run402 4.93.2 → 4.95.0

package/lib/init.mjs

@@ -1,4 +1,4 @@
-import { readAllowance, saveAllowance, loadKeyStore, configDir, configureApiBase, getActiveProjectId } from "./config.mjs";
+import { readWallet, saveWallet, loadKeyStore, configDir, configureApiBase, getActiveProjectId } from "./config.mjs";
 import { getSdk } from "./sdk.mjs";
 import { fail } from "./sdk-errors.mjs";
 import { upDeployAction, deployAction } from "./next-actions.mjs";
@@ -13,7 +13,7 @@ const USDC_SEPOLIA = "0x036CbD53842c5426634e7929541eC2318f3dCF7e";
 const PATH_USD = "0x20c0000000000000000000000000000000000000";
 const TEMPO_RPC = "https://rpc.moderato.tempo.xyz/";
 
-const HELP = `run402 init — Set up allowance, funding, and check tier status
+const HELP = `run402 init — Set up wallet, funding, and check tier status
 
 Usage:
   run402 init                Set up with x402 (Base Sepolia) — default
@@ -21,19 +21,19 @@ Usage:
                              Configure a Run402 Core/API target for the active
                              profile without setting up Cloud payment.
   run402 init mpp            Set up with MPP (Tempo Moderato)
-  run402 init lightning      Set up the Lightning allowance: a budgeted wallet
+  run402 init lightning      Set up the Lightning wallet: a budgeted wallet
                              minted on Run402's Hub (custody: Run402), plus the
-                             Base allowance as the x402 fallback. Lightning
+                             Base wallet as the x402 fallback. Lightning
                              becomes the default rail for paid calls.
   run402 init <rail> --switch-rail
                              Switch the persisted payment rail to <rail>.
-                             Required when an allowance already exists on
+                             Required when a wallet already exists on
                              the other rail; protects scripted re-runs from
                              silently flipping billing networks.
 
 Options:
-  --voucher <code> Redeem a promo code after setup and credit this
-                  organization. Never blocks setup: if the code is invalid,
+  --voucher <code> Redeem a promo code after setup into this
+                  organization's allowance. Never blocks setup: if the code is invalid,
                   expired, already used, or the call fails, init warns and
                   finishes normally with 'voucher_error' in the summary.
                   Equivalent to running 'run402 redeem <code>' afterwards.
@@ -41,7 +41,7 @@ Options:
                   for a self-hosted Run402 Core Gateway, e.g.
                   http://my-core:4020.
   --switch-rail   Confirm switching the persisted payment rail. Re-running
-                  init with the SAME rail as the existing allowance is always
+                  init with the SAME rail as the existing wallet is always
                   idempotent and does not need this flag.
   --name <name>   Set this principal's display name (1-64 chars) — what promotion
                   credit, \`run402 up\`'s room presence, and audit surfaces show
@@ -49,7 +49,7 @@ Options:
                   client (claude-code, codex, cursor, or grok; RUN402_CLIENT=<name>
                   declares one that is not auto-detected) and otherwise writes
                   nothing; RUN402_AGENT_NAME=<name> sets or overrides it. Change
-                  it any time with \`run402 org whoami --set-name <name>\`.
+                  it any time with \`run402 whoami --set-name <name>\`.
   --git-remote    Also 'git init' the current directory when it is not a
                   repository yet, so the gitvault remote can be added there.
                   Opt-in on purpose: init is often run outside a project
@@ -60,7 +60,7 @@ Options:
 Output:
   Stdout is a JSON summary { config_dir, wallet, rail, network, balances,
   tier, projects_saved, active_project_id, next_step }. Progress lines
-  (Config / Allowance / Balance / Tier / Next) go to stderr so a human
+  (Config / Wallet / Balance / Tier / Next) go to stderr so a human
   re-running interactively sees what's happening while a script piping stdout
   to jq stays clean. The summary also carries { gitvault } (the scaffolded
   remote), or { gitvault: null, gitvault_skipped } naming why no remote was
@@ -69,17 +69,17 @@ Output:
   project the gitvault scaffold acted on.
 
   init scaffolds the git remote only. It does NOT allocate the vault — that is
-  \`run402 repos create --project <id>\`, which mints key material and a
+  \`run402 repos create --project <project_id>\`, which mints key material and a
   recovery receipt and therefore stays an explicit step.
 
 Steps (idempotent when re-run with the same rail; pass --switch-rail to change rails):
   1. Creates config directory (~/.config/run402)
-  2. Creates agent allowance if none exists
+  2. Creates agent wallet if none exists
   3. Checks on-chain balance; requests faucet if zero
-  4. Shows current tier subscription status
+  4. Shows current tier and lease status
   5. Lists local project count
-  6. Suggests next step (run402 up -y when no tier is held yet — it subscribes
-     the prototype tier as part of the first deploy — or deploy apply)
+  6. Suggests next step (run402 up -y when no tier is held yet — it sets
+     the prototype tier as part of the first deploy — or run402 deploy)
 
 Run this once to get started, or again to check your setup.
 `;
@@ -246,7 +246,7 @@ export async function run(args = []) {
   // scaffolder's help, not the rail-setup help. The rest of init's
   // payment-rail setup is intentionally orthogonal — agents typically
   // run `run402 init astro <dir>` to scaffold AND `run402 init` once
-  // to set up allowance / tier.
+  // to set up wallet / tier.
   if (args[0] === "astro") {
     const { runInitAstro } = await import("./init-astro.mjs");
     await runInitAstro(args.slice(1));
@@ -286,7 +286,7 @@ export async function run(args = []) {
       });
     }
     // This branch configures a Core/API target and returns without setting up
-    // an allowance — there is no organization here to credit, and promo
+    // a wallet — there is no organization here to credit, and promo
     // vouchers are a Run402 Cloud concept. Say so instead of accepting the
     // flag and silently dropping it.
     if (voucherCode) {
@@ -350,12 +350,12 @@ export async function run(args = []) {
   const requestedRail = isLightning ? "lightning" : isMpp ? "mpp" : "x402";
   const switchRailConfirmed = args.includes("--switch-rail");
 
-  const existingAllowance = readAllowance();
-  if (existingAllowance?.rail && existingAllowance.rail !== requestedRail && !switchRailConfirmed) {
+  const existingWallet = readWallet();
+  if (existingWallet?.rail && existingWallet.rail !== requestedRail && !switchRailConfirmed) {
     fail({
       code: "RAIL_SWITCH_REQUIRES_CONFIRM",
-      message: `Already on rail '${existingAllowance.rail}'. Pass --switch-rail to switch to '${requestedRail}'.`,
-      details: { current_rail: existingAllowance.rail, requested_rail: requestedRail },
+      message: `Already on rail '${existingWallet.rail}'. Pass --switch-rail to switch to '${requestedRail}'.`,
+      details: { current_rail: existingWallet.rail, requested_rail: requestedRail },
     });
   }
 
@@ -387,28 +387,28 @@ export async function run(args = []) {
   mkdirSync(CONFIG_DIR, { recursive: true });
   line("Config", CONFIG_DIR);
 
-  // 2. Allowance
-  let allowance = existingAllowance;
-  const previousRail = allowance?.rail;
-  if (!allowance) {
+  // 2. Wallet
+  let localWallet = existingWallet;
+  const previousRail = localWallet?.rail;
+  if (!localWallet) {
     const { generatePrivateKey, privateKeyToAccount } = await import("viem/accounts");
     const privateKey = generatePrivateKey();
     const account = privateKeyToAccount(privateKey);
-    allowance = { address: account.address, privateKey, created: new Date().toISOString(), funded: false, rail: requestedRail };
-    saveAllowance(allowance);
-    line("Allowance", `${short(allowance.address)} (created)`);
+    localWallet = { address: account.address, privateKey, created: new Date().toISOString(), funded: false, rail: requestedRail };
+    saveWallet(localWallet);
+    line("Wallet", `${short(localWallet.address)} (created)`);
   } else {
     // Update rail if switching (a wallet leaving Lightning keeps its pairing on disk until revoked).
-    if (allowance.rail !== requestedRail) {
-      allowance = { ...allowance, rail: requestedRail };
-      saveAllowance(allowance);
+    if (localWallet.rail !== requestedRail) {
+      localWallet = { ...localWallet, rail: requestedRail };
+      saveWallet(localWallet);
     }
-    line("Allowance", short(allowance.address));
+    line("Wallet", short(localWallet.address));
   }
 
   const walletName = getActiveProfile();
   const walletMeta = readMeta(walletName);
-  summary.wallet = { local_label: walletName, server_label: walletMeta?.label ?? null, address: allowance.address };
+  summary.wallet = { local_label: walletName, server_label: walletMeta?.label ?? null, address: localWallet.address };
   summary.network = isLightning ? "bitcoin-mainnet" : isMpp ? "tempo-moderato" : "base-sepolia";
   summary.rail = requestedRail;
 
@@ -432,7 +432,7 @@ export async function run(args = []) {
     const client = createPublicClient({ chain: tempoModerato, transport: http() });
 
     try {
-      const raw = await client.readContract({ address: PATH_USD, abi: USDC_ABI, functionName: "balanceOf", args: [allowance.address] });
+      const raw = await client.readContract({ address: PATH_USD, abi: USDC_ABI, functionName: "balanceOf", args: [localWallet.address] });
       balance = Number(raw);
     } catch {}
 
@@ -442,7 +442,7 @@ export async function run(args = []) {
         const res = await fetch(TEMPO_RPC, {
           method: "POST",
           headers: { "Content-Type": "application/json" },
-          body: JSON.stringify({ jsonrpc: "2.0", method: "tempo_fundAddress", params: [allowance.address], id: 1 }),
+          body: JSON.stringify({ jsonrpc: "2.0", method: "tempo_fundAddress", params: [localWallet.address], id: 1 }),
         });
         const data = await res.json();
         if (data.result) {
@@ -452,12 +452,12 @@ export async function run(args = []) {
           for (let i = 0; i < 30; i++) {
             await new Promise(r => setTimeout(r, 1000));
             try {
-              const raw = await client.readContract({ address: PATH_USD, abi: USDC_ABI, functionName: "balanceOf", args: [allowance.address] });
+              const raw = await client.readContract({ address: PATH_USD, abi: USDC_ABI, functionName: "balanceOf", args: [localWallet.address] });
               balance = Number(raw);
               if (balance > 0) break;
             } catch {}
           }
-          saveAllowance({ ...allowance, funded: true, lastFaucet: new Date().toISOString() });
+          saveWallet({ ...localWallet, funded: true, lastFaucet: new Date().toISOString() });
           if (balance > 0) {
             line("Balance", `${(balance / 1e6).toFixed(2)} pathUSD (funded)`);
           } else {
@@ -482,24 +482,24 @@ export async function run(args = []) {
     const client = createPublicClient({ chain: baseSepolia, transport: http() });
 
     try {
-      const raw = await client.readContract({ address: USDC_SEPOLIA, abi: USDC_ABI, functionName: "balanceOf", args: [allowance.address] });
+      const raw = await client.readContract({ address: USDC_SEPOLIA, abi: USDC_ABI, functionName: "balanceOf", args: [localWallet.address] });
       balance = Number(raw);
     } catch {}
 
     if (balance === 0) {
       line("Balance", "0 USDC — requesting faucet...");
       try {
-        await getSdk().allowance.faucet(allowance.address);
+        await getSdk().wallets.faucet(localWallet.address);
         // Poll for up to 30s
         for (let i = 0; i < 30; i++) {
           await new Promise(r => setTimeout(r, 1000));
           try {
-            const raw = await client.readContract({ address: USDC_SEPOLIA, abi: USDC_ABI, functionName: "balanceOf", args: [allowance.address] });
+            const raw = await client.readContract({ address: USDC_SEPOLIA, abi: USDC_ABI, functionName: "balanceOf", args: [localWallet.address] });
             balance = Number(raw);
             if (balance > 0) break;
           } catch {}
         }
-        saveAllowance({ ...allowance, funded: true, lastFaucet: new Date().toISOString() });
+        saveWallet({ ...localWallet, funded: true, lastFaucet: new Date().toISOString() });
         if (balance > 0) {
           line("Balance", `${(balance / 1e6).toFixed(2)} USDC (funded)`);
         } else {
@@ -517,8 +517,8 @@ export async function run(args = []) {
 
   // 3b. Promo code, when one was handed to us.
   //
-  // This runs BEFORE the balance read below so the credited amount shows up in
-  // `prepaid_credit_usd_micros` without a second round-trip, and AFTER the
+  // This runs BEFORE the balance read below so the redeemed amount shows up in
+  // `allowance_usd_micros` without a second round-trip, and AFTER the
   // wallet exists so the redemption authenticates as this agent.
   //
   // NOTHING here may fail init. An advertised gift that dead-ends a build is
@@ -530,12 +530,12 @@ export async function run(args = []) {
   if (voucherCode) {
     try {
       const redemption = await getSdk().vouchers.redeem(voucherCode);
-      const credited = (redemption.amount_usd_micros / 1_000_000).toFixed(2);
+      const redeemed = (redemption.amount_usd_micros / 1_000_000).toFixed(2);
       line(
         "Voucher",
         redemption.already_redeemed
-          ? `$${credited} already credited (no second credit)`
-          : `$${credited} credited`,
+          ? `$${redeemed} already added to the allowance (not added twice)`
+          : `$${redeemed} added to the allowance`,
       );
       summary.voucher = {
         voucher_id: redemption.voucher_id,
@@ -544,12 +544,12 @@ export async function run(args = []) {
         next_actions: Array.isArray(redemption.next_actions) ? redemption.next_actions : [],
       };
       // Relate the gift to what it buys, in the gateway's own words: its
-      // `set_tier` next action names the largest tier the credit covers, and
-      // that purchase settles from credit — no wallet funding step between.
+      // `set_tier` next action names the largest tier the allowance covers, and
+      // that purchase settles from the allowance — no wallet funding step between.
       const covers = summary.voucher.next_actions.find((a) => a?.type === "set_tier" && typeof a.cli === "string");
       if (covers) {
         const tierName = covers.highest_affordable_tier ?? covers.cli.replace(/^run402 tier set\s+/, "");
-        line("Credit", `$${credited} covers ${tierName} — ${covers.cli} (settles from credit; no wallet funds needed)`);
+        line("Allowance", `$${redeemed} covers ${tierName} — ${covers.cli} (settles from the allowance; no wallet funds needed)`);
       }
     } catch (err) {
       // Faithful: name what failed and keep going. `voucher_error` is a
@@ -564,15 +564,15 @@ export async function run(args = []) {
     }
   }
 
-  // Balances mirror `run402 status`: the on-chain figure above plus the
-  // Run402-held prepaid credit (rail-independent). Prepaid credit is fetched
-  // best-effort so a billing read failure never blocks setup.
-  const billing = await getSdk().billing.checkBalance(allowance.address).catch(() => null);
+  // Balances mirror `run402 status`: the on-chain wallet figure above plus the
+  // organization's Run402-held allowance (rail-independent). The allowance is
+  // fetched best-effort so a billing read failure never blocks setup.
+  const billing = await getSdk().billing.checkBalance(localWallet.address).catch(() => null);
   const hasBilling = billing && billing.exists !== false;
   summary.balances = {
     on_chain_usd_micros: balance,
     on_chain_token: isMpp ? "pathUSD" : "USDC",
-    prepaid_credit_usd_micros: hasBilling ? billing.available_usd_micros : null,
+    allowance_usd_micros: hasBilling ? billing.allowance_usd_micros : null,
     held_usd_micros: hasBilling ? (billing.held_usd_micros ?? 0) : null,
   };
 
@@ -582,7 +582,7 @@ export async function run(args = []) {
     line("Note", `Switched from ${previousRail} — ${prev} balance still available if you switch back`);
   }
 
-  // 3b. The Lightning allowance (mpp-lightning-over-nwc): a budgeted wallet
+  // 3b. The Lightning wallet (mpp-lightning-over-nwc): a budgeted wallet
   // on Run402's Hub, minted by the platform, its pairing kept beside the
   // Base key. Never printed. A Hub that is not configured leaves the rail
   // on Lightning with x402 as the live fallback, and says so.
@@ -591,14 +591,14 @@ export async function run(args = []) {
     try {
       const { ensureLightningWallet, describeLightning, readLightningBalance } = await import("./lightning-wallet.mjs");
       const result = await ensureLightningWallet();
-      allowance = result.allowance;
+      localWallet = result.localWallet;
       const settled = result.outcome === "stored" || result.outcome === "present";
-      const balance = settled ? await readLightningBalance(allowance) : null;
-      summary.lightning = { ...(describeLightning(allowance, result.wallet, balance) ?? {}), outcome: result.outcome };
+      const balance = settled ? await readLightningBalance(localWallet) : null;
+      summary.lightning = { ...(describeLightning(localWallet, result.wallet, balance) ?? {}), outcome: result.outcome };
       if (result.outcome === "stored") {
         line("Lightning", `wallet minted on Run402's Hub (${result.wallet.budget_sats} sats budget, ${result.wallet.starter_sats} starter)`);
       } else if (result.outcome === "present") {
-        line("Lightning", `wallet ${allowance.lightning.wallet_id}${balance ? ` — ${balance.balance_sats} sats` : ""}`);
+        line("Lightning", `wallet ${localWallet.lightning.wallet_id}${balance ? ` — ${balance.balance_sats} sats` : ""}`);
       } else if (result.outcome === "minting") {
         line("Lightning", "the platform is still minting the wallet — rerun `run402 init lightning` in a few seconds");
       } else if (result.outcome === "unavailable") {
@@ -736,7 +736,7 @@ export async function run(args = []) {
     if (rows.length === 1) {
       line("Org", `${rows[0].org_id}${rows[0].display_name ? ` (${rows[0].display_name})` : ""}`);
     } else if (rows.length > 1) {
-      line("Org", `${rows.length} organizations — run402 org list`);
+      line("Org", `${rows.length} organizations — run402 orgs list`);
     }
   } catch {
     // Best-effort, exactly like the billing read: a listing failure must never
@@ -751,7 +751,7 @@ export async function run(args = []) {
   summary.funding = fundingRecovery(fundingError, fundingPending);
   const fundingBlocked = fundingBlocksBootstrap(summary.funding, {
     activeTier: !tierMissing, onChainBalance: balance,
-    prepaidBalance: summary.balances.prepaid_credit_usd_micros,
+    allowanceBalance: summary.balances.allowance_usd_micros,
     lightningBalance: summary.lightning?.balance_sats,
   });
   summary.next_actions = [tierMissing ? upDeployAction() : deployAction()];
@@ -759,7 +759,7 @@ export async function run(args = []) {
     const quotedWallet = `'${walletName.replaceAll("'", "'\\''")}'`;
     summary.next_actions = summary.funding.next_actions.map(action => ({ ...action,
       ...(["retry", "check_balance"].includes(action.type) ? {
-        command: `run402 --wallet ${quotedWallet} allowance ${action.type === "retry" ? "fund" : "balance"}`,
+        command: `run402 --wallet ${quotedWallet} wallets ${action.type === "retry" ? "fund" : "balance"}`,
       } : {}),
     }));
   }
@@ -769,19 +769,19 @@ export async function run(args = []) {
     write(`  ${summary.next_actions[0].why}`);
     if (summary.next_step) write(`  Next: ${summary.next_step}`);
   } else if (tierMissing) {
-    // `up -y` subscribes the prototype tier itself as part of the first
+    // `up -y` sets the prototype tier itself as part of the first
     // deploy; `init` never buys the tier, so the one command that finishes
     // the cold start is `up`, with `tier set` named as the standalone option.
-    const creditCovers = summary.voucher?.next_actions?.find((a) => a?.type === "set_tier" && typeof a.cli === "string");
+    const allowanceCovers = summary.voucher?.next_actions?.find((a) => a?.type === "set_tier" && typeof a.cli === "string");
     write("  Next: run402 up -y");
-    write("        Deploy with run402 up -y — it subscribes the prototype tier (free on testnet) as part of the first deploy.");
-    if (creditCovers) {
-      write(`        Your credit covers ${creditCovers.highest_affordable_tier ?? "a larger tier"}: ${creditCovers.cli} — then run402 up -y.`);
+    write("        Deploy with run402 up -y — it sets the prototype tier (free on testnet) as part of the first deploy.");
+    if (allowanceCovers) {
+      write(`        Your allowance covers ${allowanceCovers.highest_affordable_tier ?? "a larger tier"}: ${allowanceCovers.cli} — then run402 up -y.`);
     } else {
-      write("        Or subscribe separately: run402 tier set prototype.");
+      write("        Or set it separately: run402 tier set prototype.");
     }
   } else {
-    write("  Ready to deploy. Run: run402 deploy apply --manifest app.json");
+    write("  Ready to deploy. Run: run402 deploy --manifest app.json");
   }
   write("");
 

package/lib/jobs.mjs

@@ -48,13 +48,13 @@ const SUB_HELP = {
   submit: `run402 jobs submit — Submit a managed job request
 
 Usage:
-  run402 jobs submit --file <path> [--project <id>]
-  run402 jobs submit --stdin [--project <id>]
+  run402 jobs submit --file <path> [--project <project_id>]
+  run402 jobs submit --stdin [--project <project_id>]
 
 Options:
   --file <path>     Read the JSON submit request from a file
   --stdin           Read the JSON submit request from stdin
-  --project <id>    Project ID (defaults to the active project)
+  --project <project_id>    Project ID (defaults to the active project)
 
 Example request:
   {
@@ -72,36 +72,36 @@ Example request:
   get: `run402 jobs get — Get a managed job run
 
 Usage:
-  run402 jobs get <job_id> [--project <id>]
+  run402 jobs get <job_id> [--project <project_id>]
 
 Options:
-  --project <id>    Project ID (defaults to the active project)
+  --project <project_id>    Project ID (defaults to the active project)
 `,
   logs: `run402 jobs logs — Read managed job logs
 
 Usage:
-  run402 jobs logs <job_id> [--project <id>] [--tail <n>] [--since <iso>]
+  run402 jobs logs <job_id> [--project <project_id>] [--tail <n>] [--since <iso>]
 
 Options:
-  --project <id>    Project ID (defaults to the active project)
+  --project <project_id>    Project ID (defaults to the active project)
   --tail <n>        Maximum entries to return (gateway max: 1000)
   --since <iso>     Only include logs at or after this ISO-8601 timestamp
 `,
   cancel: `run402 jobs cancel — Cancel a managed job run
 
 Usage:
-  run402 jobs cancel <job_id> [--project <id>]
+  run402 jobs cancel <job_id> [--project <project_id>]
 
 Options:
-  --project <id>    Project ID (defaults to the active project)
+  --project <project_id>    Project ID (defaults to the active project)
 `,
   purge: `run402 jobs purge — Purge all managed job runs for a project
 
 Usage:
-  run402 jobs purge [--project <id>]
+  run402 jobs purge [--project <project_id>]
 
 Options:
-  --project <id>    Project ID (defaults to the active project)
+  --project <project_id>    Project ID (defaults to the active project)
 
 Deletes all project-scoped managed-job run records. Queued/running jobs are
 included in the purge; known active runner instances are terminated first.
@@ -110,7 +110,7 @@ Prints { deleted_jobs, cancelled_active_jobs, terminated_instances }.
   artifacts: `run402 jobs artifacts — Download outputs from a completed managed job
 
 Usage:
-  run402 jobs artifacts get <job_id> <file> --output <path> [--project <id>]
+  run402 jobs artifacts get <job_id> <file> --output <path> [--project <project_id>]
 
 Actions:
   get <job_id> <file>   Download the named artifact to a local file
@@ -121,14 +121,14 @@ recorded filenames on a given run.
   "artifacts get": `run402 jobs artifacts get — Download a completed job's artifact
 
 Usage:
-  run402 jobs artifacts get <job_id> --file <name> --output <path> [--project <id>]
+  run402 jobs artifacts get <job_id> --file <name> --output <path> [--project <project_id>]
 
 Legacy (still supported):
-  run402 jobs artifacts get <job_id> <file> --output <path> [--project <id>]
+  run402 jobs artifacts get <job_id> <file> --output <path> [--project <project_id>]
 
 Options:
   --output, -o <path>   Local destination path (required)
-  --project <id>        Project ID (defaults to the active project)
+  --project <project_id>        Project ID (defaults to the active project)
 
 The job must be completed and the filename must be in its recorded artifact
 set (see the 'artifacts' map from 'run402 jobs get <job_id>'); otherwise the

package/lib/lightning-wallet.mjs

@@ -1,18 +1,18 @@
 /**
- * The Lightning allowance on the CLI: mint the agent's budgeted wallet on
- * Run402's Hub, keep its pairing in the active profile's allowance.json
+ * The Lightning wallet on the CLI: mint the agent's budgeted wallet on
+ * Run402's Hub, keep its pairing in the active profile's wallet.json
  * beside the Base key, report its balance, revoke it. Shared by
  * `run402 init lightning`, `run402 wallets lightning …`, and
- * `run402 allowance status`. The pairing secret is never printed.
+ * `run402 wallets current`. The pairing secret is never printed.
  */
-import { readAllowance, saveAllowance } from "../core-dist/allowance.js";
+import { readWallet, saveWallet } from "../core-dist/wallet.js";
 import { getSdk } from "./sdk.mjs";
 
 export const LIGHTNING_MINT_TIMEOUT_MS = 45_000;
 
 /** Public facts only: never the pairing. */
-export function describeLightning(allowance, wallet = null, balance = null) {
-  const local = allowance?.lightning ?? null;
+export function describeLightning(localWallet, wallet = null, balance = null) {
+  const local = localWallet?.lightning ?? null;
   if (!local && !wallet) return null;
   return {
     wallet_id: wallet?.wallet_id ?? local?.wallet_id ?? null,
@@ -29,8 +29,8 @@ export function describeLightning(allowance, wallet = null, balance = null) {
 }
 
 /** Balance and remaining budget over NWC, best-effort (null on any failure). */
-export async function readLightningBalance(allowance) {
-  const nwc = allowance?.lightning?.nwc;
+export async function readLightningBalance(localWallet) {
+  const nwc = localWallet?.lightning?.nwc;
   if (!nwc) return null;
   try {
     const { NwcWallet, closeNwcConnections } = await import("#sdk/node");
@@ -46,9 +46,9 @@ export async function readLightningBalance(allowance) {
   }
 }
 
-function storePairing(allowance, wallet) {
+function storePairing(localWallet, wallet) {
   const next = {
-    ...allowance,
+    ...localWallet,
     rail: "lightning",
     lightning: {
       wallet_id: wallet.wallet_id,
@@ -60,46 +60,46 @@ function storePairing(allowance, wallet) {
       minted_at: wallet.activated_at ?? new Date().toISOString(),
     },
   };
-  saveAllowance(next);
+  saveWallet(next);
   return next;
 }
 
 /**
  * Ensure the active profile holds an active Lightning wallet. Returns
- * `{ allowance, wallet, outcome }` where outcome is `stored` (pairing just
+ * `{ localWallet, wallet, outcome }` where outcome is `stored` (pairing just
  * saved), `present` (already held locally), `minting` (the platform is still
  * minting; rerun later), `unavailable` (no Hub on this gateway), or
  * `pairing_lost` (the wallet is active but its one-time pairing was handed to
  * another machine; revoke and mint again).
  */
 export async function ensureLightningWallet(options = {}) {
-  let allowance = readAllowance();
-  if (!allowance) throw new Error("no allowance configured; run `run402 init` first");
-  if (allowance.lightning?.nwc) {
+  let localWallet = readWallet();
+  if (!localWallet) throw new Error("no local wallet configured; run `run402 init` first");
+  if (localWallet.lightning?.nwc) {
     let wallet = null;
     try { wallet = await getSdk().agent.lightningWallet.get(); } catch { /* offline read is fine */ }
-    if (wallet && wallet.status !== "active") return { allowance, wallet, outcome: wallet.status };
-    return { allowance, wallet, outcome: "present" };
+    if (wallet && wallet.status !== "active") return { localWallet, wallet, outcome: wallet.status };
+    return { localWallet, wallet, outcome: "present" };
   }
   let wallet;
   try {
     wallet = await getSdk().agent.lightningWallet.mint({ timeoutMs: options.timeoutMs ?? LIGHTNING_MINT_TIMEOUT_MS });
   } catch (err) {
     const code = err?.body?.code ?? err?.code;
-    if (code === "LIGHTNING_WALLET_NOT_AVAILABLE") return { allowance, wallet: null, outcome: "unavailable", error: err };
-    if (code === "LIGHTNING_WALLET_STILL_MINTING") return { allowance, wallet: null, outcome: "minting", error: err };
+    if (code === "LIGHTNING_WALLET_NOT_AVAILABLE") return { localWallet, wallet: null, outcome: "unavailable", error: err };
+    if (code === "LIGHTNING_WALLET_STILL_MINTING") return { localWallet, wallet: null, outcome: "minting", error: err };
     throw err;
   }
-  if (wallet.status === "minting") return { allowance, wallet, outcome: "minting" };
-  if (wallet.status !== "active") return { allowance, wallet, outcome: wallet.status };
-  if (typeof wallet.pairing !== "string") return { allowance, wallet, outcome: "pairing_lost" };
-  allowance = storePairing(allowance, wallet);
-  return { allowance, wallet, outcome: "stored" };
+  if (wallet.status === "minting") return { localWallet, wallet, outcome: "minting" };
+  if (wallet.status !== "active") return { localWallet, wallet, outcome: wallet.status };
+  if (typeof wallet.pairing !== "string") return { localWallet, wallet, outcome: "pairing_lost" };
+  localWallet = storePairing(localWallet, wallet);
+  return { localWallet, wallet, outcome: "stored" };
 }
 
 /** Revoke on the platform and forget the pairing locally; the rail returns to x402. */
 export async function revokeLightningWallet() {
-  const allowance = readAllowance();
+  const localWallet = readWallet();
   let wallet = null;
   try {
     wallet = await getSdk().agent.lightningWallet.revoke();
@@ -107,9 +107,9 @@ export async function revokeLightningWallet() {
     const code = err?.body?.code ?? err?.code;
     if (code !== "LIGHTNING_WALLET_NOT_FOUND") throw err;
   }
-  if (allowance) {
-    const { lightning: _dropped, ...rest } = allowance;
-    saveAllowance({ ...rest, rail: rest.rail === "lightning" ? "x402" : rest.rail });
+  if (localWallet) {
+    const { lightning: _dropped, ...rest } = localWallet;
+    saveWallet({ ...rest, rail: rest.rail === "lightning" ? "x402" : rest.rail });
   }
   return wallet;
 }

package/lib/live.mjs

@@ -23,7 +23,7 @@ Usage:
 Options:
   --tables <names>  Comma-separated live table names (tables with "live": true in the
                     expose manifest). Required.
-  --project <id>    Project to read (defaults to the active project)
+  --project <project_id>    Project to read (defaults to the active project)
   --cursor <c>      Resume from a cursor (a previous "cursor" or a change's cursor)
   --as <audience>   anon (project anon key; public-policy tables) or service (service
                     key; every hint, including owner-scoped ones). Default anon.