ -41,6 +42,11 @@ export { findBindingKey, bindingFilePath, readBindingFile };
 
 const DEFAULT = "default";
 const GLOBAL_FLAGS = new Set(["--wallet", "--profile"]);
+// `repos` owns `--profile` itself (the AWS credential profile for a BYO
+// destination, a mirror, or a recovery source), so under that command only
+// `--wallet` selects the wallet; RUN402_WALLET and the directory binding still
+// apply. Stripping `--profile` there made the documented s3 flags unreachable.
+const OWNS_PROFILE_FLAG = new Set(["repos"]);
 // The `wallets` group is the management + escape surface — it must work even
 // when selection is ambiguous (so you can `wallets unbind`), and it validates
 // its own positional targets. `init` creates wallets, so it must not fail
@@ -50,7 +56,8 @@ const EXISTENCE_EXEMPT = new Set(["wallets", "init", "doctor"]);
 
 /**
  * Split the global --wallet/--profile flag (and its value) out of argv so the
- * subcommand never sees it. Pure: no core imports, no side effects. Returns
+ * subcommand never sees it — except `--profile` under a command that owns the
+ * flag (OWNS_PROFILE_FLAG), which is passed through untouched. Pure: no core imports, no side effects. Returns
  * the cleaned argv and the selected flag (`{ flag, value }` or null). Last
  * occurrence wins. A missing value is left as `value: undefined` for
  * resolveWallet to reject with a precise error.
@@ -58,16 +65,26 @@ const EXISTENCE_EXEMPT = new Set(["wallets", "init", "doctor"]);
 export function splitWalletFlag(rawArgv = []) {
   const argv = [];
   let flag = null;
+  // The command word: the first positional that is not the value of a global flag.
+  let first;
+  for (let i = 0; i < rawArgv.length && first === undefined; i++) {
+    const a = rawArgv[i];
+    if (typeof a !== "string" || a.startsWith("-")) continue;
+    if (i > 0 && GLOBAL_FLAGS.has(rawArgv[i - 1])) continue;
+    first = a;
+  }
+  const ownsProfile = OWNS_PROFILE_FLAG.has(first);
+  const isGlobal = (name) => GLOBAL_FLAGS.has(name) && !(ownsProfile && name === "--profile");
   for (let i = 0; i < rawArgv.length; i++) {
     const a = rawArgv[i];
     if (typeof a === "string" && a.startsWith("--") && a.includes("=")) {
       const name = a.slice(0, a.indexOf("="));
-      if (GLOBAL_FLAGS.has(name)) {
+      if (isGlobal(name)) {
         flag = { flag: name, value: a.slice(a.indexOf("=") + 1) };
         continue;
       }
     }
-    if (typeof a === "string" && GLOBAL_FLAGS.has(a)) {
+    if (typeof a === "string" && isGlobal(a)) {
       const next = rawArgv[i + 1];
       if (next === undefined || (typeof next === "string" && next.startsWith("-"))) {
         flag = { flag: a, value: undefined };

package/lib/wallet-context.test.mjs

@@ -71,6 +71,18 @@ describe("splitWalletFlag", () => {
     assert.deepEqual(r.argv, ["deploy", "apply", "--manifest", "x"]);
     assert.equal(r.walletFlag.value, "foo");
   });
+  it("leaves --profile to `repos`, which owns it as the AWS credential profile", () => {
+    const r = splitWalletFlag(["repos", "create", "byo-1", "--byo", "s3://b/p", "--profile", "acme", "--region", "us-east-1"]);
+    assert.equal(r.walletFlag, null);
+    assert.deepEqual(r.argv, ["repos", "create", "byo-1", "--byo", "s3://b/p", "--profile", "acme", "--region", "us-east-1"]);
+    const m = splitWalletFlag(["--wallet", "w", "repos", "mirror", "s3://m", "--profile=acme"]);
+    assert.deepEqual(m.walletFlag, { flag: "--wallet", value: "w" });
+    assert.deepEqual(m.argv, ["repos", "mirror", "s3://m", "--profile=acme"]);
+    const rec = splitWalletFlag(["repos", "recover", "s3://m", "--out", "./r", "--profile", "acme"]);
+    assert.equal(rec.walletFlag, null);
+    assert.ok(rec.argv.includes("--profile") && rec.argv.includes("acme"));
+  });
+
   it("accepts --profile as an alias", () => {
     const r = splitWalletFlag(["--profile", "p", "status"]);
     assert.equal(r.walletFlag.flag, "--profile");

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "run402",
-  "version": "4.70.3",
+  "version": "4.70.4",
   "description": "CLI for Run402 — full-stack backend infrastructure for AI agents: Postgres, auth, storage, serverless functions and atomic deploys. Paid with x402/MPP. Includes $0.03 image generation.",
   "type": "module",
   "bin": {