bundle_deploy requires project_id; add run402 status command

- bundle_deploy now deploys to an existing project (project_id required,
  name removed) matching the updated POST /deploy/v1 server contract
- CLI deploy adds --project flag; falls back to active project
- MCP tool validates project exists in local keystore before calling API
- Response no longer returns keys (project already provisioned)
- New `run402 status` command: read-only account snapshot showing
  allowance, balance, tier, projects, and active project (JSON output)
- Add --help to both `run402 init` and `run402 status`
- Update e2e tests and mock fetch for new deploy contract

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Author: MajorTal

cli-e2e.test.mjs

@@ -123,6 +123,9 @@ function mockFetch(input, init) {
   if (path === "/tiers/v1/status" && method === "GET") {
     return Promise.resolve(json({ tier: "prototype", status: "active", lease_expires_at: "2026-03-22T00:00:00.000Z" }));
   }
+  if (path.match(/^\/wallets\/v1\/[^/]+\/projects$/) && method === "GET") {
+    return Promise.resolve(json({ wallet: "0xtest", projects: [{ id: "prj_test123", name: "test", tier: "prototype", status: "active", lease_expires_at: "2026-03-22T00:00:00.000Z" }] }));
+  }
   // x402 discovery GET before paid POST
   if (path.startsWith("/tiers/v1/") && path !== "/tiers/v1/status" && method === "GET") {
     return Promise.resolve(json({ price: "$0.10", network: "base-sepolia" }));
@@ -217,7 +220,7 @@ function mockFetch(input, init) {
   // Bundle deploy
   if (path === "/deploy/v1" && method === "POST") {
     return Promise.resolve(json({
-      ...TEST_PROJECT,
+      project_id: TEST_PROJECT.project_id,
       site_url: "https://test.sites.run402.com",
       subdomain_url: "https://test-app.run402.com",
     }));
@@ -505,11 +508,10 @@ describe("CLI e2e happy path", () => {
     const manifestPath = join(tempDir, "manifest.json");
     const { writeFileSync: wf } = await import("node:fs");
     wf(manifestPath, JSON.stringify({
-      name: "test-app",
       files: [{ file: "index.html", data: "<h1>Hello</h1>" }],
     }));
     captureStart();
-    await run(["--manifest", manifestPath]);
+    await run(["--manifest", manifestPath, "--project", "prj_test123"]);
     captureStop();
     assert.ok(captured().includes("prj_test123"), "should return project info");
   });
@@ -784,4 +786,16 @@ describe("CLI e2e happy path", () => {
     assert.ok(out.includes("Balance") || out.includes("USDC"), "should show balance");
     assert.ok(out.includes("Tier") || out.includes("prototype"), "should show tier");
   });
+
+  it("status", async () => {
+    const { run } = await import("./cli/lib/status.mjs");
+    captureStart();
+    await run();
+    captureStop();
+    const out = captured();
+    const data = JSON.parse(out);
+    assert.ok(data.allowance, "should include allowance");
+    assert.ok(data.allowance.address, "should include allowance address");
+    assert.ok(Array.isArray(data.projects), "should include projects array");
+  });
 });

cli/cli.mjs

@@ -20,6 +20,7 @@ Usage:
 
 Commands:
   init        Set up allowance, funding, and check tier status
+  status      Show full account state (allowance, balance, tier, projects)
   allowance   Manage your agent allowance (create, fund, balance, status)
   tier        Manage tier subscription (status, set)
   projects    Manage projects (provision, list, query, inspect, delete)
@@ -65,7 +66,12 @@ if (!cmd || cmd === '--help' || cmd === '-h') {
 switch (cmd) {
   case "init": {
     const { run } = await import("./lib/init.mjs");
-    await run();
+    await run([sub, ...rest].filter(Boolean));
+    break;
+  }
+  case "status": {
+    const { run } = await import("./lib/status.mjs");
+    await run([sub, ...rest].filter(Boolean));
     break;
   }
   case "allowance": {

cli/lib/deploy.mjs

@@ -1,19 +1,20 @@
 import { readFileSync } from "fs";
-import { API, allowanceAuthHeaders, saveProject, setActiveProjectId } from "./config.mjs";
+import { API, allowanceAuthHeaders, findProject } from "./config.mjs";
 
-const HELP = `run402 deploy — Deploy a full-stack app or static site on Run402
+const HELP = `run402 deploy — Deploy to an existing project on Run402
 
 Usage:
   run402 deploy [options]
   cat manifest.json | run402 deploy [options]
 
 Options:
   --manifest <file>    Path to manifest JSON file  (default: read from stdin)
+  --project <id>       Project ID to deploy to     (default: active project)
   --help, -h           Show this help message
 
 Manifest format (JSON):
   {
-    "name": "my-app",
+    "project_id": "prj_...",
     "migrations": "CREATE TABLE items (id serial PRIMARY KEY, title text NOT NULL, done boolean DEFAULT false)",
     "rls": {
       "template": "public_read_write",
@@ -28,7 +29,8 @@ Manifest format (JSON):
     "subdomain": "my-app"
   }
 
-  All fields except "name" are optional.
+  project_id is required (provision first with 'run402 provision').
+  All other fields are optional.
 
   RLS templates:
     user_owns_rows   — users see only their rows (requires owner_column per table)
@@ -40,16 +42,18 @@ Manifest format (JSON):
 
 Examples:
   run402 deploy --manifest app.json
+  run402 deploy --manifest app.json --project prj_123_1
   cat app.json | run402 deploy
 
 Prerequisites:
   - run402 init                     Set up allowance and funding
   - run402 tier set prototype       Subscribe to a tier
+  - run402 provision                Provision a project first
 
 Notes:
   - Requires an active tier subscription (run402 tier set <tier>)
-  - Project credentials (project_id, keys, URL) are saved locally after deploy
-  - Use 'run402 projects list' to see all deployed projects
+  - Provision a project first with 'run402 provision', then deploy to it
+  - Use 'run402 projects list' to see all provisioned projects
 `;
 
 async function readStdin() {
@@ -59,25 +63,30 @@ async function readStdin() {
 }
 
 export async function run(args) {
-  const opts = { manifest: null };
+  const opts = { manifest: null, project: null };
   for (let i = 0; i < args.length; i++) {
     if (args[i] === "--help" || args[i] === "-h") { console.log(HELP); process.exit(0); }
     if (args[i] === "--manifest" && args[i + 1]) opts.manifest = args[++i];
+    if (args[i] === "--project" && args[i + 1]) opts.project = args[++i];
   }
 
   const manifest = opts.manifest ? JSON.parse(readFileSync(opts.manifest, "utf-8")) : JSON.parse(await readStdin());
 
+  // --project flag overrides manifest's project_id
+  if (opts.project) manifest.project_id = opts.project;
+
+  // If no project_id in manifest, use active project
+  if (!manifest.project_id) {
+    const { id } = findProject(null);
+    manifest.project_id = id;
+  }
+
+  // Remove legacy 'name' field if present
+  delete manifest.name;
+
   const authHeaders = allowanceAuthHeaders("/deploy/v1");
   const res = await fetch(`${API}/deploy/v1`, { method: "POST", headers: { "Content-Type": "application/json", ...authHeaders }, body: JSON.stringify(manifest) });
   const result = await res.json();
   if (!res.ok) { console.error(JSON.stringify({ status: "error", http: res.status, ...result })); process.exit(1); }
-  if (result.project_id) {
-    saveProject(result.project_id, {
-      anon_key: result.anon_key, service_key: result.service_key,
-      site_url: result.site_url || result.subdomain_url,
-      deployed_at: new Date().toISOString(),
-    });
-    setActiveProjectId(result.project_id);
-  }
   console.log(JSON.stringify(result, null, 2));
 }

cli/lib/init.mjs

@@ -5,10 +5,27 @@ import { mkdirSync } from "fs";
 const USDC_ABI = [{ name: "balanceOf", type: "function", stateMutability: "view", inputs: [{ name: "account", type: "address" }], outputs: [{ name: "", type: "uint256" }] }];
 const USDC_SEPOLIA = "0x036CbD53842c5426634e7929541eC2318f3dCF7e";
 
+const HELP = `run402 init — Set up allowance, funding, and check tier status
+
+Usage:
+  run402 init
+
+Steps (idempotent — safe to re-run):
+  1. Creates config directory (~/.config/run402)
+  2. Creates agent allowance if none exists
+  3. Checks on-chain USDC balance; requests faucet if zero
+  4. Shows current tier subscription status
+  5. Lists local project count
+  6. Suggests next step (tier set or deploy)
+
+Run this once to get started, or again to check your setup.
+`;
+
 function short(addr) { return addr.slice(0, 6) + "..." + addr.slice(-4); }
 function line(label, value) { console.log(`  ${label.padEnd(10)} ${value}`); }
 
-export async function run() {
+export async function run(args = []) {
+  if (args.includes("--help") || args.includes("-h")) { console.log(HELP); process.exit(0); }
   console.log();
 
   // 1. Config directory

cli/lib/status.mjs

@@ -0,0 +1,63 @@
+import { readAllowance, loadKeyStore, getActiveProjectId, API } from "./config.mjs";
+import { getAllowanceAuthHeaders } from "../core-dist/allowance-auth.js";
+
+const HELP = `run402 status — Show full account state in one shot
+
+Usage:
+  run402 status
+
+Displays:
+  - Allowance address and funding status
+  - Billing balance (available + held)
+  - Tier subscription (name, status, expiry)
+  - Projects (from server, with fallback to local keystore)
+  - Active project ID
+
+Output is JSON. Requires an existing allowance (run 'run402 init' first).
+`;
+
+export async function run(args = []) {
+  if (args.includes("--help") || args.includes("-h")) { console.log(HELP); process.exit(0); }
+  const allowance = readAllowance();
+  if (!allowance) {
+    console.log(JSON.stringify({ status: "no_allowance", message: "No agent allowance found. Run: run402 init" }));
+    return;
+  }
+
+  const wallet = allowance.address.toLowerCase();
+  const authHeaders = getAllowanceAuthHeaders("/tiers/v1/status");
+
+  // Parallel API calls: tier + billing balance + server-side projects
+  const [tierRes, balanceRes, projectsRes] = await Promise.all([
+    authHeaders
+      ? fetch(`${API}/tiers/v1/status`, { headers: { ...authHeaders } }).catch(() => null)
+      : null,
+    fetch(`${API}/billing/v1/accounts/${wallet}`).catch(() => null),
+    fetch(`${API}/wallets/v1/${wallet}/projects`).catch(() => null),
+  ]);
+
+  const tier = tierRes?.ok ? await tierRes.json() : null;
+  const billing = balanceRes?.ok ? await balanceRes.json() : null;
+  const remote = projectsRes?.ok ? await projectsRes.json() : null;
+
+  // Local keystore
+  const store = loadKeyStore();
+  const activeId = getActiveProjectId();
+
+  const result = {
+    allowance: {
+      address: allowance.address,
+      funded: allowance.funded || false,
+    },
+    tier: tier && tier.tier
+      ? { name: tier.tier, status: tier.status, expires: tier.lease_expires_at }
+      : null,
+    balance: billing && billing.exists
+      ? { available_usd_micros: billing.available_usd_micros, held_usd_micros: billing.held_usd_micros }
+      : null,
+    projects: remote?.projects || Object.keys(store.projects).map(id => ({ id })),
+    active_project: activeId || null,
+  };
+
+  console.log(JSON.stringify(result, null, 2));
+}

openclaw/scripts/status.mjs

@@ -0,0 +1 @@
+export { run } from "../../cli/lib/status.mjs";

src/index.ts

@@ -239,7 +239,7 @@ server.tool(
 
 server.tool(
   "bundle_deploy",
-  "One-call full-stack app deployment. Provisions a database and optionally runs migrations, applies RLS, sets secrets, deploys functions, deploys a static site, and claims a subdomain. Free with active tier.",
+  "Deploy to an existing project. Runs migrations, applies RLS, sets secrets, deploys functions, deploys a static site, and claims a subdomain. Requires a provisioned project_id. Free with active tier.",
   bundleDeploySchema,
   async (args) => handleBundleDeploy(args),
 );

src/tools/bundle-deploy.ts

@@ -1,15 +1,15 @@
 import { z } from "zod";
 import { apiRequest } from "../client.js";
-import { saveProject, setActiveProjectId } from "../keystore.js";
-import { formatApiError } from "../errors.js";
+import { formatApiError, projectNotFound } from "../errors.js";
 import { requireAllowanceAuth } from "../allowance-auth.js";
+import { getProject } from "../keystore.js";
 
 export const bundleDeploySchema = {
-  name: z.string().describe("App name (used as project name and default subdomain)"),
+  project_id: z.string().describe("Project ID to deploy to (from provision). Uses active project if omitted.").optional(),
   migrations: z
     .string()
     .optional()
-    .describe("SQL migrations to run after provisioning (CREATE TABLE statements, etc.)"),
+    .describe("SQL migrations to run (CREATE TABLE statements, etc.)"),
   rls: z
     .object({
       template: z.enum(["user_owns_rows", "public_read", "public_read_write"]),
@@ -58,22 +58,27 @@ export const bundleDeploySchema = {
 };
 
 export async function handleBundleDeploy(args: {
-  name: string;
+  project_id?: string;
   migrations?: string;
   rls?: { template: string; tables: Array<{ table: string; owner_column?: string }> };
   secrets?: Array<{ key: string; value: string }>;
   functions?: Array<{ name: string; code: string; config?: { timeout?: number; memory?: number } }>;
   files?: Array<{ file: string; data: string; encoding?: string }>;
   subdomain?: string;
 }): Promise<{ content: Array<{ type: "text"; text: string }>; isError?: boolean }> {
+  const projectId = args.project_id;
+  if (!projectId) return projectNotFound("(none — project_id is required)");
+  const project = getProject(projectId);
+  if (!project) return projectNotFound(projectId);
+
   const auth = requireAllowanceAuth("/deploy/v1");
   if ("error" in auth) return auth.error;
 
   const res = await apiRequest("/deploy/v1", {
     method: "POST",
     headers: { ...auth.headers },
     body: {
-      name: args.name,
+      project_id: projectId,
       migrations: args.migrations,
       rls: args.rls,
       secrets: args.secrets,
@@ -87,28 +92,18 @@ export async function handleBundleDeploy(args: {
 
   const body = res.body as {
     project_id: string;
-    anon_key: string;
-    service_key: string;
-    schema_slot: string;
     site_url?: string;
-    subdomain_url?: string;
+    deployment_id?: string;
     functions?: Array<{ name: string; url: string }>;
+    subdomain_url?: string;
   };
 
-  // Save credentials to local key store and set as active project
-  saveProject(body.project_id, {
-    anon_key: body.anon_key,
-    service_key: body.service_key,
-  });
-  setActiveProjectId(body.project_id);
-
   const lines = [
-    `## Bundle Deployed: ${args.name}`,
+    `## Bundle Deployed`,
     ``,
     `| Field | Value |`,
     `|-------|-------|`,
     `| project_id | \`${body.project_id}\` |`,
-    `| schema | ${body.schema_slot} |`,
   ];
 
   if (body.site_url) {
@@ -117,6 +112,9 @@ export async function handleBundleDeploy(args: {
   if (body.subdomain_url) {
     lines.push(`| subdomain | ${body.subdomain_url} |`);
   }
+  if (body.deployment_id) {
+    lines.push(`| deployment_id | \`${body.deployment_id}\` |`);
+  }
 
   if (body.functions && body.functions.length > 0) {
     lines.push(``);
@@ -126,8 +124,5 @@ export async function handleBundleDeploy(args: {
     }
   }
 
-  lines.push(``);
-  lines.push(`Keys saved to local key store.`);
-
   return { content: [{ type: "text", text: lines.join("\n") }] };
 }

sync.test.ts

@@ -66,6 +66,7 @@ function parseCliCommands(): string[] {
   }
   if (existsSync(join(__dirname, "cli/lib/deploy.mjs"))) cmds.push("deploy");
   if (existsSync(join(__dirname, "cli/lib/init.mjs"))) cmds.push("init");
+  if (existsSync(join(__dirname, "cli/lib/status.mjs"))) cmds.push("status");
   return cmds.sort();
 }
 
@@ -79,6 +80,7 @@ function parseOpenClawCommands(): string[] {
   }
   if (existsSync(join(__dirname, "openclaw/scripts/deploy.mjs"))) cmds.push("deploy");
   if (existsSync(join(__dirname, "openclaw/scripts/init.mjs"))) cmds.push("init");
+  if (existsSync(join(__dirname, "openclaw/scripts/status.mjs"))) cmds.push("status");
   return cmds.sort();
 }
 
@@ -133,8 +135,9 @@ interface Capability {
 }
 
 const SURFACE: Capability[] = [
-  // ── Init (local-only) ──────────────────────────────────────────────────
+  // ── Init / status (local-only) ──────────────────────────────────────────
   { id: "init",              endpoint: "(local)",                              mcp: null,                            cli: "init",                openclaw: "init" },
+  { id: "status",            endpoint: "(local)",                              mcp: null,                            cli: "status",              openclaw: "status" },
 
   // ── Project lifecycle ────────────────────────────────────────────────────
   { id: "get_quote",         endpoint: "POST /projects/v1/quote",                mcp: "get_quote",                    cli: "projects:quote",      openclaw: "projects:quote" },