run402 4.93.2 → 4.95.0

package/lib/functions.mjs

@@ -31,7 +31,7 @@ export function parseLogSinceFlag(since) {
   return new Date(ms).toISOString();
 }
 
-/** `--request-id <id>` must be a req_ / fnrun_ / fnatt_ correlation id. */
+/** `--request-id <request_id>` must be a req_ / fnrun_ / fnatt_ correlation id. */
 export function assertLogRequestIdFlag(requestId) {
   if (requestId !== undefined && !FUNCTION_LOG_REQUEST_ID_RE.test(requestId)) {
     fail({
@@ -77,29 +77,29 @@ Usage:
   run402 functions <subcommand> [args...]
 
 Subcommands:
-  deploy <name> --file <file> [--project <id>] [--timeout <s>] [--memory <mb>] [--deps <pkg,...>] [--schedule <cron>]
+  deploy <name> --file <file> [--project <project_id>] [--timeout <s>] [--memory <mb>] [--deps <pkg,...>] [--schedule <cron>]
                                        Deploy a function to a project
-  invoke <name> [--project <id>] [--method <M>] [--body <json> | --body-file <path>] [--idempotency-key <key>] [--wait] [--timeout-ms <ms>] [--poll-interval-ms <ms>] [--raw]
+  invoke <name> [--project <project_id>] [--method <M>] [--body <json> | --body-file <path>] [--idempotency-key <key>] [--wait] [--timeout-ms <ms>] [--poll-interval-ms <ms>] [--raw]
                                        Invoke a deployed function. Default
                                        wraps the SDK result as JSON on stdout.
                                        --raw prints the response body verbatim
                                        (string body → text + newline, JSON
                                        body → pretty-printed JSON).
-  logs   [<name>] [--project <id>] [--tail <n>] [--since <ts>] [--request-id <id>] [--app|--platform|--all] [--follow]
+  logs   [<name>] [--project <project_id>] [--tail <n>] [--since <ts>] [--request-id <request_id>] [--app|--platform|--all] [--follow]
                                        Get function logs (app output by default;
                                        omit <name> with --request-id to search
                                        every function)
   runs   <action> ...                  Create, inspect, cancel, redrive, and
                                        wait for durable function runs
-  update <name> [--project <id>] [--schedule <cron>] [--schedule-remove] [--timeout <s>] [--memory <mb>]
+  update <name> [--project <project_id>] [--schedule <cron>] [--schedule-remove] [--timeout <s>] [--memory <mb>]
                                        Update function schedule or config without re-deploying
-  rebuild [<name>] [--all] [--project <id>]
+  rebuild [<name>] [--all] [--project <project_id>]
                                        Refresh function(s) onto the current platform
                                        runtime (re-bundles from stored source; no
                                        source change). Pass <name> for one function
                                        or --all for every function in the project.
-  list   [--project <id>]              List all functions for a project
-  delete <name> [--project <id>]       Delete a function
+  list   [--project <project_id>]              List all functions for a project
+  delete <name> [--project <project_id>]       Delete a function
 
 Legacy (still supported): a leading prj_... positional selects the project,
 e.g. run402 functions deploy prj_abc123 stripe-webhook --file handler.ts
@@ -138,7 +138,7 @@ const SUB_HELP = {
   deploy: `run402 functions deploy — Deploy a function to a project
 
 Usage:
-  run402 functions deploy <name> --file <file> [--project <id>] [options]
+  run402 functions deploy <name> --file <file> [--project <project_id>] [options]
 
 Legacy (still supported):
   run402 functions deploy <project_id> <name> --file <file> [options]
@@ -147,7 +147,7 @@ Arguments:
   <name>              Function name (used in the invoke URL path)
 
 Options:
-  --project <id>      Target project ID (defaults to the active project)
+  --project <project_id>      Target project ID (defaults to the active project)
   --file <file>       Required: path to the function source file
   --timeout <s>       Runtime timeout in seconds
   --memory <mb>       Memory in MB
@@ -183,7 +183,7 @@ Examples:
   invoke: `run402 functions invoke — Invoke a deployed function
 
 Usage:
-  run402 functions invoke <name> [--project <id>] [options]
+  run402 functions invoke <name> [--project <project_id>] [options]
 
 Legacy (still supported):
   run402 functions invoke <project_id> <name> [options]
@@ -192,7 +192,7 @@ Arguments:
   <name>              Function name
 
 Options:
-  --project <id>      Target project ID (defaults to the active project)
+  --project <project_id>      Target project ID (defaults to the active project)
   --method <M>        HTTP method (default POST)
   --body <json>       Inline JSON request body (ignored for GET/HEAD). The CLI
                       validates it before sending; shell-corrupted JSON fails.
@@ -232,8 +232,8 @@ Examples:
   logs: `run402 functions logs — Fetch or tail function logs
 
 Usage:
-  run402 functions logs <name> [--project <id>] [options]
-  run402 functions logs --request-id <id> [--project <id>] [options]
+  run402 functions logs <name> [--project <project_id>] [options]
+  run402 functions logs --request-id <request_id> [--project <project_id>] [options]
 
 Legacy (still supported):
   run402 functions logs <project_id> <name> [options]
@@ -244,11 +244,11 @@ Arguments:
                       and each entry carries its "function".
 
 Options:
-  --project <id>      Target project ID (defaults to the active project)
+  --project <project_id>      Target project ID (defaults to the active project)
   --tail <n>          Number of most-recent entries (default 50, max 1000).
                       Bounds the read BEFORE the origin filter below.
   --since <ts>        ISO timestamp or epoch ms; only entries after this
-  --request-id <id>   Only entries correlated to this req_ (the
+  --request-id <request_id>   Only entries correlated to this req_ (the
                       x-run402-request-id response header), fnrun_, or fnatt_ id
   --app               Only the function's own output (default). Lambda runtime
                       lines (INIT_START, START/END/REPORT RequestId, billed
@@ -274,12 +274,12 @@ Examples:
   runs: `run402 functions runs — Manage durable function runs
 
 Usage:
-  run402 functions runs create <function_name> --event-type <type> --idempotency-key <key> [--project <id>] [options]
-  run402 functions runs list <function_name> [--project <id>] [options]
-  run402 functions runs get <run_id> [--project <id>]
-  run402 functions runs logs <run_id> [--project <id>] [--tail <n>] [--since <ts>]
-  run402 functions runs cancel <run_id> [--project <id>]
-  run402 functions runs redrive <run_id> [--project <id>] [options]
+  run402 functions runs create <function_name> --event-type <type> --idempotency-key <key> [--project <project_id>] [options]
+  run402 functions runs list <function_name> [--project <project_id>] [options]
+  run402 functions runs get <run_id> [--project <project_id>]
+  run402 functions runs logs <run_id> [--project <project_id>] [--tail <n>] [--since <ts>]
+  run402 functions runs cancel <run_id> [--project <project_id>]
+  run402 functions runs redrive <run_id> [--project <project_id>] [options]
 
 Legacy (still supported): a leading prj_... positional selects the project,
 e.g. run402 functions runs get <project_id> <run_id>
@@ -313,7 +313,7 @@ Examples:
   update: `run402 functions update — Update function config without re-deploying
 
 Usage:
-  run402 functions update <name> [--project <id>] [options]
+  run402 functions update <name> [--project <project_id>] [options]
 
 Legacy (still supported):
   run402 functions update <project_id> <name> [options]
@@ -322,7 +322,7 @@ Arguments:
   <name>              Function name
 
 Options:
-  --project <id>      Target project ID (defaults to the active project)
+  --project <project_id>      Target project ID (defaults to the active project)
   --schedule <cron>   New cron schedule (pass '' to clear)
   --schedule-remove   Explicitly remove the schedule
   --timeout <s>       Runtime timeout in seconds
@@ -339,8 +339,8 @@ Examples:
   rebuild: `run402 functions rebuild — Refresh function(s) onto the current platform runtime
 
 Usage:
-  run402 functions rebuild <name> [--project <id>]
-  run402 functions rebuild --all [--project <id>]
+  run402 functions rebuild <name> [--project <project_id>]
+  run402 functions rebuild --all [--project <project_id>]
 
 Legacy (still supported):
   run402 functions rebuild <project_id> <name>
@@ -350,7 +350,7 @@ Arguments:
   <name>              Function name to rebuild (omit when using --all)
 
 Options:
-  --project <id>      Target project ID (defaults to the active project)
+  --project <project_id>      Target project ID (defaults to the active project)
   --all               Rebuild every function in the project
 
 What it does:
@@ -382,13 +382,13 @@ Examples:
   list: `run402 functions list — List all functions for a project
 
 Usage:
-  run402 functions list [--project <id>]
+  run402 functions list [--project <project_id>]
 
 Legacy (still supported):
   run402 functions list <project_id>
 
 Options:
-  --project <id>      Target project ID (defaults to the active project)
+  --project <project_id>      Target project ID (defaults to the active project)
 
 Examples:
   run402 functions list --project prj_abc123
@@ -396,7 +396,7 @@ Examples:
   delete: `run402 functions delete — Delete a function from a project
 
 Usage:
-  run402 functions delete <name> [--project <id>]
+  run402 functions delete <name> [--project <project_id>]
 
 Legacy (still supported):
   run402 functions delete <project_id> <name>
@@ -405,7 +405,7 @@ Arguments:
   <name>              Function name to delete
 
 Options:
-  --project <id>      Target project ID (defaults to the active project)
+  --project <project_id>      Target project ID (defaults to the active project)
 
 Examples:
   run402 functions delete stripe-webhook --project prj_abc123
@@ -532,7 +532,7 @@ function validateInvokeJsonBody(value, source, projectId, name) {
 }
 
 async function logs(projectId, name, args) {
-  const usage = "run402 functions logs <name> [--project <id>] [--tail <n>] [--since <ts>] [--request-id <id>] [--app|--platform|--all] [--follow]  |  run402 functions logs --request-id <id> [--project <id>]";
+  const usage = "run402 functions logs <name> [--project <project_id>] [--tail <n>] [--since <ts>] [--request-id <request_id>] [--app|--platform|--all] [--follow]  |  run402 functions logs --request-id <request_id> [--project <project_id>]";
   assertRequiredProject(projectId, usage);
   assertKnownFlags(
     args,
@@ -921,7 +921,7 @@ async function update(projectId, name, args) {
 
 const UNLOCKED_DEPS_HINT =
   "Function was deployed before dependency locking — redeploy from source " +
-  "(run402 functions deploy <id> <name> --file <file>) to refresh its runtime instead.";
+  "(run402 functions deploy <project_id> <name> --file <file>) to refresh its runtime instead.";
 
 // Annotate a `rebuild --all` batch with an actionable hint on per-function
 // CANNOT_REBUILD_UNLOCKED_DEPS refusals. The batch endpoint returns 200 with
@@ -1031,7 +1031,7 @@ export async function run(sub, args) {
     console.log(SUB_HELP[sub] || HELP);
     process.exit(0);
   }
-  // Project selection (CLI-wide convention): `--project <id>` wins, else a
+  // Project selection (CLI-wide convention): `--project <project_id>` wins, else a
   // legacy leading `prj_...` positional, else the active project. Computed
   // lazily so unknown subcommands never trip project resolution.
   const select = () => resolveProjectSelector(args);

package/lib/gitvault-daemon.mjs

@@ -4,7 +4,7 @@
  * Holds the WARM things — the loaded session module (whose top-level await
  * pulls the whole SDK graph), the owned dispatcher's live h2 connection,
  * signer precomputation, the paid stack — and re-reads the SMALL things
- * (keystore, pins, wallet binding, allowance, env-derived config) fresh per
+ * (keystore, pins, wallet binding, wallet, env-derived config) fresh per
  * forwarded session, so no cache-invalidation class exists (D2).
  *
  * SINGLE-SESSION BY DESIGN (D6 as applied): a session is {cwd, env}

package/lib/gitvault-scaffold.mjs

@@ -33,7 +33,7 @@ import { resolveOwningOrgId } from "./org-context.mjs";
  * @param {string} [options.orgId] Explicit owning org. Resolved via `resolveOwningOrgId` when omitted.
  * @param {boolean} [options.createRepoIfMissing] Opt into `git init`-ing `repoDir` when it is not a repository yet.
  * @param {boolean} [options.nested] Scaffold `repoDir` as its OWN repository even when it lies inside another one (`Gitvault.scaffoldRemote`'s `nested`).
- * @param {string} [options.nestedCommand] The caller's own `--nested` spelling for the `create_nested_repo` next_action (default: the SDK's `run402 repos create --nested --project <id>`).
+ * @param {string} [options.nestedCommand] The caller's own `--nested` spelling for the `create_nested_repo` next_action (default: the SDK's `run402 repos create --nested --project <project_id>`).
  * @returns {Promise<{status: "scaffolded"|"skipped"|"error", reason?: string, toplevel?: string|null, next_actions?: object[], gitvault: object|null, gitvault_skipped?: string, gitvault_error?: {code: string, message: string}}>}
  */
 export async function scaffoldGitvaultRemote({ repoDir = process.cwd(), projectId, orgId, createRepoIfMissing = false, nested = false, nestedCommand } = {}) {
@@ -74,7 +74,7 @@ export async function scaffoldGitvaultRemote({ repoDir = process.cwd(), projectI
     }
     // `allocated: false` is stated, not left to be inferred: this is local
     // git only — no vault exists for the project yet (allocation happens
-    // lazily on first push, or explicitly via `run402 repos create --project <id>`).
+    // lazily on first push, or explicitly via `run402 repos create --project <project_id>`).
     out.status = "scaffolded";
     out.gitvault = { ...remote, allocated: false };
   } catch (err) {

package/lib/gitvault.mjs

@@ -30,7 +30,7 @@ one answers a structured COMMAND_MOVED/COMMAND_REMOVED error for exactly one
 release; after that the spelling is reserved and answers nothing at all.
 
 Moved:
-  gitvault init       -> repos create --project <id>   (or repos create <name> for a NEW project)
+  gitvault init       -> repos create --project <project_id>   (or repos create <name> for a NEW project)
   gitvault status     -> repos view
   gitvault snapshot   -> repos snapshot
   gitvault policy     -> repos policy
@@ -49,7 +49,7 @@ Run \`run402 repos --help\` for the current surface.
 
 /** Renamed verbs: `gitvault <key>` -> the exact `repos` command that means the same thing now. */
 const MOVED = {
-  init: { command: "run402 repos create --project <id>", why: "repos create absorbs allocation — pass --project to adopt an existing project, or a name to provision a new one." },
+  init: { command: "run402 repos create --project <project_id>", why: "repos create absorbs allocation — pass --project to adopt an existing project, or a name to provision a new one." },
   status: { command: "run402 repos view", why: "repos view is the side-effect-free repo inspection command; it never materializes refs the way status --refs used to." },
   snapshot: { command: "run402 repos snapshot", why: "same verb, new noun." },
   policy: { command: "run402 repos policy", why: "same verb, new noun." },

package/lib/grants.mjs

@@ -15,9 +15,9 @@ Usage:
   run402 grants <subcommand> [args...]
 
 Subcommands:
-  create <wallet> --capability <cap> [--project <id>] [--policy <json>] [--expires <iso8601>]
+  create <wallet> --capability <cap> [--project <project_id>] [--policy <json>] [--expires <iso8601>]
                                  Issue a capability grant (owner of the project's org)
-  revoke <grant_id> [--project <id>]
+  revoke <grant_id> [--project <project_id>]
                                  Revoke a capability grant
 
 Legacy (still supported):
@@ -40,7 +40,7 @@ const SUB_HELP = {
   create: `run402 grants create — issue a per-project capability grant
 
 Usage:
-  run402 grants create <wallet> --capability <cap> [--project <id>] [--policy <json>] [--expires <iso8601>]
+  run402 grants create <wallet> --capability <cap> [--project <project_id>] [--policy <json>] [--expires <iso8601>]
 
 Legacy (still supported):
   run402 grants create <project_id> <wallet> <capability> [options]
@@ -49,7 +49,7 @@ Arguments:
   <wallet>       EVM address or named wallet the grant is issued to
 
 Options:
-  --project <id>      Project to grant access to (defaults to the active project)
+  --project <project_id>      Project to grant access to (defaults to the active project)
   --capability <cap>  e.g. deploy, functions:write (alternative to the legacy positional)
   --policy <json>     Capability-scoping policy object (gateway-interpreted)
   --expires <iso8601> Expiry timestamp; omit for a non-expiring grant
@@ -59,7 +59,7 @@ Requires you to be an owner of the project's org.
   revoke: `run402 grants revoke — revoke a per-project capability grant
 
 Usage:
-  run402 grants revoke <grant_id> [--project <id>]
+  run402 grants revoke <grant_id> [--project <project_id>]
 
 Legacy (still supported):
   run402 grants revoke <project_id> <grant_id>
@@ -81,7 +81,7 @@ async function create(args) {
   const pos = requirePositionalCount(rest, CREATE_VALUE_FLAGS, {
     min: expected,
     max: expected,
-    command: "run402 grants create <wallet> --capability <cap> [--project <id>] [--policy <json>] [--expires <iso8601>]",
+    command: "run402 grants create <wallet> --capability <cap> [--project <project_id>] [--policy <json>] [--expires <iso8601>]",
     missing: capabilityFlag ? "Missing <wallet>." : "Missing <wallet> and/or <capability>.",
   });
   const wallet = pos[0];
@@ -107,7 +107,7 @@ async function revoke(args) {
   const [grantId] = requirePositionalCount(rest, ["--project"], {
     min: 1,
     max: 1,
-    command: "run402 grants revoke <grant_id> [--project <id>]",
+    command: "run402 grants revoke <grant_id> [--project <project_id>]",
     missing: "Missing <grant_id>.",
   });
   try {

package/lib/image.mjs

@@ -17,7 +17,7 @@ Options:
   --org <org_id>      The paying organization when the wallet belongs to more
                       than one (Lightning rail); x402 ignores it. Omitted, it
                       is the current org (RUN402_ORG, the .run402.json binding,
-                      run402 org use, or the active project's owning org)
+                      run402 orgs use, or the active project's owning org)
   --help, -h          Show this help message
 
 Examples:
@@ -29,9 +29,9 @@ Output (without --output):
   { "aspect": "square", "content_type": "image/png", "image": "<base64>" }
 
 Notes:
-  - Requires a funded allowance (run402 allowance create && run402 allowance fund)
+  - Requires a funded wallet (run402 init && run402 wallets fund)
   - Payments are processed automatically via x402 micropayments (USDC on the
-    network your allowance targets — Base Sepolia on the prototype tier, Base
+    network your wallet targets — Base Sepolia on the prototype tier, Base
     mainnet on paid tiers) or over Lightning from a rail: lightning wallet
   - Use --output to save directly to a file instead of printing base64
 `;
@@ -53,10 +53,10 @@ Options:
   --org <org_id>      The paying organization when the wallet belongs to more
                       than one (Lightning rail); x402 ignores it. Omitted, it
                       is the current org (RUN402_ORG, the .run402.json binding,
-                      run402 org use, or the active project's owning org)
+                      run402 orgs use, or the active project's owning org)
 
 Notes:
-  - Requires a funded allowance (run402 allowance create && run402 allowance fund)
+  - Requires a funded wallet (run402 init && run402 wallets fund)
   - Payments are processed automatically via x402 micropayments, or over
     Lightning from a rail: lightning wallet
   - Use --output to save directly to a file instead of printing base64
@@ -112,7 +112,7 @@ export async function run(sub, args) {
 
   // The paying organization rides the ONE shared org chain (--org, then
   // RUN402_ORG / RUN402_ROOM / RUN402_PROJECT_ID, then the .run402.json
-  // binding, then `org use` / the active project's owning org). Only the
+  // binding, then `orgs use` / the active project's owning org). Only the
   // Lightning rail reads it — a multi-org principal is refused
   // ORGANIZATION_SELECTION_REQUIRED without one — and x402 ignores it, so
   // resolving it is never a reason to refuse an x402 purchase: `optional`
@@ -150,12 +150,12 @@ function reportOrgSelectionError(err, org) {
       code,
       message: err.message,
       hint:
-        `Pass --org <org_id> (one of: ${ids.join(", ") || "run402 org list"}) or select a current organization with ` +
-        "run402 org use <org_id>. Only the Lightning rail needs it; x402 ignores it.",
+        `Pass --org <org_id> (one of: ${ids.join(", ") || "run402 orgs list"}) or select a current organization with ` +
+        "run402 orgs use <org_id>. Only the Lightning rail needs it; x402 ignores it.",
       details: { ...details, organization_ids: ids, org_source: org?.source ?? null, org_source_detail: org?.sourceDetail ?? null },
       next_actions: err.nextActions ?? [
         nextAction("edit_request", { command: 'run402 image generate "<prompt>" --org <org_id>', why: "Name the paying organization on this call." }),
-        nextAction("edit_request", { command: "run402 org use <org_id>", why: "Select a current organization for this profile." }),
+        nextAction("edit_request", { command: "run402 orgs use <org_id>", why: "Select a current organization for this profile." }),
       ],
     });
   }
@@ -165,7 +165,7 @@ function reportOrgSelectionError(err, org) {
       message: err.message,
       hint:
         `The paying organization ${org.orgId} came from ${org.sourceDetail} (${org.source}) and this principal holds no billing role there. ` +
-        "Pass --org <org_id> for an organization you can bill, or run: run402 org use <org_id>",
+        "Pass --org <org_id> for an organization you can bill, or run: run402 orgs use <org_id>",
       details: { ...details, org_source: org.source, org_source_detail: org.sourceDetail },
       next_actions: err.nextActions,
     });