run402 4.94.0 → 4.95.0

package/lib/projects.mjs

@@ -14,27 +14,26 @@ Usage:
 
 Subcommands:
   quote                                   Show pricing tiers
-  provision [--tier <tier>] [--name <n>] [--org <id>]  Provision a new Postgres project
-  use   <id>                              Set the active project (used as default for other commands)
-  list [--org <id>] [--all]               List your projects from the server (name, site_url, custom domains, org_id, active marker)
-  rename <id> --name <label>              Rename a project (fix an auto-generated name)
+  provision [--tier <tier>] [--name <n>] [--org <org_id>]  Provision a new Postgres project
+  use   <project_id>                      Set the active project (used as default for other commands)
+  list [--org <org_id>] [--all]               List your projects from the server (name, site_url, custom domains, org_id, active marker)
+  rename <project_id> --name <label>      Rename a project (fix an auto-generated name)
   tenant-payments [project_id] [--status <s>]  List redacted tenant x402 payments for priced routes
-  get   [id]                              Authoritative server read: status, org, tier, active deploy, mailbox, usage vs limits (live; no keys)
+  get   [project_id]                      Authoritative server read: status, org, tier, active deploy, mailbox, usage vs limits (live; no keys)
   current                                 Show the active project pointer and validation status
-  sql   "<query>" [--project <id>] [--file <path>] [--params '<json>']  Run a SQL query (supports parameterized queries)
-  rest  <table> [--query "<params>"] [--project <id>]  Query a table via the REST API (PostgREST)
-  usage [id]                              Show compute/storage usage for a project
-  costs [id] [--window <w>]               Show admin-only per-project revenue/cost/margin
-  schema [id]                             Inspect the database schema
-  apply-expose [id] <manifest_json>       Apply a declarative authorization manifest
-  apply-expose [id] --file <path>         Apply a manifest from a JSON file
-  validate-expose [id] <manifest_json>    Validate an authorization manifest without applying it
-  validate-expose [id] --file <path>      Validate a manifest file without mutating the project
-  get-expose   [id]                       Get the current authorization manifest
-  delete [id] --confirm                   Immediately and irreversibly delete a project (cascade purge) and remove from local state. Requires --confirm.
-  promote-user [id] <email>               Promote a user to project_admin role
-  demote-user  [id] <email>               Demote a user from project_admin role
-  export [id] [archive options]           Export a portable Run402 Core archive
+  sql   "<query>" [--project <project_id>] [--file <path>] [--params '<json>']  Run a SQL query (supports parameterized queries)
+  rest  <table> [--query "<params>"] [--project <project_id>]  Query a table via the REST API (PostgREST)
+  usage [project_id]              Show compute/storage usage for a project
+  costs [project_id] [--window <w>]       Show admin-only per-project revenue/cost/margin
+  schema [project_id]             Inspect the database schema
+  apply-expose [project_id] <manifest_json>       Apply a declarative authorization manifest
+  apply-expose [project_id] --file <path>         Apply a manifest from a JSON file
+  validate-expose [project_id] <manifest_json>    Validate an authorization manifest without applying it
+  validate-expose [project_id] --file <path>      Validate a manifest file without mutating the project
+  get-expose   [project_id]                       Get the current authorization manifest
+  delete [project_id] --confirm                   Immediately and irreversibly delete a project (cascade purge) and remove from local state. Requires --confirm.
+  promote-user [project_id] <email>               Promote a user to project_admin role
+  demote-user  [project_id] <email>               Demote a user from project_admin role
 
 Examples:
   run402 projects quote
@@ -59,7 +58,6 @@ Examples:
   run402 projects apply-expose prj_abc123 --file manifest.json
   run402 projects get-expose prj_abc123
   run402 projects delete prj_abc123 --confirm
-  run402 projects export prj_abc123 --wait --output ./project.r402ar --json
 
 Global options (any command):
   --wallet <name>   Use a named wallet (profile) for this command. Precedence:
@@ -67,15 +65,15 @@ Global options (any command):
                     'run402 wallets use' default > 'default'. See 'run402 wallets'.
 
 Notes:
-  - <id> is the project_id shown in 'run402 projects list' (prefix: 'prj_')
-  - Most commands that take <id> default to the active project when omitted
-    (set it with 'run402 projects use <id>'). Project IDs start with 'prj_';
+  - <project_id> is the project_id shown in 'run402 projects list' (prefix: 'prj_')
+  - Most commands that take <project_id> default to the active project when omitted
+    (set it with 'run402 projects use <project_id>'). Project IDs start with 'prj_';
     any first positional that doesn't is treated as the next argument instead.
   - 'list', 'get', and 'use' are SERVER-authoritative project identity flows.
     Local project keys live under 'run402 credentials project-keys ...'.
   - 'list' is a SERVER read, not the local key cache: it shows every project the
     active wallet can reach (membership-scoped), with name, site_url, custom
-    domains, and org_id. '--org <id>' filters to one org; '--all' reads every
+    domains, and org_id. '--org <org_id>' filters to one org; '--all' reads every
     project you can reach across all your orgs (as your sign-in session after
     'run402 login', else as the current wallet). The 'active' marker still
     comes from local state.
@@ -108,10 +106,10 @@ const SUB_HELP = {
   list: `run402 projects list — List your projects from the server
 
 Usage:
-  run402 projects list [--org <id>] [--all]
+  run402 projects list [--org <org_id>] [--all]
 
 Options:
-  --org <id>          Filter to projects owned by one org (organization).
+  --org <org_id>          Filter to projects owned by one org (organization).
                       Authorize-before-reveal: a non-member or guessed id is a
                       403; a non-UUID id is a 400.
   --all               Read every project you can reach across all your orgs
@@ -135,10 +133,10 @@ Examples:
 	  rename: `run402 projects rename — Rename a project
 
 Usage:
-  run402 projects rename <id> --name <label>
+  run402 projects rename <project_id> --name <label>
 
 Arguments:
-  <id>                Project ID (prefix: 'prj_'). Required.
+  <project_id>                Project ID (prefix: 'prj_'). Required.
 
 Options:
   --name <label>      New display name (1-200 chars, no control characters).
@@ -183,12 +181,12 @@ Notes:
   provision: `run402 projects provision — Provision a new Postgres project
 
 Usage:
-  run402 projects provision [--tier <tier>] [--name <name>] [--org <id>] [--idempotency-key <key>]
+  run402 projects provision [--tier <tier>] [--name <name>] [--org <org_id>] [--idempotency-key <key>]
 
 Options:
   --tier <tier>       Tier for the new project (default: prototype)
   --name <name>       Human-readable name for the project
-  --org <id>          Provision into an EXISTING org (needs developer+ on it).
+  --org <org_id>          Provision into an EXISTING org (needs developer+ on it).
                       Omit for the cold-start path. Tier is org-governed.
   --idempotency-key <key>  Retry-safe key: re-running with the same key returns
                       the existing project instead of duplicating it. Auto-derived
@@ -209,8 +207,8 @@ Examples:
   sql: `run402 projects sql — Run a SQL query against a project's database
 
 Usage:
-  run402 projects sql "<query>" [--project <id>] [options]
-  run402 projects sql --file <path> [--project <id>] [options]
+  run402 projects sql "<query>" [--project <project_id>] [options]
+  run402 projects sql --file <path> [--project <project_id>] [options]
 
 Legacy (still supported):
   run402 projects sql <prj_id> "<query>" [options]
@@ -219,7 +217,7 @@ Arguments:
   <query>             Inline SQL query (quote it to preserve spaces)
 
 Options:
-  --project <id>      Project ID (defaults to the active project; a leading
+  --project <project_id>      Project ID (defaults to the active project; a leading
                       prj_... positional is also still accepted)
   --file <path>       Read SQL from a file instead of an inline query
   --params '<json>'   JSON array of parameters for a parameterized query
@@ -232,10 +230,10 @@ Examples:
   costs: `run402 projects costs — Show admin-only per-project finance
 
 Usage:
-  run402 projects costs [id] [--window <24h|7d|30d|90d>]
+  run402 projects costs [project_id] [--window <24h|7d|30d|90d>]
 
 Arguments:
-  [id]                Project ID (defaults to the active project if omitted)
+  [project_id]                Project ID (defaults to the active project if omitted)
 
 Options:
   --window <w>        Finance window (default: 30d). One of: 24h, 7d, 30d, 90d
@@ -258,12 +256,12 @@ Examples:
   "validate-expose": `run402 projects validate-expose — Validate an authorization manifest without applying it
 
 Usage:
-  run402 projects validate-expose [id] <manifest_json> [options]
-  run402 projects validate-expose [id] --file <path> [options]
-  cat manifest.json | run402 projects validate-expose [id] [options]
+  run402 projects validate-expose [project_id] <manifest_json> [options]
+  run402 projects validate-expose [project_id] --file <path> [options]
+  cat manifest.json | run402 projects validate-expose [project_id] [options]
 
 Arguments:
-  [id]                Optional project ID. When omitted, the active project is
+  [project_id]                Optional project ID. When omitted, the active project is
                       used if one is set; otherwise validation is projectless.
   <manifest_json>     Inline auth/expose manifest JSON.
 
@@ -328,7 +326,7 @@ async function provision(args) {
       code: "BAD_USAGE",
       message: "--org must not be empty.",
       details: { field: "--org" },
-      hint: "Pass an org id (run402 org list), or omit --org for the cold-start path.",
+      hint: "Pass an org id (run402 orgs list), or omit --org for the cold-start path.",
     });
   }
   // Validate --name when provided. Omitted --name lets the server pick a
@@ -452,7 +450,7 @@ async function validateExpose(args = []) {
       fail({
         code: "BAD_USAGE",
         message: `Unexpected extra argument: ${arg}`,
-        hint: "run402 projects validate-expose [id] <manifest_json>",
+        hint: "run402 projects validate-expose [project_id] <manifest_json>",
       });
     }
   }
@@ -460,7 +458,7 @@ async function validateExpose(args = []) {
     fail({
       code: "BAD_USAGE",
       message: "Provide either inline manifest JSON or --file <path>, not both.",
-      hint: "run402 projects validate-expose [id] --file manifest.json",
+      hint: "run402 projects validate-expose [project_id] --file manifest.json",
     });
   }
   if (migrationFile && migrationSql !== null) {
@@ -571,7 +569,7 @@ async function rename(projectId, args = []) {
     fail({
       code: "BAD_USAGE",
       message: "Missing --name.",
-      hint: "run402 projects rename <id> --name \"My Site\"",
+      hint: "run402 projects rename <project_id> --name \"My Site\"",
     });
   }
   try {
@@ -649,7 +647,7 @@ function commandMoved(name) {
   fail({
     code: "COMMAND_MOVED",
     message: `run402 projects ${name} moved to the explicit local credential-cache surface.`,
-    hint: "Use `run402 credentials project-keys status/export --project <id>`.",
+    hint: "Use `run402 credentials project-keys status/export --project <project_id>`.",
     details: {
       old_command: `projects ${name}`,
       new_command: name === "keys" ? "credentials project-keys export --reveal" : "credentials project-keys status",
@@ -658,12 +656,12 @@ function commandMoved(name) {
     next_actions: [
       {
         type: "run_command",
-        command: "run402 credentials project-keys status --project <id>",
+        command: "run402 credentials project-keys status --project <project_id>",
         why: "Inspect cached key presence without revealing secrets.",
       },
       {
         type: "run_command",
-        command: "run402 credentials project-keys export --project <id> --reveal",
+        command: "run402 credentials project-keys export --project <project_id> --reveal",
         why: "Reveal cached project keys only when you explicitly need secret material.",
       },
     ],
@@ -733,7 +731,7 @@ async function rest(projectId, restArgs = []) {
   if (!table) {
     fail({
       code: "BAD_USAGE",
-      message: "Missing <table> argument. Usage: run402 projects rest <table> [--query \"<query>\"] [--project <id>]",
+      message: "Missing <table> argument. Usage: run402 projects rest <table> [--query \"<query>\"] [--project <project_id>]",
       hint: "Run 'run402 projects schema' to list tables.",
     });
   }
@@ -886,10 +884,6 @@ const FLAGS_BY_SUB = {
     values: ["--project", "--file", "--migration-file", "--migration-sql"],
   },
   delete: { known: ["--project", "--confirm"], values: ["--project"] },
-  export: {
-    known: ["--project", "--scope", "--auth", "--consistency", "--idempotency-key", "--output", "--poll-interval", "--timeout", "--wait", "--json", "--json-stream"],
-    values: ["--project", "--scope", "--auth", "--consistency", "--idempotency-key", "--output", "--poll-interval", "--timeout"],
-  },
 };
 
 function validateFlags(sub, args) {
@@ -937,11 +931,6 @@ export async function run(sub, args) {
     case "validate-expose": await validateExpose(args); break;
     case "get-expose":   { const { projectId } = resolveProjectSelector(args, { rejectBareFirst: true }); await getExpose(projectId); break; }
     case "delete":    { const { projectId, rest } = resolveProjectSelector(args, { rejectBareFirst: true }); await deleteProject(projectId, rest); break; }
-    case "export": {
-      const { run } = await import("./cloud.mjs");
-      await run("archives", ["create", ...args]);
-      break;
-    }
     case "promote-user": { const { projectId, rest } = resolveProjectSelector(args); await promoteUser(projectId, rest[0]); break; }
     case "demote-user":  { const { projectId, rest } = resolveProjectSelector(args); await demoteUser(projectId, rest[0]); break; }
     default:

package/lib/repos.mjs

@@ -63,9 +63,9 @@ Usage:
   run402 repos <verb> [options] — fifteen verbs, tiered by how often you reach for them:
 
 Common:
-  run402 repos create [name]  [--org <org_id>] [--dir <path>] [--nested] [--tier <tier>] [--project <id>]
+  run402 repos create [name]  [--org <org_id>] [--dir <path>] [--nested] [--tier <tier>] [--project <project_id>]
                               [--byo <s3://bucket/prefix>] [--profile <name> | --ambient] [--region <r>] [--endpoint <url>] [--no-init]
-  run402 repos view           [--project <id>] [--repo <repo_id>] [--human]
+  run402 repos view           [--project <project_id>] [--repo <repo_id>] [--human]
   run402 repos list           [--org <org_id>] [--human]
 
 Then plain git, forever:
@@ -73,38 +73,38 @@ Then plain git, forever:
   git clone run402::<org>/<repo>
 
 Handoff (pass a working tree to another agent):
-  run402 repos handoff [--project <id>] [--repo <repo_id>] [--ttl <seconds>] [--role <role>]
+  run402 repos handoff [--project <project_id>] [--repo <repo_id>] [--ttl <seconds>] [--role <role>]
                         [--include-sensitive <glob>]... [--note-file <path>] [--json] [--list] [--revoke <handoff_id>]
                         (the Handoff Note is JSON piped on stdin when not using --note-file)
   run402 repos resume  <kgh1_…|--key-stdin> [--to <dir>] [--no-init] [--json]
 
 Invite (bring a second agent into the SAME work, dirty tree included):
-  run402 repos invite  [--project <id>] [--repo <repo_id>] [--room <key>] [--ttl <seconds>] [--role <role>]
+  run402 repos invite  [--project <project_id>] [--repo <repo_id>] [--room <key>] [--ttl <seconds>] [--role <role>]
                         [--include-sensitive <glob>]... [--note-file <path>] [--json] [--list] [--revoke <invite_id>]
                         (the Invite Note is JSON piped on stdin when not using --note-file)
   run402 repos join    <kgi1_…|--key-stdin> [--to <dir>] [--no-init] [--json]
 
 Occasional:
-  run402 repos snapshot [--project <id>] [--repo <repo_id>] [--message <text>] [--checkpoint] [--dry-run] [--allow-dirty] [--manifest-out <path>]
-  run402 repos mirror   [<destination>] [--off] [--backfill] [--profile <name> | --ambient] [--region <r>] [--endpoint <url>] [--project <id>] [--repo <repo_id>]
+  run402 repos snapshot [--project <project_id>] [--repo <repo_id>] [--message <text>] [--checkpoint] [--dry-run] [--allow-dirty] [--manifest-out <path>]
+  run402 repos mirror   [<destination>] [--off] [--backfill] [--profile <name> | --ambient] [--region <r>] [--endpoint <url>] [--project <project_id>] [--repo <repo_id>]
   run402 repos recover  <source> --out <dir> [--repo <repo_id>] [--profile <name> | --ambient] [--region <r>] [--endpoint <url>]
                         [--bundle <file>] [--code <SRC1-…>] [--receipt <file>] [--rp-id <host>] [--human]
   run402 repos recovery-bundle [--out <file> | --out -]
 
 Lifecycle:
   run402 repos rename <new_name> [--repo <repo_id> | --project <project_id>]
-  run402 repos delete [--project <id>] [--repo <repo_id>] [--force]
+  run402 repos delete [--project <project_id>] [--repo <repo_id>] [--force]
 
 Maintenance:
-  run402 repos fsck   [--project <id>] [--repo <repo_id>] [--mirror] [--budget <n>] [--no-write] [--human]
-  run402 repos gc     [--project <id>] [--repo <repo_id>] [--force-headroom] [--submit --intent-core <path> --verifier-receipt <path> [--wait]]
+  run402 repos fsck   [--project <project_id>] [--repo <repo_id>] [--mirror] [--budget <n>] [--no-write] [--human]
+  run402 repos gc     [--project <project_id>] [--repo <repo_id>] [--force-headroom] [--submit --intent-core <path> --verifier-receipt <path> [--wait]]
   run402 repos daemon <status|stop>   The resident helper engine (gitvault-persistent-helper) — inspect or retire it; nothing requires either
-  run402 repos access [--project <id>] [--repo <repo_id>] [--human]
-  run402 repos access repair [--project <id>] [--repo <repo_id>] --recipient-state-version <n> --recipient-revocation-version <n>
-  run402 repos access revoke-key <principal_id> [--project <id>] [--repo <repo_id>]
-  run402 repos access declare-exposure [--project <id>] [--repo <repo_id>]
-  run402 repos access repin   [--project <id>] [--repo <repo_id>] --principal <principal_id> --fingerprint <ek_fingerprint>
-  run402 repos policy <required|grandfathered> [--project <id>] [--repo <repo_id>] [--reason <why>]
+  run402 repos access [--project <project_id>] [--repo <repo_id>] [--human]
+  run402 repos access repair [--project <project_id>] [--repo <repo_id>] --recipient-state-version <n> --recipient-revocation-version <n>
+  run402 repos access revoke-key <principal_id> [--project <project_id>] [--repo <repo_id>]
+  run402 repos access declare-exposure [--project <project_id>] [--repo <repo_id>]
+  run402 repos access repin   [--project <project_id>] [--repo <repo_id>] --principal <principal_id> --fingerprint <ek_fingerprint>
+  run402 repos policy <required|grandfathered> [--project <project_id>] [--repo <repo_id>] [--reason <why>]
   run402 repos policy auto-gc [<generations>|off]   (local, per-checkout — no --project/--repo)
 
 Every verb above also accepts -v/--verbose (a stderr summary line of request
@@ -115,7 +115,7 @@ Subcommands:
   create   Provision (or, with --project, ADOPT an existing project), ALLOCATE
            its vault (mints key material and, on first allocation, a one-shot
            recovery receipt), and scaffold the git remote — origin when free,
-           run402 when taken. \`--project <id>\` allocates for a project that already exists,
+           run402 when taken. \`--project <project_id>\` allocates for a project that already exists,
            nothing is provisioned. \`[name]\` is inferred from an existing git
            remote's basename or the directory name when unambiguous — NEVER a
            prompt; if the directory and an existing remote disagree, or
@@ -376,7 +376,7 @@ Subcommands:
            \`off\` (or \`0\`) disables it. No value prints the current setting.
 
 Options:
-  --project <id>    Project whose repo to act on (defaults to the active project)
+  --project <project_id>    Project whose repo to act on (defaults to the active project)
   --repo <repo_id>  Address the repo directly by id, skipping project lookup
   --org <org_id>    create/list: the owning organization (create resolves it
                     the same way \`projects provision\` does when omitted)
@@ -655,7 +655,7 @@ async function formatRepoHuman(s, mirror) {
   lines.push(`Address: ${formatRepoAddress(s)}${remotePart}`);
 
   if (!s.vault) {
-    lines.push("Repo: not allocated yet for this project — run 'run402 repos create --project <id>' to allocate one.");
+    lines.push("Repo: not allocated yet for this project — run 'run402 repos create --project <project_id>' to allocate one.");
     if (s.warnings.length > 0) lines.push(`Warnings: ${s.warnings.map((w) => w.message).join(" ")}`);
     return lines.join("\n");
   }
@@ -897,7 +897,7 @@ async function printCreateResult({ sdk, projectId, vault, adopted, name, verbose
     (vault.deduplicated ? "already existed — nothing was re-allocated" : `allocated (genesis ${vault.genesis_sha256})`),
   );
   if (address) console.error(`address: ${address}`);
-  else if (!orgSlug) console.error("no named address yet — set an org slug (run402 org slug <slug>) to get run402::<slug>/<name> addresses");
+  else if (!orgSlug) console.error("no named address yet — set an org slug (run402 orgs slug <slug>) to get run402::<slug>/<name> addresses");
   else console.error(`no address set — run 'run402 repos rename <name> --project ${projectId}' to set one`);
   if (remoteScaffolded) {
     console.error(`remote '${vault.remote.name}' -> ${vault.remote.url} (${vault.remote.reason})`);
@@ -1040,7 +1040,7 @@ async function create(args) {
       fail({
         code: "BAD_USAGE",
         message: "a name positional and --project are mutually exclusive — --project adopts an EXISTING project.",
-        hint: "run402 repos create --project <id> to adopt, or run402 repos create <name> to provision a new one. Name it afterward with `run402 repos rename`.",
+        hint: "run402 repos create --project <project_id> to adopt, or run402 repos create <name> to provision a new one. Name it afterward with `run402 repos rename`.",
       });
     }
     if (flagValue(a, "--tier") != null || flagValue(a, "--idempotency-key") != null) {
@@ -1297,7 +1297,7 @@ async function rename(args) {
         : `name "${result.repo_name}" set for ${projectId}`,
     );
     if (address) console.error(`address: ${address}`);
-    else console.error("this org has no slug yet — set one with `run402 org slug <slug>` to get a full run402::<slug>/<name> address");
+    else console.error("this org has no slug yet — set one with `run402 orgs slug <slug>` to get a full run402::<slug>/<name> address");
     printVerboseStats(a, sdk);
   } catch (err) {
     reportSdkError(err);
@@ -1376,7 +1376,7 @@ async function del(args) {
   } else {
     ({ projectId, rest } = resolveProjectSelector(a, { rejectBareFirst: true }));
   }
-  requirePositionalCount(rest.filter((x) => x !== "--force"), [], { min: 0, max: 0, command: "run402 repos delete [--project <id>] [--repo <repo_id>] [--force]", missing: "" });
+  requirePositionalCount(rest.filter((x) => x !== "--force"), [], { min: 0, max: 0, command: "run402 repos delete [--project <project_id>] [--repo <repo_id>] [--force]", missing: "" });
   const force = a.includes("--force");
 
   let status;
@@ -2935,7 +2935,7 @@ async function accessRevokeKey(args) {
  * eligible starting at the NEXT rotation.
  */
 /**
- * `repos access repin --principal <id> --fingerprint <ek_…>` — a KEY-HOLDER
+ * `repos access repin --principal <principal_id> --fingerprint <ek_…>` — a KEY-HOLDER
  * explicitly accepts a recipient's CHANGED key (gitvault-agent-envelopes D3).
  * The session-start reconcile refuses `pinned_key_mismatch` and never
  * bypasses it, not even after an owner's revoke — acceptance names the new

package/lib/rooms.mjs

@@ -53,8 +53,8 @@ Usage:
   run402 rooms leave [<presence_id>]
 
 Addressing:
-  --project <id>    That project's DEFAULT room (the room key IS the project id)
-  --org <id> --room <key>   A named org room
+  --project <project_id>    That project's DEFAULT room (the room key IS the project id)
+  --org <org_id> --room <key>   A named org room
   (omit both)       Resolved from RUN402_ROOM, a .run402.json binding, or the
                     wallet profile's selected org
 

package/lib/sdk-errors.mjs

@@ -82,7 +82,7 @@ export function reportSdkError(err) {
     fail({
       code: "PROJECT_CREDENTIAL_NOT_FOUND",
       message: err?.message || "Local project credentials are not cached.",
-      hint: "This is a local credential-cache miss, not proof that the project does not exist. Use a principal-auth command, or import keys with `run402 credentials project-keys import --project <id> --service-key-stdin` for credential-required operations.",
+      hint: "This is a local credential-cache miss, not proof that the project does not exist. Use a principal-auth command, or import keys with `run402 credentials project-keys import --project <project_id> --service-key-stdin` for credential-required operations.",
       details: err?.details,
       next_actions: err?.nextActions,
       retryable: err?.retryable ?? false,

package/lib/secrets.mjs

@@ -10,10 +10,10 @@ Usage:
   run402 secrets <subcommand> [args...]
 
 Subcommands:
-  set    <key> (--value <v> | --file <path> | --stdin) [--project <id>]
+  set    <key> (--value <v> | --file <path> | --stdin) [--project <project_id>]
                                Set a secret on a project
-  list   [--project <id>]      List all secrets for a project
-  delete <key> [--project <id>]  Delete a secret from a project
+  list   [--project <project_id>]      List all secrets for a project
+  delete <key> [--project <project_id>]  Delete a secret from a project
 
 Legacy (still supported):
   run402 secrets set <prj_id> <key> <value>
@@ -38,9 +38,9 @@ const SUB_HELP = {
   set: `run402 secrets set — Set a secret on a project
 
 Usage:
-  run402 secrets set <key> --value <v> [--project <id>]
-  run402 secrets set <key> --file <path> [--project <id>]
-  run402 secrets set <key> --stdin [--project <id>]
+  run402 secrets set <key> --value <v> [--project <project_id>]
+  run402 secrets set <key> --file <path> [--project <project_id>]
+  run402 secrets set <key> --stdin [--project <project_id>]
 
 Legacy (still supported):
   run402 secrets set <prj_id> <key> <value>
@@ -50,7 +50,7 @@ Arguments:
   <key>               Secret key name (exposed as process.env.<key>)
 
 Options:
-  --project <id>      Project ID (defaults to the active project)
+  --project <project_id>      Project ID (defaults to the active project)
   --value <v>         Inline secret value (alternative to the legacy positional)
   --file <path>       Read the secret value from a file instead of inline
                       Use --file - or --file /dev/stdin to read from stdin
@@ -71,13 +71,13 @@ Examples:
   list: `run402 secrets list — List all secrets for a project
 
 Usage:
-  run402 secrets list [--project <id>]
+  run402 secrets list [--project <project_id>]
 
 Legacy (still supported):
   run402 secrets list <prj_id>
 
 Options:
-  --project <id>      Project ID (defaults to the active project)
+  --project <project_id>      Project ID (defaults to the active project)
 
 Notes:
   - Returns secret keys and timestamps only; raw values and value-derived hashes are never returned
@@ -88,7 +88,7 @@ Examples:
   delete: `run402 secrets delete — Delete a secret from a project
 
 Usage:
-  run402 secrets delete <key> [--project <id>]
+  run402 secrets delete <key> [--project <project_id>]
 
 Legacy (still supported):
   run402 secrets delete <prj_id> <key>
@@ -97,7 +97,7 @@ Arguments:
   <key>               Secret key name to remove
 
 Options:
-  --project <id>      Project ID (defaults to the active project)
+  --project <project_id>      Project ID (defaults to the active project)
 
 Examples:
   run402 secrets delete STRIPE_KEY --project prj_abc123
@@ -147,7 +147,7 @@ async function set(projectId, args = []) {
     fail({
       code: "BAD_USAGE",
       message: "Missing <key>.",
-      hint: "run402 secrets set <key> --value <v> [--project <id>]",
+      hint: "run402 secrets set <key> --value <v> [--project <project_id>]",
     });
   }
   const values = positionals.slice(1);
@@ -235,7 +235,7 @@ async function deleteSecret(projectId, args = []) {
     fail({
       code: "BAD_USAGE",
       message: "Missing <key>.",
-      hint: "run402 secrets delete <key> [--project <id>]",
+      hint: "run402 secrets delete <key> [--project <project_id>]",
     });
   }
   if (positionals.length > 1) {

package/lib/sites.mjs

@@ -13,8 +13,8 @@ const SMALL_DIR_THRESHOLD = 5;
 const HELP = `run402 sites - Deploy and manage static sites
 
 Usage:
-  run402 sites deploy --manifest <file> [--project <id>]
-  run402 sites deploy-dir <path> --project <id>
+  run402 sites deploy --manifest <file> [--project <project_id>]
+  run402 sites deploy-dir <path> --project <project_id>
   cat manifest.json | run402 sites deploy
 
 Subcommands:
@@ -23,12 +23,12 @@ Subcommands:
 
 Options (deploy):
   --manifest <file>     Path to manifest JSON file (or read from stdin)
-  --project <id>        Project ID (defaults to active project)
+  --project <project_id>        Project ID (defaults to active project)
   --help, -h            Show this help message
 
 Options (deploy-dir):
   <path>                Positional: local directory to deploy
-  --project <id>        Project ID (defaults to active project)
+  --project <project_id>        Project ID (defaults to active project)
   --quiet               Suppress progress events on stderr
   --dry-run             Plan-only: print the diff envelope and exit
   --confirm-prune       Required when <path> has fewer files than the
@@ -58,7 +58,7 @@ Notes:
     (CAS-backed): only bytes the gateway doesn't already have are uploaded.
     Re-deploys of an unchanged tree make no S3 PUTs.
   - To check status of an in-flight deploy, use 'run402 deploy events <op>'
-    or 'run402 deploy list --project <id>'.
+    or 'run402 deploy list --project <project_id>'.
   - deploy-dir walks the directory, skips .git / node_modules / .DS_Store,
     and auto-detects binary files. Symlinks are rejected.
   - Progress events are emitted as JSON-line objects on stderr by default
@@ -71,12 +71,12 @@ const SUB_HELP = {
   deploy: `run402 sites deploy - Deploy a static site from a manifest
 
 Usage:
-  run402 sites deploy --manifest <file> [--project <id>]
-  cat manifest.json | run402 sites deploy [--project <id>]
+  run402 sites deploy --manifest <file> [--project <project_id>]
+  cat manifest.json | run402 sites deploy [--project <project_id>]
 
 Options:
   --manifest <file>   Path to manifest JSON file (or read from stdin)
-  --project <id>      Project ID (defaults to the active project)
+  --project <project_id>      Project ID (defaults to the active project)
 
 Manifest format (JSON):
   {
@@ -99,14 +99,14 @@ Examples:
   "deploy-dir": `run402 sites deploy-dir - Deploy a static site from a local directory
 
 Usage:
-  run402 sites deploy-dir <path> [--project <id>] [--quiet]
+  run402 sites deploy-dir <path> [--project <project_id>] [--quiet]
                                   [--dry-run] [--confirm-prune]
 
 Arguments:
   <path>              Local directory to deploy (positional, required)
 
 Options:
-  --project <id>      Project ID (defaults to the active project)
+  --project <project_id>      Project ID (defaults to the active project)
   --quiet             Suppress progress events on stderr (events are on by
                       default — see Progress events below)
   --dry-run           Plan the deploy and print a JSON envelope describing
@@ -196,7 +196,7 @@ async function deploy(args) {
     fail({
       code: "BAD_USAGE",
       message: `Unexpected argument for sites deploy: ${extra[0]}`,
-      hint: "Use `run402 sites deploy --manifest <file> [--project <id>]`.",
+      hint: "Use `run402 sites deploy --manifest <file> [--project <project_id>]`.",
     });
   }
   const opts = { manifest: null, project: undefined, target: undefined, quiet: false };
@@ -252,7 +252,7 @@ async function deployDir(args) {
     fail({
       code: "BAD_USAGE",
       message: `Unexpected argument for sites deploy-dir: ${positionals[1]}`,
-      hint: "Use `run402 sites deploy-dir <path> --project <id>`.",
+      hint: "Use `run402 sites deploy-dir <path> --project <project_id>`.",
     });
   }
   const opts = {
@@ -282,7 +282,7 @@ async function deployDir(args) {
     fail({
       code: "BAD_USAGE",
       message: "Missing <path>.",
-      hint: "run402 sites deploy-dir <path> --project <id>",
+      hint: "run402 sites deploy-dir <path> --project <project_id>",
     });
   }
   const projectId = resolveProjectId(opts.project);
@@ -325,7 +325,7 @@ async function deployDir(args) {
   if (opts.dryRun) {
     try {
       const { plan } = await getSdk()._applyEngine.plan({
-        project: projectId,
+        project_id: projectId,
         site: { replace: fileSet },
       }, { dryRun: true });
       console.log(JSON.stringify({