budget cap raise

Raise the monthly cap on an app's budget. Atomic with breaker-clear when the new cap is above current spend. Alias for convox budget set --monthly-cap N (both --monthly-cap and --monthly-cap-usd are accepted forms; --monthly-cap-usd is the canonical name on this command).

Requires admin role on the rack RBAC. Mutating the monthly cap is admin-gated end-to-end (AppBudgetSet cap-mutation path on the rack). A non-admin caller (rw role) receives 403 AppBudgetSet: admin role required to set budget cap. Basic-auth (rack-password) callers automatically pass the admin check.

Usage

    convox budget cap raise <app> --monthly-cap-usd N

Examples

Raise from 250 USD to 500 USD on myapp; breaker clears:

    $ convox budget cap raise myapp --monthly-cap-usd 500
    Raising monthly cap to 500.00 USD... OK
    Breaker cleared.

Raise rejected when the new cap is below current spend:

    $ convox budget cap raise myapp --monthly-cap-usd 100
    error: new cap 100.00 USD is below current spend 134.65 USD

The cap-raise + breaker-clear pair is atomic. The rack acquires the per-app lock, persists the new cap, and clears the CircuitBreakerTripped flag plus the alert-fired timestamps in the same critical section. There is no observable window where the new cap is set but the old breaker is still tripped.

After :fired (post-shutdown), cap-raise clears the breaker but does NOT restart already-shutdown services. Run convox budget reset myapp to restore replicas from the persisted shutdown-state annotation.

A cap-raise that clears the breaker emits the app:budget:breaker-cleared audit event in 3.24.6+ (top-level event, not a sub-type of auto-shutdown). Receivers parsing webhook events should fail-open on unknown event types or be updated to handle the new type. See Webhook Signing.

See Also

• budget cap — parent command group
• budget reset — acknowledge cap breach without raising
• Cap raise — operational guide
• Webhook Signing — :breaker-cleared event semantics