fix(delete): rename archive_project → delete_project; correct semantics

DELETE /projects/v1/:id triggers an immediate, irreversible destructive
cascade (drop schema, delete Lambdas, release subdomains, tombstone
mailbox, etc.) — not a reactivatable grace window. v1.32.0 conflated it
with the automatic lease-expiry state machine, and the misleading "grace
window would have reactivated" success text + "Soft-delete" description
created a real data-loss-risk bug for agents reading the tool metadata.

This commit:
- Renames the MCP tool archive_project → delete_project to match the
  HTTP verb and the CLI's `projects delete` subcommand (all three
  interfaces are now consistently named).
- Rewrites the tool description to state immediate, irreversible
  destructive cascade, list the cascade effects, and explicitly
  contrast with the automatic lease-expiry grace path (which is still
  handled by errors.ts 402 extraction from v1.32.0).
- Rewrites the success message to match (no reactivation claim).
- Corrects CLI `projects delete` help text.
- Updates README, sync.test.ts SURFACE, mcp-integration.test.ts import,
  and openspec/specs/project-lifecycle-surface/spec.md.

Breaking for MCP clients that have `archive_project` cached — they'll
need to pick up `delete_project`.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Author: MajorTal

README.md

@@ -61,7 +61,7 @@ npx run402-mcp
 | `list_versions` | List published versions of a project. |
 | `get_quote` | Get tier pricing. Free, no auth required. |
 | `set_tier` | Subscribe, renew, or upgrade tier. Auto-detects action. Handles x402 payment. |
-| `archive_project` | Archive a project and remove from local key store. |
+| `delete_project` | Immediately and irreversibly delete a project (cascade purge) and remove from local key store. |
 | `check_balance` | Check billing account balance for an agent allowance address. |
 | `list_projects` | List all active projects for an agent allowance address. |
 | `allowance_status` | Check local agent allowance status — address, network, funding. |

cli/lib/projects.mjs

@@ -18,7 +18,7 @@ Subcommands:
   usage <id>                              Show compute/storage usage for a project
   schema <id>                             Inspect the database schema
   rls   <id> <template> <tables_json>     Apply Row-Level Security policies
-  delete <id>                             Soft-delete a project (enters ~104-day grace; renew to reactivate) and remove it from local state
+  delete <id>                             Immediately and irreversibly delete a project (cascade purge) and remove from local state
   pin   <id>                              Pin a project (prevents expiry/GC)
   promote-user <id> <email>               Promote a user to project_admin role
   demote-user  <id> <email>               Demote a user from project_admin role

mcp-integration.test.ts

@@ -254,8 +254,8 @@ describe("MCP integration (live API, no mocks)", { timeout: 180_000 }, () => {
   });
 
   it("cleanup — delete project", async () => {
-    const { handleArchiveProject } = await import("./src/tools/archive-project.js");
-    const result = await handleArchiveProject({ project_id: projectId });
+    const { handleDeleteProject } = await import("./src/tools/delete-project.js");
+    const result = await handleDeleteProject({ project_id: projectId });
     const out = text(result);
     assert.equal(result.isError, undefined, `Expected no error, got: ${out}`);
   });

openspec/specs/project-lifecycle-surface/spec.md

@@ -23,19 +23,19 @@ When `POST /subdomains/v1` (or equivalent subdomain-claim route) returns `HTTP 4
 - **WHEN** a subdomain-claim tool receives `HTTP 409` with body `{ "message": "Subdomain reserved", "hint": "Name held for original owner during grace period" }`
 - **THEN** the tool result includes the 409 status, the message and hint, and next-step text mentioning the reservation rather than reusing the 403 lease-expired guidance
 
-### Requirement: archive_project tool text reflects grace-period vocabulary
+### Requirement: delete_project tool name and text match the API
 
-The `archive_project` MCP tool description and success message, and the corresponding CLI subcommand output, SHALL use the new lifecycle vocabulary (purge / grace window) rather than the obsolete "archived" wording. The tool name, CLI subcommand name, HTTP method, and endpoint path SHALL remain unchanged.
+The MCP tool that calls `DELETE /projects/v1/:id` SHALL be named `delete_project` (matching the HTTP method) and its description SHALL state that the call triggers an immediate, irreversible cascade purge (drop schema, delete Lambdas, release subdomains, tombstone mailbox, etc.) and SHALL distinguish that explicit purge from the automatic lease-expiry grace state machine. The CLI subcommand SHALL remain `run402 projects delete <id>` and use equivalent wording.
 
-#### Scenario: Successful archive
+#### Scenario: Successful delete
 
-- **WHEN** the agent invokes `archive_project` on a live project and the API returns 200
-- **THEN** the tool returns success text that uses "purged" (or equivalent purge/grace vocabulary) and does not describe the project as "archived"
+- **WHEN** the agent invokes `delete_project` on a live project and the API returns 200
+- **THEN** the tool returns success text that names the action as a delete/purge, lists the cascade effects, and states that the action is irreversible
 
 #### Scenario: Tool description advertised via MCP list
 
 - **WHEN** an MCP client lists available tools
-- **THEN** the description for `archive_project` reflects the soft-delete lifecycle (grace window → purge) and does not claim the project becomes "archived" after 7 days
+- **THEN** the description for `delete_project` describes immediate destructive cascade, explicitly contrasts it with the automatic lease-expiry grace path, and does not claim the project enters a reactivatable grace window
 
 ### Requirement: SKILL.md runtime sections document the grace state machine
 

src/index.ts

@@ -43,7 +43,7 @@ import { deleteSecretSchema, handleDeleteSecret } from "./tools/delete-secret.js
 
 // New tools — subdomains & projects
 import { listSubdomainsSchema, handleListSubdomains } from "./tools/list-subdomains.js";
-import { archiveProjectSchema, handleArchiveProject } from "./tools/archive-project.js";
+import { deleteProjectSchema, handleDeleteProject } from "./tools/delete-project.js";
 import { pinProjectSchema, handlePinProject } from "./tools/pin-project.js";
 
 // New tools — user role management
@@ -395,10 +395,10 @@ server.tool(
 );
 
 server.tool(
-  "archive_project",
-  "Soft-delete a project: the gateway moves it into the grace-period state machine (active → past_due → frozen → dormant → purged, ~104 days) and this tool removes it from the local key store. End-user data plane keeps serving during grace; renewing the tier before purge reactivates it. After purge the action cannot be undone.",
-  archiveProjectSchema,
-  async (args) => handleArchiveProject(args),
+  "delete_project",
+  "Immediately and irreversibly delete a project: the gateway runs the full destructive cascade (drop tenant schema, delete Lambda functions, release subdomains, tombstone mailbox, remove sender domain, wipe secrets and app versions) and sets status=purged. This tool also removes the project from the local key store. Distinct from the automatic lease-expiry grace window — this action is the explicit purge and cannot be undone. To recover from a missed renewal use `set_tier` instead.",
+  deleteProjectSchema,
+  async (args) => handleDeleteProject(args),
 );
 
 // ─── Admin tools ─────────────────────────────────────────────────────────────

src/tools/archive-project.ts src/tools/delete-project.tssrc/tools/archive-project.ts renamed to src/tools/delete-project.ts

@@ -3,13 +3,13 @@ import { apiRequest } from "../client.js";
 import { getProject, loadKeyStore, saveKeyStore } from "../keystore.js";
 import { formatApiError, projectNotFound } from "../errors.js";
 
-export const archiveProjectSchema = {
+export const deleteProjectSchema = {
   project_id: z
     .string()
-    .describe("The project ID to soft-delete (enter the grace window)"),
+    .describe("The project ID to delete (irreversible cascade purge)"),
 };
 
-export async function handleArchiveProject(args: {
+export async function handleDeleteProject(args: {
   project_id: string;
 }): Promise<{ content: Array<{ type: "text"; text: string }>; isError?: boolean }> {
   const project = getProject(args.project_id);
@@ -24,7 +24,6 @@ export async function handleArchiveProject(args: {
 
   if (!res.ok) return formatApiError(res, "deleting project");
 
-  // Remove from local key store
   const store = loadKeyStore();
   delete store.projects[args.project_id];
   saveKeyStore(store);
@@ -33,7 +32,7 @@ export async function handleArchiveProject(args: {
     content: [
       {
         type: "text",
-        text: `Project \`${args.project_id}\` entered the soft-delete state (status: purged) and was removed from the local key store. Renewing the tier during the grace window would have reactivated it.`,
+        text: `Project \`${args.project_id}\` deleted (status: purged). Schema dropped, functions deleted, subdomains released, mailbox tombstoned. Removed from local key store. This action is irreversible.`,
       },
     ],
   };

sync.test.ts

@@ -143,7 +143,7 @@ const SURFACE: Capability[] = [
   { id: "get_quote",         endpoint: "POST /projects/v1/quote",                mcp: "get_quote",                    cli: "projects:quote",      openclaw: "projects:quote" },
   { id: "provision",         endpoint: "POST /projects/v1",                      mcp: "provision_postgres_project",    cli: "projects:provision",  openclaw: "projects:provision" },
   { id: "set_tier",           endpoint: "POST /tiers/v1/:tier",                   mcp: "set_tier",                      cli: "tier:set",            openclaw: "tier:set" },
-  { id: "archive",           endpoint: "DELETE /projects/v1/:id",                mcp: "archive_project",               cli: "projects:delete",     openclaw: "projects:delete" },
+  { id: "delete",            endpoint: "DELETE /projects/v1/:id",                mcp: "delete_project",                cli: "projects:delete",     openclaw: "projects:delete" },
 
   // ── Faucet ───────────────────────────────────────────────────────────────
   { id: "faucet",            endpoint: "POST /faucet/v1",                        mcp: "request_faucet",                cli: "allowance:fund",      openclaw: "allowance:fund" },