run402 4.94.0 → 4.96.0

package/lib/path-lookup.mjs

@@ -1,10 +1,8 @@
 /**
  * `path-lookup.mjs` — the tiny, dependency-free "is this executable on
- * PATH" check kygit-handoff design D8 needs twice (`run402 doctor` and
- * `repos view`, both naming `npm i -g @kychee/kygit` when a `kygit::`
- * remote has no `git-remote-kygit` helper installed). No shell, no `which`
- * subprocess — a plain directory scan mirrors what the OS loader itself
- * does to resolve an unqualified command name.
+ * PATH" check behind `repos resume` / `repos join`'s remote-helper next
+ * action. No shell, no `which` subprocess — a plain directory scan mirrors
+ * what the OS loader itself does to resolve an unqualified command name.
  */
 import {accessSync, constants, readFileSync } from "node:fs";
 import { delimiter, join } from "node:path";
@@ -26,8 +24,7 @@ export function isExecutableOnPath(name, env = process.env) {
 /**
  * After a restore into `dir`, the ONE thing that still stands between the
  * caller and its first `git push` is git finding the remote helper the
- * checkout's origin scheme names (`git-remote-kygit` for `kygit::`,
- * `git-remote-run402` for `run402::`). A resume or join run through
+ * checkout's `run402::` origin names (`git-remote-run402`). A resume or join run through
  * `npx` has the helper only inside the npx cache, so git cannot see it.
  * Returns a `next_actions` entry naming the fix, or null when the helper
  * is on PATH or the checkout's remote cannot be read (never throws).
@@ -42,11 +39,11 @@ export function remoteHelperNextAction(dir, env = process.env) {
     return null;
   }
   if (!url) return null;
-  const helper = url.startsWith("kygit::") ? "git-remote-kygit" : url.startsWith("run402::") ? "git-remote-run402" : null;
+  const helper = url.startsWith("run402::") ? "git-remote-run402" : null;
   if (!helper || isExecutableOnPath(helper, env)) return null;
   return {
     type: "install_remote_helper",
-    command: "npm i -g @kychee/kygit run402",
-    why: `git push needs ${helper} on PATH and this session does not have it there (an npx run keeps it inside the npx cache); install both packages once and every git command in this checkout works`,
+    command: "npm i -g run402",
+    why: `git push needs ${helper} on PATH and this session does not have it there (an npx run keeps it inside the npx cache); install run402 once and every git command in this checkout works`,
   };
 }

package/lib/path-lookup.test.mjs

@@ -1,8 +1,6 @@
 /**
- * `path-lookup.mjs` — the PATH-executable probe `doctor.mjs`/`repos.mjs`'s
- * `view()` both use to detect a `kygit::` remote with no `git-remote-kygit`
- * helper installed (kygit-handoff design D8, mirroring
- * `kygit/kygit.mjs`'s own `findRemoteHelper`).
+ * `path-lookup.mjs` — the PATH-executable probe behind `repos resume` /
+ * `repos join`'s remote-helper next action.
  */
 import { describe, it } from "node:test";
 import assert from "node:assert/strict";
@@ -15,10 +13,10 @@ describe("isExecutableOnPath", () => {
   it("finds an executable file on PATH", () => {
     const dir = mkdtempSync(join(tmpdir(), "path-lookup-"));
     try {
-      const bin = join(dir, "git-remote-kygit");
+      const bin = join(dir, "git-remote-run402");
       writeFileSync(bin, "#!/bin/sh\n");
       chmodSync(bin, 0o755);
-      assert.equal(isExecutableOnPath("git-remote-kygit", { PATH: dir }), true);
+      assert.equal(isExecutableOnPath("git-remote-run402", { PATH: dir }), true);
     } finally {
       rmSync(dir, { recursive: true, force: true });
     }
@@ -27,10 +25,10 @@ describe("isExecutableOnPath", () => {
   it("returns false when the name exists but is not executable", () => {
     const dir = mkdtempSync(join(tmpdir(), "path-lookup-"));
     try {
-      const bin = join(dir, "git-remote-kygit");
+      const bin = join(dir, "git-remote-run402");
       writeFileSync(bin, "not executable");
       chmodSync(bin, 0o644);
-      assert.equal(isExecutableOnPath("git-remote-kygit", { PATH: dir }), false);
+      assert.equal(isExecutableOnPath("git-remote-run402", { PATH: dir }), false);
     } finally {
       rmSync(dir, { recursive: true, force: true });
     }
@@ -39,7 +37,7 @@ describe("isExecutableOnPath", () => {
   it("returns false when the name is nowhere on PATH", () => {
     const dir = mkdtempSync(join(tmpdir(), "path-lookup-"));
     try {
-      assert.equal(isExecutableOnPath("git-remote-kygit", { PATH: dir }), false);
+      assert.equal(isExecutableOnPath("git-remote-run402", { PATH: dir }), false);
     } finally {
       rmSync(dir, { recursive: true, force: true });
     }
@@ -49,10 +47,10 @@ describe("isExecutableOnPath", () => {
     const dirA = mkdtempSync(join(tmpdir(), "path-lookup-a-"));
     const dirB = mkdtempSync(join(tmpdir(), "path-lookup-b-"));
     try {
-      const bin = join(dirB, "git-remote-kygit");
+      const bin = join(dirB, "git-remote-run402");
       writeFileSync(bin, "#!/bin/sh\n");
       chmodSync(bin, 0o755);
-      assert.equal(isExecutableOnPath("git-remote-kygit", { PATH: `${dirA}:${dirB}` }), true);
+      assert.equal(isExecutableOnPath("git-remote-run402", { PATH: `${dirA}:${dirB}` }), true);
     } finally {
       rmSync(dirA, { recursive: true, force: true });
       rmSync(dirB, { recursive: true, force: true });
@@ -60,29 +58,29 @@ describe("isExecutableOnPath", () => {
   });
 
   it("returns false for an empty or missing PATH rather than throwing", () => {
-    assert.equal(isExecutableOnPath("git-remote-kygit", {}), false);
-    assert.equal(isExecutableOnPath("git-remote-kygit", { PATH: "" }), false);
+    assert.equal(isExecutableOnPath("git-remote-run402", {}), false);
+    assert.equal(isExecutableOnPath("git-remote-run402", { PATH: "" }), false);
   });
 });
 
 describe("remoteHelperNextAction", () => {
-it("names the missing helper for the checkout's remote scheme, and nothing when it is on PATH or the checkout is unreadable", () => {
+it("names the missing helper for a run402:: checkout, and nothing when it is on PATH or the checkout is unreadable", () => {
   const dir = mkdtempSync(join(tmpdir(), "run402-remote-helper-"));
   try {
     mkdirSync(join(dir, ".git"));
-    writeFileSync(join(dir, ".git", "config"), `[core]\n\trepositoryformatversion = 0\n[remote "origin"]\n\turl = kygit::org/name\n\tfetch = +refs/heads/*:refs/remotes/origin/*\n`);
+    writeFileSync(join(dir, ".git", "config"), `[core]\n\trepositoryformatversion = 0\n[remote "origin"]\n\turl = run402::org/name\n\tfetch = +refs/heads/*:refs/remotes/origin/*\n`);
     const emptyPath = { PATH: dir };
     const missing = remoteHelperNextAction(dir, emptyPath);
     assert.equal(missing?.type, "install_remote_helper");
-    assert.match(missing.why, /git-remote-kygit/);
-    assert.equal(missing.command, "npm i -g @kychee/kygit run402");
+    assert.match(missing.why, /git-remote-run402/);
+    assert.equal(missing.command, "npm i -g run402");
     // present on PATH → nothing to say
     const bin = join(dir, "bin"); mkdirSync(bin);
-    writeFileSync(join(bin, "git-remote-kygit"), "#!/bin/sh\n"); chmodSync(join(bin, "git-remote-kygit"), 0o755);
+    writeFileSync(join(bin, "git-remote-run402"), "#!/bin/sh\n"); chmodSync(join(bin, "git-remote-run402"), 0o755);
     assert.equal(remoteHelperNextAction(dir, { PATH: bin }), null);
-    // run402:: scheme names the other helper
-    writeFileSync(join(dir, ".git", "config"), `[remote "origin"]\n\turl = run402::org/name\n`);
-    assert.match(remoteHelperNextAction(dir, emptyPath).why, /git-remote-run402/);
+    // any other remote → nothing to say
+    writeFileSync(join(dir, ".git", "config"), `[remote "origin"]\n\turl = https://example.com/x.git\n`);
+    assert.equal(remoteHelperNextAction(dir, emptyPath), null);
     // no checkout → null, never a throw
     assert.equal(remoteHelperNextAction(join(dir, "nope"), emptyPath), null);
   } finally {

package/lib/projects.mjs

@@ -14,27 +14,26 @@ Usage:
 
 Subcommands:
   quote                                   Show pricing tiers
-  provision [--tier <tier>] [--name <n>] [--org <id>]  Provision a new Postgres project
-  use   <id>                              Set the active project (used as default for other commands)
-  list [--org <id>] [--all]               List your projects from the server (name, site_url, custom domains, org_id, active marker)
-  rename <id> --name <label>              Rename a project (fix an auto-generated name)
+  provision [--tier <tier>] [--name <n>] [--org <org_id>]  Provision a new Postgres project
+  use   <project_id>                      Set the active project (used as default for other commands)
+  list [--org <org_id>] [--all]               List your projects from the server (name, site_url, custom domains, org_id, active marker)
+  rename <project_id> --name <label>      Rename a project (fix an auto-generated name)
   tenant-payments [project_id] [--status <s>]  List redacted tenant x402 payments for priced routes
-  get   [id]                              Authoritative server read: status, org, tier, active deploy, mailbox, usage vs limits (live; no keys)
+  get   [project_id]                      Authoritative server read: status, org, tier, active deploy, mailbox, usage vs limits (live; no keys)
   current                                 Show the active project pointer and validation status
-  sql   "<query>" [--project <id>] [--file <path>] [--params '<json>']  Run a SQL query (supports parameterized queries)
-  rest  <table> [--query "<params>"] [--project <id>]  Query a table via the REST API (PostgREST)
-  usage [id]                              Show compute/storage usage for a project
-  costs [id] [--window <w>]               Show admin-only per-project revenue/cost/margin
-  schema [id]                             Inspect the database schema
-  apply-expose [id] <manifest_json>       Apply a declarative authorization manifest
-  apply-expose [id] --file <path>         Apply a manifest from a JSON file
-  validate-expose [id] <manifest_json>    Validate an authorization manifest without applying it
-  validate-expose [id] --file <path>      Validate a manifest file without mutating the project
-  get-expose   [id]                       Get the current authorization manifest
-  delete [id] --confirm                   Immediately and irreversibly delete a project (cascade purge) and remove from local state. Requires --confirm.
-  promote-user [id] <email>               Promote a user to project_admin role
-  demote-user  [id] <email>               Demote a user from project_admin role
-  export [id] [archive options]           Export a portable Run402 Core archive
+  sql   "<query>" [--project <project_id>] [--file <path>] [--params '<json>']  Run a SQL query (supports parameterized queries)
+  rest  <table> [--query "<params>"] [--project <project_id>]  Query a table via the REST API (PostgREST)
+  usage [project_id]              Show compute/storage usage for a project
+  costs [project_id] [--window <w>]       Show admin-only per-project revenue/cost/margin
+  schema [project_id]             Inspect the database schema
+  apply-expose [project_id] <manifest_json>       Apply a declarative authorization manifest
+  apply-expose [project_id] --file <path>         Apply a manifest from a JSON file
+  validate-expose [project_id] <manifest_json>    Validate an authorization manifest without applying it
+  validate-expose [project_id] --file <path>      Validate a manifest file without mutating the project
+  get-expose   [project_id]                       Get the current authorization manifest
+  delete [project_id] --confirm                   Immediately and irreversibly delete a project (cascade purge) and remove from local state. Requires --confirm.
+  promote-user [project_id] <email>               Promote a user to project_admin role
+  demote-user  [project_id] <email>               Demote a user from project_admin role
 
 Examples:
   run402 projects quote
@@ -59,7 +58,6 @@ Examples:
   run402 projects apply-expose prj_abc123 --file manifest.json
   run402 projects get-expose prj_abc123
   run402 projects delete prj_abc123 --confirm
-  run402 projects export prj_abc123 --wait --output ./project.r402ar --json
 
 Global options (any command):
   --wallet <name>   Use a named wallet (profile) for this command. Precedence:
@@ -67,15 +65,15 @@ Global options (any command):
                     'run402 wallets use' default > 'default'. See 'run402 wallets'.
 
 Notes:
-  - <id> is the project_id shown in 'run402 projects list' (prefix: 'prj_')
-  - Most commands that take <id> default to the active project when omitted
-    (set it with 'run402 projects use <id>'). Project IDs start with 'prj_';
+  - <project_id> is the project_id shown in 'run402 projects list' (prefix: 'prj_')
+  - Most commands that take <project_id> default to the active project when omitted
+    (set it with 'run402 projects use <project_id>'). Project IDs start with 'prj_';
     any first positional that doesn't is treated as the next argument instead.
   - 'list', 'get', and 'use' are SERVER-authoritative project identity flows.
     Local project keys live under 'run402 credentials project-keys ...'.
   - 'list' is a SERVER read, not the local key cache: it shows every project the
     active wallet can reach (membership-scoped), with name, site_url, custom
-    domains, and org_id. '--org <id>' filters to one org; '--all' reads every
+    domains, and org_id. '--org <org_id>' filters to one org; '--all' reads every
     project you can reach across all your orgs (as your sign-in session after
     'run402 login', else as the current wallet). The 'active' marker still
     comes from local state.
@@ -108,10 +106,10 @@ const SUB_HELP = {
   list: `run402 projects list — List your projects from the server
 
 Usage:
-  run402 projects list [--org <id>] [--all]
+  run402 projects list [--org <org_id>] [--all]
 
 Options:
-  --org <id>          Filter to projects owned by one org (organization).
+  --org <org_id>          Filter to projects owned by one org (organization).
                       Authorize-before-reveal: a non-member or guessed id is a
                       403; a non-UUID id is a 400.
   --all               Read every project you can reach across all your orgs
@@ -135,10 +133,10 @@ Examples:
 	  rename: `run402 projects rename — Rename a project
 
 Usage:
-  run402 projects rename <id> --name <label>
+  run402 projects rename <project_id> --name <label>
 
 Arguments:
-  <id>                Project ID (prefix: 'prj_'). Required.
+  <project_id>                Project ID (prefix: 'prj_'). Required.
 
 Options:
   --name <label>      New display name (1-200 chars, no control characters).
@@ -183,12 +181,12 @@ Notes:
   provision: `run402 projects provision — Provision a new Postgres project
 
 Usage:
-  run402 projects provision [--tier <tier>] [--name <name>] [--org <id>] [--idempotency-key <key>]
+  run402 projects provision [--tier <tier>] [--name <name>] [--org <org_id>] [--idempotency-key <key>]
 
 Options:
   --tier <tier>       Tier for the new project (default: prototype)
   --name <name>       Human-readable name for the project
-  --org <id>          Provision into an EXISTING org (needs developer+ on it).
+  --org <org_id>          Provision into an EXISTING org (needs developer+ on it).
                       Omit for the cold-start path. Tier is org-governed.
   --idempotency-key <key>  Retry-safe key: re-running with the same key returns
                       the existing project instead of duplicating it. Auto-derived
@@ -209,8 +207,8 @@ Examples:
   sql: `run402 projects sql — Run a SQL query against a project's database
 
 Usage:
-  run402 projects sql "<query>" [--project <id>] [options]
-  run402 projects sql --file <path> [--project <id>] [options]
+  run402 projects sql "<query>" [--project <project_id>] [options]
+  run402 projects sql --file <path> [--project <project_id>] [options]
 
 Legacy (still supported):
   run402 projects sql <prj_id> "<query>" [options]
@@ -219,7 +217,7 @@ Arguments:
   <query>             Inline SQL query (quote it to preserve spaces)
 
 Options:
-  --project <id>      Project ID (defaults to the active project; a leading
+  --project <project_id>      Project ID (defaults to the active project; a leading
                       prj_... positional is also still accepted)
   --file <path>       Read SQL from a file instead of an inline query
   --params '<json>'   JSON array of parameters for a parameterized query
@@ -232,10 +230,10 @@ Examples:
   costs: `run402 projects costs — Show admin-only per-project finance
 
 Usage:
-  run402 projects costs [id] [--window <24h|7d|30d|90d>]
+  run402 projects costs [project_id] [--window <24h|7d|30d|90d>]
 
 Arguments:
-  [id]                Project ID (defaults to the active project if omitted)
+  [project_id]                Project ID (defaults to the active project if omitted)
 
 Options:
   --window <w>        Finance window (default: 30d). One of: 24h, 7d, 30d, 90d
@@ -258,12 +256,12 @@ Examples:
   "validate-expose": `run402 projects validate-expose — Validate an authorization manifest without applying it
 
 Usage:
-  run402 projects validate-expose [id] <manifest_json> [options]
-  run402 projects validate-expose [id] --file <path> [options]
-  cat manifest.json | run402 projects validate-expose [id] [options]
+  run402 projects validate-expose [project_id] <manifest_json> [options]
+  run402 projects validate-expose [project_id] --file <path> [options]
+  cat manifest.json | run402 projects validate-expose [project_id] [options]
 
 Arguments:
-  [id]                Optional project ID. When omitted, the active project is
+  [project_id]                Optional project ID. When omitted, the active project is
                       used if one is set; otherwise validation is projectless.
   <manifest_json>     Inline auth/expose manifest JSON.
 
@@ -328,7 +326,7 @@ async function provision(args) {
       code: "BAD_USAGE",
       message: "--org must not be empty.",
       details: { field: "--org" },
-      hint: "Pass an org id (run402 org list), or omit --org for the cold-start path.",
+      hint: "Pass an org id (run402 orgs list), or omit --org for the cold-start path.",
     });
   }
   // Validate --name when provided. Omitted --name lets the server pick a
@@ -452,7 +450,7 @@ async function validateExpose(args = []) {
       fail({
         code: "BAD_USAGE",
         message: `Unexpected extra argument: ${arg}`,
-        hint: "run402 projects validate-expose [id] <manifest_json>",
+        hint: "run402 projects validate-expose [project_id] <manifest_json>",
       });
     }
   }
@@ -460,7 +458,7 @@ async function validateExpose(args = []) {
     fail({
       code: "BAD_USAGE",
       message: "Provide either inline manifest JSON or --file <path>, not both.",
-      hint: "run402 projects validate-expose [id] --file manifest.json",
+      hint: "run402 projects validate-expose [project_id] --file manifest.json",
     });
   }
   if (migrationFile && migrationSql !== null) {
@@ -571,7 +569,7 @@ async function rename(projectId, args = []) {
     fail({
       code: "BAD_USAGE",
       message: "Missing --name.",
-      hint: "run402 projects rename <id> --name \"My Site\"",
+      hint: "run402 projects rename <project_id> --name \"My Site\"",
     });
   }
   try {
@@ -649,7 +647,7 @@ function commandMoved(name) {
   fail({
     code: "COMMAND_MOVED",
     message: `run402 projects ${name} moved to the explicit local credential-cache surface.`,
-    hint: "Use `run402 credentials project-keys status/export --project <id>`.",
+    hint: "Use `run402 credentials project-keys status/export --project <project_id>`.",
     details: {
       old_command: `projects ${name}`,
       new_command: name === "keys" ? "credentials project-keys export --reveal" : "credentials project-keys status",
@@ -658,12 +656,12 @@ function commandMoved(name) {
     next_actions: [
       {
         type: "run_command",
-        command: "run402 credentials project-keys status --project <id>",
+        command: "run402 credentials project-keys status --project <project_id>",
         why: "Inspect cached key presence without revealing secrets.",
       },
       {
         type: "run_command",
-        command: "run402 credentials project-keys export --project <id> --reveal",
+        command: "run402 credentials project-keys export --project <project_id> --reveal",
         why: "Reveal cached project keys only when you explicitly need secret material.",
       },
     ],
@@ -733,7 +731,7 @@ async function rest(projectId, restArgs = []) {
   if (!table) {
     fail({
       code: "BAD_USAGE",
-      message: "Missing <table> argument. Usage: run402 projects rest <table> [--query \"<query>\"] [--project <id>]",
+      message: "Missing <table> argument. Usage: run402 projects rest <table> [--query \"<query>\"] [--project <project_id>]",
       hint: "Run 'run402 projects schema' to list tables.",
     });
   }
@@ -886,10 +884,6 @@ const FLAGS_BY_SUB = {
     values: ["--project", "--file", "--migration-file", "--migration-sql"],
   },
   delete: { known: ["--project", "--confirm"], values: ["--project"] },
-  export: {
-    known: ["--project", "--scope", "--auth", "--consistency", "--idempotency-key", "--output", "--poll-interval", "--timeout", "--wait", "--json", "--json-stream"],
-    values: ["--project", "--scope", "--auth", "--consistency", "--idempotency-key", "--output", "--poll-interval", "--timeout"],
-  },
 };
 
 function validateFlags(sub, args) {
@@ -937,11 +931,6 @@ export async function run(sub, args) {
     case "validate-expose": await validateExpose(args); break;
     case "get-expose":   { const { projectId } = resolveProjectSelector(args, { rejectBareFirst: true }); await getExpose(projectId); break; }
     case "delete":    { const { projectId, rest } = resolveProjectSelector(args, { rejectBareFirst: true }); await deleteProject(projectId, rest); break; }
-    case "export": {
-      const { run } = await import("./cloud.mjs");
-      await run("archives", ["create", ...args]);
-      break;
-    }
     case "promote-user": { const { projectId, rest } = resolveProjectSelector(args); await promoteUser(projectId, rest[0]); break; }
     case "demote-user":  { const { projectId, rest } = resolveProjectSelector(args); await demoteUser(projectId, rest[0]); break; }
     default: