@percher/core 0.2.6 → 0.3.0

package/dist/commands/reproduce.js

@@ -0,0 +1,211 @@
+import { mkdtempSync, writeFileSync } from "node:fs";
+import { tmpdir } from "node:os";
+import { join } from "node:path";
+import { PercherApiError } from "@percher/client";
+import { z } from "zod/v3";
+import { readPercherTomlAppName } from "../app-name";
+export const reproduceInputSchema = z.object({
+    app: z
+        .string()
+        .optional()
+        .describe("App name. Defaults to the [app].name in the current directory's percher.toml."),
+    deployId: z
+        .string()
+        .describe("Deploy id (e.g. dep_abc123) to reproduce. Required — usually the failed deploy you want to debug."),
+});
+/**
+ * FUTURE1 Phase 4.2 — download a deploy's source tarball + (optionally)
+ * run nixpacks against it locally. The intended use is "build failed
+ * in cloud, reproduce here to fix" — surfaced via
+ * `recovery.alternativeActions[]` after `inspect_build_log` didn't
+ * yield a clear fix.
+ *
+ * Privacy invariant: env values are NEVER fetched. The endpoint
+ * surfaces only env *keys* so the user knows what to set locally; the
+ * values come from their own machine (or stay missing if compile-only
+ * errors are what we're debugging).
+ */
+export async function reproduce(ctx, input) {
+    const appName = input.app ?? readPercherTomlAppName(ctx.cwd);
+    if (!appName) {
+        return {
+            status: "failed",
+            deployId: input.deployId,
+            error: {
+                title: "App name required",
+                explanation: "reproduce needs either an explicit `app` argument or a percher.toml in the current directory.",
+                suggestion: "Pass --app=<name>, or cd into a project that has a percher.toml.",
+            },
+            summary: "App name required.",
+        };
+    }
+    let app;
+    try {
+        app = await ctx.client.apps.get(appName);
+    }
+    catch (err) {
+        if (err instanceof PercherApiError) {
+            if (err.status === 401) {
+                return {
+                    status: "needs_login",
+                    deployId: input.deployId,
+                    summary: "Not logged in — run `bunx percher login` first.",
+                };
+            }
+            if (err.status === 404) {
+                return {
+                    status: "failed",
+                    deployId: input.deployId,
+                    error: {
+                        title: "App not found",
+                        explanation: `Could not resolve app "${appName}".`,
+                        suggestion: "Check the app name with `bunx percher whoami` or your dashboard.",
+                    },
+                    summary: "App not found.",
+                };
+            }
+        }
+        throw err;
+    }
+    ctx.status(`Downloading source for ${input.deployId}...`);
+    let bytes;
+    try {
+        bytes = await ctx.client.apps.downloadSource(app.id, input.deployId);
+    }
+    catch (err) {
+        if (err instanceof PercherApiError && err.code === "TARBALL_GONE") {
+            return {
+                status: "failed",
+                appName: app.name,
+                deployId: input.deployId,
+                error: {
+                    title: "Source has been retention-evicted",
+                    explanation: "Percher only keeps deploy tarballs for a bounded window per plan; this deploy's source is gone.",
+                    suggestion: "Run `bunx percher publish` to upload a fresh source, then reproduce that deploy in the future.",
+                },
+                summary: "Source tarball is gone.",
+            };
+        }
+        if (err instanceof PercherApiError && err.status === 404) {
+            return {
+                status: "failed",
+                appName: app.name,
+                deployId: input.deployId,
+                error: {
+                    title: "Deploy not found",
+                    explanation: `No deploy with id ${input.deployId} on app ${app.name}.`,
+                    suggestion: "Check the id with `bunx percher deploys list`.",
+                },
+                summary: "Deploy not found.",
+            };
+        }
+        throw err;
+    }
+    // Privacy: fetch env KEYS only, never values. The endpoint we hit
+    // here returns masked values; we discard them and pass keys to the
+    // user so they know what to set locally. Failures are non-fatal —
+    // the source extraction is the load-bearing artifact.
+    // env.list returns `Record<string, string>` (key → masked value)
+    // for the CURRENT app env, not a snapshot from the failed deploy.
+    // Percher doesn't persist a per-deploy env snapshot today (the
+    // image-cache hash includes them but the values aren't stored). We
+    // discard the values; only the keys reach the user — privacy
+    // invariant on Phase 4.2 — and the result+CLI text both label this
+    // as "current app" so a user who rotated keys between failure and
+    // reproduce isn't misled into chasing the wrong missing var. Codex
+    // P2 follow-up on 3b609f9.
+    let currentAppEnvKeys = [];
+    try {
+        const envMap = await ctx.client.env.list(app.id);
+        currentAppEnvKeys = Object.keys(envMap).sort();
+    }
+    catch {
+        /* env list unavailable; reproduce can still proceed */
+    }
+    // Write to tmp + extract. Use system `tar` because:
+    //  - macOS/Linux ship it
+    //  - Windows 10+ has `tar.exe` since 1803 (April 2018)
+    //  - Bun.spawn streams correctly across platforms
+    // Fall back to "saved tarball, extract manually" if tar isn't
+    // available — the user keeps the bytes either way.
+    const tmpDir = mkdtempSync(join(tmpdir(), `percher-reproduce-${input.deployId}-`));
+    const tarballPath = join(tmpDir, "source.tar.gz");
+    writeFileSync(tarballPath, bytes);
+    let extracted = false;
+    try {
+        const proc = Bun.spawn(["tar", "-xzf", tarballPath, "-C", tmpDir], {
+            stdout: "pipe",
+            stderr: "pipe",
+        });
+        const exitCode = await proc.exited;
+        extracted = exitCode === 0;
+    }
+    catch {
+        /* tar not on PATH — fall through */
+    }
+    const envHint = currentAppEnvKeys.length > 0
+        ? `Current app env keys (NOT a deploy-time snapshot): ${currentAppEnvKeys.join(", ")}`
+        : "No env vars currently configured on the app.";
+    if (!extracted) {
+        ctx.status(`Source saved to ${tarballPath}`);
+        return {
+            status: "extracted",
+            appName: app.name,
+            deployId: input.deployId,
+            tmpDir,
+            tarballPath,
+            currentAppEnvKeys,
+            summary: `Source saved to ${tarballPath}. Extract with: tar -xzf ${tarballPath} -C ${tmpDir}`,
+        };
+    }
+    ctx.status(`Extracted to ${tmpDir}`);
+    // Try nixpacks if installed — best-effort. If it's not on PATH OR
+    // returns non-zero, the user is left with the extracted source and
+    // a clear next step (run their own build command). builtLocally
+    // tracks the outcome for the agent's recovery loop.
+    let builtLocally = false;
+    let nixpacksAvailable = false;
+    try {
+        const which = Bun.spawn(["nixpacks", "--version"], { stdout: "pipe", stderr: "pipe" });
+        const code = await which.exited;
+        nixpacksAvailable = code === 0;
+    }
+    catch {
+        /* not installed */
+    }
+    if (nixpacksAvailable) {
+        ctx.status("Running nixpacks build locally...");
+        try {
+            const build = Bun.spawn(["nixpacks", "build", tmpDir, "--name", `repro-${input.deployId}`], {
+                cwd: tmpDir,
+                stdout: "inherit",
+                stderr: "inherit",
+            });
+            const code = await build.exited;
+            builtLocally = code === 0;
+        }
+        catch {
+            /* spawn failed despite version check passing — rare but tolerable */
+        }
+    }
+    // Codex P2 follow-up on 3b609f9: pin the redeploy suggestion to
+    // THIS deploy id, not the bare `redeploy` form. Without it,
+    // `bunx percher redeploy` resolves to the LATEST LIVE deploy —
+    // typically the previous successful one, not the failed source the
+    // user just reproduced. That'd retry the wrong source entirely.
+    const buildHint = builtLocally
+        ? `Build succeeded locally — the cloud failure may have been infra-flake. Retry the same source server-side: \`bunx percher redeploy ${input.deployId} --app ${app.name}\``
+        : nixpacksAvailable
+            ? "nixpacks build also failed locally — same error as cloud. Iterate on the source in the tmp dir, then `bunx percher publish` from the project root once fixed."
+            : `nixpacks not on PATH. Install from https://nixpacks.com to reproduce the build, or run your own build command in ${tmpDir}.`;
+    return {
+        status: builtLocally ? "extracted_and_built" : "extracted",
+        appName: app.name,
+        deployId: input.deployId,
+        tmpDir,
+        currentAppEnvKeys,
+        builtLocally,
+        summary: `Source extracted to ${tmpDir}. ${envHint} ${buildHint}`,
+    };
+}
+//# sourceMappingURL=reproduce.js.map

package/dist/commands/reproduce.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"reproduce.js","sourceRoot":"","sources":["../../src/commands/reproduce.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACrD,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAClD,OAAO,EAAE,CAAC,EAAE,MAAM,QAAQ,CAAC;AAC3B,OAAO,EAAE,sBAAsB,EAAE,MAAM,aAAa,CAAC;AAGrD,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3C,GAAG,EAAE,CAAC;SACH,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CAAC,+EAA+E,CAAC;IAC5F,QAAQ,EAAE,CAAC;SACR,MAAM,EAAE;SACR,QAAQ,CACP,mGAAmG,CACpG;CACJ,CAAC,CAAC;AAqCH;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,GAAY,EAAE,KAAqB;IACjE,MAAM,OAAO,GAAG,KAAK,CAAC,GAAG,IAAI,sBAAsB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC7D,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO;YACL,MAAM,EAAE,QAAQ;YAChB,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,KAAK,EAAE;gBACL,KAAK,EAAE,mBAAmB;gBAC1B,WAAW,EACT,+FAA+F;gBACjG,UAAU,EAAE,kEAAkE;aAC/E;YACD,OAAO,EAAE,oBAAoB;SAC9B,CAAC;IACJ,CAAC;IAED,IAAI,GAAoD,CAAC;IACzD,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAC3C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,YAAY,eAAe,EAAE,CAAC;YACnC,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;gBACvB,OAAO;oBACL,MAAM,EAAE,aAAa;oBACrB,QAAQ,EAAE,KAAK,CAAC,QAAQ;oBACxB,OAAO,EAAE,iDAAiD;iBAC3D,CAAC;YACJ,CAAC;YACD,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;gBACvB,OAAO;oBACL,MAAM,EAAE,QAAQ;oBAChB,QAAQ,EAAE,KAAK,CAAC,QAAQ;oBACxB,KAAK,EAAE;wBACL,KAAK,EAAE,eAAe;wBACtB,WAAW,EAAE,0BAA0B,OAAO,IAAI;wBAClD,UAAU,EAAE,kEAAkE;qBAC/E;oBACD,OAAO,EAAE,gBAAgB;iBAC1B,CAAC;YACJ,CAAC;QACH,CAAC;QACD,MAAM,GAAG,CAAC;IACZ,CAAC;IAED,GAAG,CAAC,MAAM,CAAC,0BAA0B,KAAK,CAAC,QAAQ,KAAK,CAAC,CAAC;IAC1D,IAAI,KAAiB,CAAC;IACtB,IAAI,CAAC;QACH,KAAK,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,EAAE,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;IACvE,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,YAAY,eAAe,IAAI,GAAG,CAAC,IAAI,KAAK,cAAc,EAAE,CAAC;YAClE,OAAO;gBACL,MAAM,EAAE,QAAQ;gBAChB,OAAO,EAAE,GAAG,CAAC,IAAI;gBACjB,QAAQ,EAAE,KAAK,CAAC,QAAQ;gBACxB,KAAK,EAAE;oBACL,KAAK,EAAE,mCAAmC;oBAC1C,WAAW,EACT,iGAAiG;oBACnG,UAAU,EACR,gGAAgG;iBACnG;gBACD,OAAO,EAAE,yBAAyB;aACnC,CAAC;QACJ,CAAC;QACD,IAAI,GAAG,YAAY,eAAe,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YACzD,OAAO;gBACL,MAAM,EAAE,QAAQ;gBAChB,OAAO,EAAE,GAAG,CAAC,IAAI;gBACjB,QAAQ,EAAE,KAAK,CAAC,QAAQ;gBACxB,KAAK,EAAE;oBACL,KAAK,EAAE,kBAAkB;oBACzB,WAAW,EAAE,qBAAqB,KAAK,CAAC,QAAQ,WAAW,GAAG,CAAC,IAAI,GAAG;oBACtE,UAAU,EAAE,gDAAgD;iBAC7D;gBACD,OAAO,EAAE,mBAAmB;aAC7B,CAAC;QACJ,CAAC;QACD,MAAM,GAAG,CAAC;IACZ,CAAC;IAED,kEAAkE;IAClE,mEAAmE;IACnE,kEAAkE;IAClE,sDAAsD;IACtD,iEAAiE;IACjE,kEAAkE;IAClE,+DAA+D;IAC/D,mEAAmE;IACnE,6DAA6D;IAC7D,mEAAmE;IACnE,kEAAkE;IAClE,mEAAmE;IACnE,2BAA2B;IAC3B,IAAI,iBAAiB,GAAa,EAAE,CAAC;IACrC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACjD,iBAAiB,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;IACjD,CAAC;IAAC,MAAM,CAAC;QACP,uDAAuD;IACzD,CAAC;IAED,oDAAoD;IACpD,yBAAyB;IACzB,uDAAuD;IACvD,kDAAkD;IAClD,8DAA8D;IAC9D,mDAAmD;IACnD,MAAM,MAAM,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,qBAAqB,KAAK,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC;IACnF,MAAM,WAAW,GAAG,IAAI,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;IAClD,aAAa,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;IAElC,IAAI,SAAS,GAAG,KAAK,CAAC;IACtB,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,CAAC,EAAE;YACjE,MAAM,EAAE,MAAM;YACd,MAAM,EAAE,MAAM;SACf,CAAC,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC;QACnC,SAAS,GAAG,QAAQ,KAAK,CAAC,CAAC;IAC7B,CAAC;IAAC,MAAM,CAAC;QACP,oCAAoC;IACtC,CAAC;IAED,MAAM,OAAO,GACX,iBAAiB,CAAC,MAAM,GAAG,CAAC;QAC1B,CAAC,CAAC,sDAAsD,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;QACtF,CAAC,CAAC,8CAA8C,CAAC;IAErD,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,GAAG,CAAC,MAAM,CAAC,mBAAmB,WAAW,EAAE,CAAC,CAAC;QAC7C,OAAO;YACL,MAAM,EAAE,WAAW;YACnB,OAAO,EAAE,GAAG,CAAC,IAAI;YACjB,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,MAAM;YACN,WAAW;YACX,iBAAiB;YACjB,OAAO,EAAE,mBAAmB,WAAW,4BAA4B,WAAW,OAAO,MAAM,EAAE;SAC9F,CAAC;IACJ,CAAC;IAED,GAAG,CAAC,MAAM,CAAC,gBAAgB,MAAM,EAAE,CAAC,CAAC;IAErC,kEAAkE;IAClE,mEAAmE;IACnE,gEAAgE;IAChE,oDAAoD;IACpD,IAAI,YAAY,GAAG,KAAK,CAAC;IACzB,IAAI,iBAAiB,GAAG,KAAK,CAAC;IAC9B,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,UAAU,EAAE,WAAW,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;QACvF,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC;QAChC,iBAAiB,GAAG,IAAI,KAAK,CAAC,CAAC;IACjC,CAAC;IAAC,MAAM,CAAC;QACP,mBAAmB;IACrB,CAAC;IAED,IAAI,iBAAiB,EAAE,CAAC;QACtB,GAAG,CAAC,MAAM,CAAC,mCAAmC,CAAC,CAAC;QAChD,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,UAAU,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,KAAK,CAAC,QAAQ,EAAE,CAAC,EAAE;gBAC1F,GAAG,EAAE,MAAM;gBACX,MAAM,EAAE,SAAS;gBACjB,MAAM,EAAE,SAAS;aAClB,CAAC,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC;YAChC,YAAY,GAAG,IAAI,KAAK,CAAC,CAAC;QAC5B,CAAC;QAAC,MAAM,CAAC;YACP,qEAAqE;QACvE,CAAC;IACH,CAAC;IAED,gEAAgE;IAChE,4DAA4D;IAC5D,+DAA+D;IAC/D,mEAAmE;IACnE,gEAAgE;IAChE,MAAM,SAAS,GAAG,YAAY;QAC5B,CAAC,CAAC,qIAAqI,KAAK,CAAC,QAAQ,UAAU,GAAG,CAAC,IAAI,IAAI;QAC3K,CAAC,CAAC,iBAAiB;YACjB,CAAC,CAAC,+JAA+J;YACjK,CAAC,CAAC,oHAAoH,MAAM,GAAG,CAAC;IAEpI,OAAO;QACL,MAAM,EAAE,YAAY,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,WAAW;QAC1D,OAAO,EAAE,GAAG,CAAC,IAAI;QACjB,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,MAAM;QACN,iBAAiB;QACjB,YAAY;QACZ,OAAO,EAAE,uBAAuB,MAAM,KAAK,OAAO,IAAI,SAAS,EAAE;KAClE,CAAC;AACJ,CAAC"}

package/dist/commands/reset-superuser.d.ts

@@ -1,4 +1,4 @@
-import { z } from "zod";
+import { z } from "zod/v3";
 import type { Context } from "../context";
 export declare const resetSuperuserInputSchema: z.ZodObject<{
     app: z.ZodOptional<z.ZodString>;

package/dist/commands/reset-superuser.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"reset-superuser.d.ts","sourceRoot":"","sources":["../../src/commands/reset-superuser.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,YAAY,CAAC;AAG1C,eAAO,MAAM,yBAAyB;;IAEpC;;;;;;;OAOG;;;;;;;;EAEH,CAAC;AACH,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAE5E,MAAM,WAAW,oBAAoB;IACnC,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,0EAA0E;IAC1E,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,wBAAsB,cAAc,CAClC,GAAG,EAAE,OAAO,EACZ,KAAK,GAAE,mBAAwB,GAC9B,OAAO,CAAC,oBAAoB,CAAC,CAS/B"}
+{"version":3,"file":"reset-superuser.d.ts","sourceRoot":"","sources":["../../src/commands/reset-superuser.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,QAAQ,CAAC;AAE3B,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,YAAY,CAAC;AAG1C,eAAO,MAAM,yBAAyB;;IAEpC;;;;;;;OAOG;;;;;;;;EAEH,CAAC;AACH,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAE5E,MAAM,WAAW,oBAAoB;IACnC,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,0EAA0E;IAC1E,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,wBAAsB,cAAc,CAClC,GAAG,EAAE,OAAO,EACZ,KAAK,GAAE,mBAAwB,GAC9B,OAAO,CAAC,oBAAoB,CAAC,CAS/B"}

package/dist/commands/reset-superuser.js

@@ -1,4 +1,4 @@
-import { z } from "zod";
+import { z } from "zod/v3";
 import { readPercherTomlAppName } from "../app-name";
 import { PercherCoreError } from "../errors";
 export const resetSuperuserInputSchema = z.object({

package/dist/commands/reset-superuser.js.map

@@ -1 +1 @@
-{"version":3,"file":"reset-superuser.js","sourceRoot":"","sources":["../../src/commands/reset-superuser.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,sBAAsB,EAAE,MAAM,aAAa,CAAC;AAErD,OAAO,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAC;AAE7C,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,MAAM,CAAC;IAChD,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC1B;;;;;;;OAOG;IACH,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;CAC/B,CAAC,CAAC;AAUH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,GAAY,EACZ,QAA6B,EAAE;IAE/B,MAAM,MAAM,GAAG,KAAK,CAAC,GAAG,IAAI,sBAAsB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC5D,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,gBAAgB,CAAC,4CAA4C,EAAE;YACvE,IAAI,EAAE,aAAa;YACnB,IAAI,EAAE,6DAA6D;SACpE,CAAC,CAAC;IACL,CAAC;IACD,OAAO,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;AAC1E,CAAC"}
+{"version":3,"file":"reset-superuser.js","sourceRoot":"","sources":["../../src/commands/reset-superuser.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,QAAQ,CAAC;AAC3B,OAAO,EAAE,sBAAsB,EAAE,MAAM,aAAa,CAAC;AAErD,OAAO,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAC;AAE7C,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,MAAM,CAAC;IAChD,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC1B;;;;;;;OAOG;IACH,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;CAC/B,CAAC,CAAC;AAUH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,GAAY,EACZ,QAA6B,EAAE;IAE/B,MAAM,MAAM,GAAG,KAAK,CAAC,GAAG,IAAI,sBAAsB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC5D,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,gBAAgB,CAAC,4CAA4C,EAAE;YACvE,IAAI,EAAE,aAAa;YACnB,IAAI,EAAE,6DAA6D;SACpE,CAAC,CAAC;IACL,CAAC;IACD,OAAO,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;AAC1E,CAAC"}

package/dist/commands/restore.d.ts

@@ -0,0 +1,79 @@
+import type { BackupSidecar, RestoreJob } from "@percher/client";
+import { z } from "zod/v3";
+import type { Context } from "../context";
+/**
+ * Per-app restore (B.2 — CLI/MCP entry point on top of B.1.4).
+ *
+ * Two surfaces:
+ *   - listBackups(ctx, input)  → resolved sidecar list, no mutation
+ *   - restore(ctx, input)      → kicks off + polls until terminal
+ *
+ * `--dry-run`: validates source resolves to a backup the user actually
+ * has + lists what would be restored. Doesn't touch the API beyond
+ * GET /apps/:app/backups. Equivalent to "show me what restore <date>
+ * would do" — the documented v1 affordance from plan-doc B.2.
+ */
+export declare const listBackupsInputSchema: z.ZodObject<{
+    app: z.ZodOptional<z.ZodString>;
+}, "strip", z.ZodTypeAny, {
+    app?: string | undefined;
+}, {
+    app?: string | undefined;
+}>;
+export type ListBackupsInput = z.infer<typeof listBackupsInputSchema>;
+export declare function listBackups(ctx: Context, input: ListBackupsInput): Promise<{
+    backups: BackupSidecar[];
+    skipped: Array<{
+        filename: string;
+        reason: string;
+    }>;
+}>;
+/**
+ * Public input — what shows up in MCP `inputSchema` for AI assistants
+ * + on CLI flags. Only fields a real caller should set live here. Test
+ * + internal injection (poll cadence, timeout overrides) goes via the
+ * second `RestoreInternals` parameter so they don't leak into the
+ * public schema. Pre-fix had `_pollIntervalMs`/`_timeoutMs` on this
+ * schema with underscore-prefixes — visible to MCP, confusing for AI
+ * tooling that didn't know "_" meant "test-only".
+ */
+export declare const restoreInputSchema: z.ZodObject<{
+    app: z.ZodOptional<z.ZodString>;
+    /** "latest" | "YYYY-MM-DD" | "<backup_id>" — passed through to API. */
+    source: z.ZodString;
+    /** Defaults to ["appdata", "pocketbase"] when undefined — matches API. */
+    components: z.ZodOptional<z.ZodArray<z.ZodEnum<["appdata", "pocketbase"]>, "many">>;
+    /** Validate source + show what would happen, but don't actually start
+     *  the restore. */
+    dryRun: z.ZodDefault<z.ZodBoolean>;
+}, "strip", z.ZodTypeAny, {
+    dryRun: boolean;
+    source: string;
+    app?: string | undefined;
+    components?: ("pocketbase" | "appdata")[] | undefined;
+}, {
+    source: string;
+    app?: string | undefined;
+    dryRun?: boolean | undefined;
+    components?: ("pocketbase" | "appdata")[] | undefined;
+}>;
+export type RestoreInput = z.infer<typeof restoreInputSchema>;
+/**
+ * Internal-only knobs for tests + future automation. NOT part of the
+ * Zod schema → not surfaced to MCP / CLI users. Production callers
+ * pass nothing; tests pass small intervals so they don't sleep.
+ */
+export interface RestoreInternals {
+    /** Poll cadence between status checks (ms). Default 2000. */
+    pollIntervalMs?: number;
+    /** Hard cap before throwing restore.timeout (ms). Default 35 min. */
+    timeoutMs?: number;
+}
+export interface DryRunResult {
+    kind: "dry-run";
+    app: string;
+    resolvedBackup: BackupSidecar;
+    components: ("appdata" | "pocketbase")[];
+}
+export declare function restore(ctx: Context, input: RestoreInput, internals?: RestoreInternals): Promise<RestoreJob | DryRunResult>;
+//# sourceMappingURL=restore.d.ts.map

package/dist/commands/restore.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"restore.d.ts","sourceRoot":"","sources":["../../src/commands/restore.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AACjE,OAAO,EAAE,CAAC,EAAE,MAAM,QAAQ,CAAC;AAE3B,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,YAAY,CAAC;AAG1C;;;;;;;;;;;GAWG;AAEH,eAAO,MAAM,sBAAsB;;;;;;EAEjC,CAAC;AACH,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAEtE,wBAAsB,WAAW,CAC/B,GAAG,EAAE,OAAO,EACZ,KAAK,EAAE,gBAAgB,GACtB,OAAO,CAAC;IAAE,OAAO,EAAE,aAAa,EAAE,CAAC;IAAC,OAAO,EAAE,KAAK,CAAC;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;CAAE,CAAC,CAS7F;AAID;;;;;;;;GAQG;AACH,eAAO,MAAM,kBAAkB;;IAE7B,uEAAuE;;IAEvE,0EAA0E;;IAE1E;uBACmB;;;;;;;;;;;;EAEnB,CAAC;AACH,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAE9D;;;;GAIG;AACH,MAAM,WAAW,gBAAgB;IAC/B,6DAA6D;IAC7D,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,qEAAqE;IACrE,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,SAAS,CAAC;IAChB,GAAG,EAAE,MAAM,CAAC;IACZ,cAAc,EAAE,aAAa,CAAC;IAC9B,UAAU,EAAE,CAAC,SAAS,GAAG,YAAY,CAAC,EAAE,CAAC;CAC1C;AAED,wBAAsB,OAAO,CAC3B,GAAG,EAAE,OAAO,EACZ,KAAK,EAAE,YAAY,EACnB,SAAS,GAAE,gBAAqB,GAC/B,OAAO,CAAC,UAAU,GAAG,YAAY,CAAC,CAiFpC"}

package/dist/commands/restore.js

@@ -0,0 +1,164 @@
+import { z } from "zod/v3";
+import { readPercherTomlAppName } from "../app-name";
+import { PercherCoreError } from "../errors";
+/**
+ * Per-app restore (B.2 — CLI/MCP entry point on top of B.1.4).
+ *
+ * Two surfaces:
+ *   - listBackups(ctx, input)  → resolved sidecar list, no mutation
+ *   - restore(ctx, input)      → kicks off + polls until terminal
+ *
+ * `--dry-run`: validates source resolves to a backup the user actually
+ * has + lists what would be restored. Doesn't touch the API beyond
+ * GET /apps/:app/backups. Equivalent to "show me what restore <date>
+ * would do" — the documented v1 affordance from plan-doc B.2.
+ */
+export const listBackupsInputSchema = z.object({
+    app: z.string().optional(),
+});
+export async function listBackups(ctx, input) {
+    const name = input.app ?? readPercherTomlAppName(ctx.cwd);
+    if (!name) {
+        throw new PercherCoreError("No app specified and no percher.toml found", {
+            code: "logs.no-app",
+            hint: "Pass --app <name> or run from a directory with percher.toml.",
+        });
+    }
+    return ctx.client.apps.listBackups(name);
+}
+const RESTORE_COMPONENTS = ["appdata", "pocketbase"];
+/**
+ * Public input — what shows up in MCP `inputSchema` for AI assistants
+ * + on CLI flags. Only fields a real caller should set live here. Test
+ * + internal injection (poll cadence, timeout overrides) goes via the
+ * second `RestoreInternals` parameter so they don't leak into the
+ * public schema. Pre-fix had `_pollIntervalMs`/`_timeoutMs` on this
+ * schema with underscore-prefixes — visible to MCP, confusing for AI
+ * tooling that didn't know "_" meant "test-only".
+ */
+export const restoreInputSchema = z.object({
+    app: z.string().optional(),
+    /** "latest" | "YYYY-MM-DD" | "<backup_id>" — passed through to API. */
+    source: z.string().min(1),
+    /** Defaults to ["appdata", "pocketbase"] when undefined — matches API. */
+    components: z.array(z.enum(RESTORE_COMPONENTS)).optional(),
+    /** Validate source + show what would happen, but don't actually start
+     *  the restore. */
+    dryRun: z.boolean().default(false),
+});
+export async function restore(ctx, input, internals = {}) {
+    const name = input.app ?? readPercherTomlAppName(ctx.cwd);
+    if (!name) {
+        throw new PercherCoreError("No app specified and no percher.toml found", {
+            code: "logs.no-app",
+            hint: "Pass --app <name> or run from a directory with percher.toml.",
+        });
+    }
+    if (input.dryRun) {
+        // Resolve source against listBackups so we can show what WOULD restore.
+        // Trust the API's source-resolution logic — don't reimplement
+        // "latest"/date/id matching here. Hits the same logic the worker
+        // /restore/inspect would; just no GPG decrypt + no orchestration.
+        const { backups } = await ctx.client.apps.listBackups(name);
+        const resolved = resolveSource(backups, input.source);
+        if (!resolved) {
+            throw new PercherCoreError(`No backup matches "${input.source}" for app "${name}"`, {
+                code: "restore.source-not-found",
+                hint: 'Try "latest", a date "YYYY-MM-DD", or a full backup id.',
+            });
+        }
+        return {
+            kind: "dry-run",
+            app: name,
+            resolvedBackup: resolved,
+            components: input.components ?? ["appdata", "pocketbase"],
+        };
+    }
+    let job = await ctx.client.apps.startRestore(name, {
+        source: input.source,
+        components: input.components,
+    });
+    const pollInterval = internals.pollIntervalMs ?? 2000;
+    // 35 min default — generous enough for big PB volumes (typically 30
+    // min worker watchdog cleans up orphans, so we want CLI to stay alive
+    // long enough that "timed out" never fires when the actual job is
+    // still running). Override via internals.timeoutMs in tests.
+    const timeoutMs = internals.timeoutMs ?? 35 * 60 * 1000;
+    const startedAt = Date.now();
+    let lastStatus = job.status;
+    const TERMINAL = ["done", "rolled_back", "failed"];
+    while (!TERMINAL.includes(job.status)) {
+        if (Date.now() - startedAt > timeoutMs) {
+            throw new PercherCoreError("Restore timed out from the CLI's perspective. The job may still be running on the server — check the dashboard or `percher backups` to confirm before retrying.", {
+                code: "restore.timeout",
+                hint: "If the job is genuinely stuck, the watchdog will mark it failed within 5 min so you can retry from a clean slate.",
+            });
+        }
+        if (job.status !== lastStatus) {
+            ctx.status(`${humanizeStatus(job.status)}...`);
+            lastStatus = job.status;
+        }
+        await new Promise((r) => setTimeout(r, pollInterval));
+        job = await ctx.client.apps.getRestoreJob(name, job.id);
+    }
+    if (job.status === "failed") {
+        throw new PercherCoreError(`Restore failed: ${job.errorMessage ?? "unknown error"}`, {
+            code: "restore.failed",
+            hint: "Run `percher logs` or check the dashboard for details.",
+        });
+    }
+    if (job.status === "rolled_back") {
+        throw new PercherCoreError(`Restore rolled back: ${job.errorMessage ?? "an error during restore was caught and undone"}`, {
+            code: "restore.rolled-back",
+            hint: "Your app is back to its pre-restore state. Check logs for what failed.",
+        });
+    }
+    return job;
+}
+/**
+ * Match a `source` spec ("latest" | "YYYY-MM-DD" | "<id>") against the
+ * sidecar list. Mirrors the API's resolveBackup logic but on the
+ * sidecar projection instead of file metadata. Used only by --dry-run.
+ */
+function resolveSource(backups, source) {
+    if (backups.length === 0)
+        return null;
+    const sorted = [...backups].sort((a, b) => b.backup_id.localeCompare(a.backup_id));
+    if (source === "latest")
+        return sorted[0] ?? null;
+    if (/^\d{4}-\d{2}-\d{2}$/.test(source)) {
+        // Reject malformed dates. Two cases:
+        //   1. Hard parse failure ("9999-99-99") — Date.parse returns NaN.
+        //   2. Calendar overflow ("2026-02-30") — Date.parse SILENTLY rolls
+        //      to "2026-03-02". The regex can't tell them apart, and
+        //      isNaN(parse) returns false because the rolled date is valid.
+        //      Defense: compare the roundtripped ISO prefix to the input.
+        const ts = Date.parse(`${source}T00:00:00Z`);
+        if (Number.isNaN(ts))
+            return null;
+        const roundtrip = new Date(ts).toISOString().slice(0, 10);
+        if (roundtrip !== source)
+            return null;
+        return sorted.find((b) => b.backup_id.startsWith(`${source}_`)) ?? null;
+    }
+    return sorted.find((b) => b.backup_id === source) ?? null;
+}
+function humanizeStatus(status) {
+    switch (status) {
+        case "preparing":
+            return "Preparing";
+        case "quiescing":
+            return "Stopping containers";
+        case "restoring_data":
+            return "Restoring data";
+        case "starting":
+            return "Starting containers";
+        case "verifying":
+            return "Verifying health";
+        case "rolling_back":
+            return "Rolling back";
+        default:
+            return status;
+    }
+}
+//# sourceMappingURL=restore.js.map

package/dist/commands/restore.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"restore.js","sourceRoot":"","sources":["../../src/commands/restore.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,CAAC,EAAE,MAAM,QAAQ,CAAC;AAC3B,OAAO,EAAE,sBAAsB,EAAE,MAAM,aAAa,CAAC;AAErD,OAAO,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAC;AAE7C;;;;;;;;;;;GAWG;AAEH,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7C,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC3B,CAAC,CAAC;AAGH,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,GAAY,EACZ,KAAuB;IAEvB,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,IAAI,sBAAsB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC1D,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,MAAM,IAAI,gBAAgB,CAAC,4CAA4C,EAAE;YACvE,IAAI,EAAE,aAAa;YACnB,IAAI,EAAE,8DAA8D;SACrE,CAAC,CAAC;IACL,CAAC;IACD,OAAO,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;AAC3C,CAAC;AAED,MAAM,kBAAkB,GAAG,CAAC,SAAS,EAAE,YAAY,CAAU,CAAC;AAE9D;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC;IACzC,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC1B,uEAAuE;IACvE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACzB,0EAA0E;IAC1E,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC1D;uBACmB;IACnB,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;CACnC,CAAC,CAAC;AAsBH,MAAM,CAAC,KAAK,UAAU,OAAO,CAC3B,GAAY,EACZ,KAAmB,EACnB,YAA8B,EAAE;IAEhC,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,IAAI,sBAAsB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC1D,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,MAAM,IAAI,gBAAgB,CAAC,4CAA4C,EAAE;YACvE,IAAI,EAAE,aAAa;YACnB,IAAI,EAAE,8DAA8D;SACrE,CAAC,CAAC;IACL,CAAC;IAED,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;QACjB,wEAAwE;QACxE,8DAA8D;QAC9D,iEAAiE;QACjE,kEAAkE;QAClE,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;QAC5D,MAAM,QAAQ,GAAG,aAAa,CAAC,OAAO,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;QACtD,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,IAAI,gBAAgB,CAAC,sBAAsB,KAAK,CAAC,MAAM,cAAc,IAAI,GAAG,EAAE;gBAClF,IAAI,EAAE,0BAA0B;gBAChC,IAAI,EAAE,yDAAyD;aAChE,CAAC,CAAC;QACL,CAAC;QACD,OAAO;YACL,IAAI,EAAE,SAAS;YACf,GAAG,EAAE,IAAI;YACT,cAAc,EAAE,QAAQ;YACxB,UAAU,EAAE,KAAK,CAAC,UAAU,IAAI,CAAC,SAAS,EAAE,YAAY,CAAC;SAC1D,CAAC;IACJ,CAAC;IAED,IAAI,GAAG,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE;QACjD,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,UAAU,EAAE,KAAK,CAAC,UAAU;KAC7B,CAAC,CAAC;IAEH,MAAM,YAAY,GAAG,SAAS,CAAC,cAAc,IAAI,IAAI,CAAC;IACtD,oEAAoE;IACpE,sEAAsE;IACtE,kEAAkE;IAClE,6DAA6D;IAC7D,MAAM,SAAS,GAAG,SAAS,CAAC,SAAS,IAAI,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;IACxD,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC7B,IAAI,UAAU,GAAG,GAAG,CAAC,MAAM,CAAC;IAE5B,MAAM,QAAQ,GAA2B,CAAC,MAAM,EAAE,aAAa,EAAE,QAAQ,CAAC,CAAC;IAE3E,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;QACtC,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,GAAG,SAAS,EAAE,CAAC;YACvC,MAAM,IAAI,gBAAgB,CACxB,iKAAiK,EACjK;gBACE,IAAI,EAAE,iBAAiB;gBACvB,IAAI,EAAE,mHAAmH;aAC1H,CACF,CAAC;QACJ,CAAC;QACD,IAAI,GAAG,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;YAC9B,GAAG,CAAC,MAAM,CAAC,GAAG,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAC/C,UAAU,GAAG,GAAG,CAAC,MAAM,CAAC;QAC1B,CAAC;QACD,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,YAAY,CAAC,CAAC,CAAC;QACtD,GAAG,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;IAC1D,CAAC;IAED,IAAI,GAAG,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QAC5B,MAAM,IAAI,gBAAgB,CAAC,mBAAmB,GAAG,CAAC,YAAY,IAAI,eAAe,EAAE,EAAE;YACnF,IAAI,EAAE,gBAAgB;YACtB,IAAI,EAAE,wDAAwD;SAC/D,CAAC,CAAC;IACL,CAAC;IACD,IAAI,GAAG,CAAC,MAAM,KAAK,aAAa,EAAE,CAAC;QACjC,MAAM,IAAI,gBAAgB,CACxB,wBAAwB,GAAG,CAAC,YAAY,IAAI,+CAA+C,EAAE,EAC7F;YACE,IAAI,EAAE,qBAAqB;YAC3B,IAAI,EAAE,wEAAwE;SAC/E,CACF,CAAC;IACJ,CAAC;IAED,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;GAIG;AACH,SAAS,aAAa,CAAC,OAAwB,EAAE,MAAc;IAC7D,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACtC,MAAM,MAAM,GAAG,CAAC,GAAG,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;IACnF,IAAI,MAAM,KAAK,QAAQ;QAAE,OAAO,MAAM,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;IAClD,IAAI,qBAAqB,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QACvC,qCAAqC;QACrC,mEAAmE;QACnE,oEAAoE;QACpE,6DAA6D;QAC7D,oEAAoE;QACpE,kEAAkE;QAClE,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,MAAM,YAAY,CAAC,CAAC;QAC7C,IAAI,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;YAAE,OAAO,IAAI,CAAC;QAClC,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAC1D,IAAI,SAAS,KAAK,MAAM;YAAE,OAAO,IAAI,CAAC;QACtC,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,UAAU,CAAC,GAAG,MAAM,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC;IAC1E,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC;AAC5D,CAAC;AAED,SAAS,cAAc,CAAC,MAA4B;IAClD,QAAQ,MAAM,EAAE,CAAC;QACf,KAAK,WAAW;YACd,OAAO,WAAW,CAAC;QACrB,KAAK,WAAW;YACd,OAAO,qBAAqB,CAAC;QAC/B,KAAK,gBAAgB;YACnB,OAAO,gBAAgB,CAAC;QAC1B,KAAK,UAAU;YACb,OAAO,qBAAqB,CAAC;QAC/B,KAAK,WAAW;YACd,OAAO,kBAAkB,CAAC;QAC5B,KAAK,cAAc;YACjB,OAAO,cAAc,CAAC;QACxB;YACE,OAAO,MAAM,CAAC;IAClB,CAAC;AACH,CAAC"}

package/dist/commands/resume.d.ts

@@ -1,4 +1,4 @@
-import { z } from "zod";
+import { z } from "zod/v3";
 import type { Context } from "../context";
 export declare const resumeInputSchema: z.ZodObject<{
     app: z.ZodOptional<z.ZodString>;

package/dist/commands/resume.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"resume.d.ts","sourceRoot":"","sources":["../../src/commands/resume.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,YAAY,CAAC;AAG1C,eAAO,MAAM,iBAAiB;;;;;;EAE5B,CAAC;AACH,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAE5D,wBAAsB,MAAM,CAC1B,GAAG,EAAE,OAAO,EACZ,KAAK,GAAE,WAAgB,GACtB,OAAO,CAAC;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC,CAS9C"}
+{"version":3,"file":"resume.d.ts","sourceRoot":"","sources":["../../src/commands/resume.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,QAAQ,CAAC;AAE3B,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,YAAY,CAAC;AAG1C,eAAO,MAAM,iBAAiB;;;;;;EAE5B,CAAC;AACH,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAE5D,wBAAsB,MAAM,CAC1B,GAAG,EAAE,OAAO,EACZ,KAAK,GAAE,WAAgB,GACtB,OAAO,CAAC;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC,CAS9C"}

package/dist/commands/resume.js

@@ -1,4 +1,4 @@
-import { z } from "zod";
+import { z } from "zod/v3";
 import { readPercherTomlAppName } from "../app-name";
 import { PercherCoreError } from "../errors";
 export const resumeInputSchema = z.object({

package/dist/commands/resume.js.map

@@ -1 +1 @@
-{"version":3,"file":"resume.js","sourceRoot":"","sources":["../../src/commands/resume.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,sBAAsB,EAAE,MAAM,aAAa,CAAC;AAErD,OAAO,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAC;AAE7C,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC;IACxC,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC3B,CAAC,CAAC;AAGH,MAAM,CAAC,KAAK,UAAU,MAAM,CAC1B,GAAY,EACZ,QAAqB,EAAE;IAEvB,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,IAAI,sBAAsB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC1D,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,MAAM,IAAI,gBAAgB,CAAC,4CAA4C,EAAE;YACvE,IAAI,EAAE,YAAY;YAClB,IAAI,EAAE,6DAA6D;SACpE,CAAC,CAAC;IACL,CAAC;IACD,OAAO,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;AACzC,CAAC"}
+{"version":3,"file":"resume.js","sourceRoot":"","sources":["../../src/commands/resume.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,QAAQ,CAAC;AAC3B,OAAO,EAAE,sBAAsB,EAAE,MAAM,aAAa,CAAC;AAErD,OAAO,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAC;AAE7C,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC;IACxC,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC3B,CAAC,CAAC;AAGH,MAAM,CAAC,KAAK,UAAU,MAAM,CAC1B,GAAY,EACZ,QAAqB,EAAE;IAEvB,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,IAAI,sBAAsB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC1D,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,MAAM,IAAI,gBAAgB,CAAC,4CAA4C,EAAE;YACvE,IAAI,EAAE,YAAY;YAClB,IAAI,EAAE,6DAA6D;SACpE,CAAC,CAAC;IACL,CAAC;IACD,OAAO,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;AACzC,CAAC"}

package/dist/commands/rollback.d.ts

@@ -1,22 +1,34 @@
 import type { Deployment } from "@percher/client";
-import { z } from "zod";
+import { z } from "zod/v3";
 import type { Context } from "../context";
+/**
+ * Public input — surfaces in MCP `inputSchema` for AI assistants + on
+ * CLI flags. Internal knobs (poll cadence, timeout overrides) used to
+ * sit here with `_pollIntervalMs`/`_timeoutMs` underscore-prefix names.
+ * Visible to MCP, confusing for AI tooling. Moved to a separate
+ * `RollbackInternals` parameter — same shape used by push/restore.
+ */
 export declare const rollbackInputSchema: z.ZodObject<{
     app: z.ZodOptional<z.ZodString>;
     commitSha: z.ZodString;
-    _pollIntervalMs: z.ZodOptional<z.ZodNumber>;
-    _timeoutMs: z.ZodOptional<z.ZodNumber>;
 }, "strip", z.ZodTypeAny, {
     commitSha: string;
     app?: string | undefined;
-    _pollIntervalMs?: number | undefined;
-    _timeoutMs?: number | undefined;
 }, {
     commitSha: string;
     app?: string | undefined;
-    _pollIntervalMs?: number | undefined;
-    _timeoutMs?: number | undefined;
 }>;
 export type RollbackInput = z.infer<typeof rollbackInputSchema>;
-export declare function rollback(ctx: Context, input: RollbackInput): Promise<Deployment>;
+/**
+ * Internal-only knobs for tests + future automation. NOT part of the
+ * Zod schema → not surfaced to MCP / CLI users. Production callers
+ * pass nothing; tests pass small intervals so they don't sleep.
+ */
+export interface RollbackInternals {
+    /** Poll cadence between deployment status checks (ms). Default 2000. */
+    pollIntervalMs?: number;
+    /** Hard cap before throwing push.deploy-timeout (ms). Default 5 min. */
+    timeoutMs?: number;
+}
+export declare function rollback(ctx: Context, input: RollbackInput, internals?: RollbackInternals): Promise<Deployment>;
 //# sourceMappingURL=rollback.d.ts.map

package/dist/commands/rollback.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"rollback.d.ts","sourceRoot":"","sources":["../../src/commands/rollback.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAClD,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,YAAY,CAAC;AAG1C,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;;;EAK9B,CAAC;AACH,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAEhE,wBAAsB,QAAQ,CAAC,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE,aAAa,GAAG,OAAO,CAAC,UAAU,CAAC,CAkCtF"}
+{"version":3,"file":"rollback.d.ts","sourceRoot":"","sources":["../../src/commands/rollback.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAClD,OAAO,EAAE,CAAC,EAAE,MAAM,QAAQ,CAAC;AAE3B,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,YAAY,CAAC;AAG1C;;;;;;GAMG;AACH,eAAO,MAAM,mBAAmB;;;;;;;;;EAG9B,CAAC;AACH,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAEhE;;;;GAIG;AACH,MAAM,WAAW,iBAAiB;IAChC,wEAAwE;IACxE,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,wEAAwE;IACxE,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,wBAAsB,QAAQ,CAC5B,GAAG,EAAE,OAAO,EACZ,KAAK,EAAE,aAAa,EACpB,SAAS,GAAE,iBAAsB,GAChC,OAAO,CAAC,UAAU,CAAC,CAkCrB"}

package/dist/commands/rollback.js

@@ -1,13 +1,18 @@
-import { z } from "zod";
+import { z } from "zod/v3";
 import { readPercherTomlAppName } from "../app-name";
 import { PercherCoreError } from "../errors";
+/**
+ * Public input — surfaces in MCP `inputSchema` for AI assistants + on
+ * CLI flags. Internal knobs (poll cadence, timeout overrides) used to
+ * sit here with `_pollIntervalMs`/`_timeoutMs` underscore-prefix names.
+ * Visible to MCP, confusing for AI tooling. Moved to a separate
+ * `RollbackInternals` parameter — same shape used by push/restore.
+ */
 export const rollbackInputSchema = z.object({
     app: z.string().optional(),
     commitSha: z.string().min(1),
-    _pollIntervalMs: z.number().int().positive().optional(),
-    _timeoutMs: z.number().int().positive().optional(),
 });
-export async function rollback(ctx, input) {
+export async function rollback(ctx, input, internals = {}) {
     const name = input.app ?? readPercherTomlAppName(ctx.cwd);
     if (!name) {
         throw new PercherCoreError("No app specified and no percher.toml found", {
@@ -16,8 +21,8 @@ export async function rollback(ctx, input) {
         });
     }
     let deployment = await ctx.client.apps.rollback(name, input.commitSha);
-    const pollInterval = input._pollIntervalMs ?? 2000;
-    const timeoutMs = input._timeoutMs ?? 5 * 60 * 1000;
+    const pollInterval = internals.pollIntervalMs ?? 2000;
+    const timeoutMs = internals.timeoutMs ?? 5 * 60 * 1000;
     const startedAt = Date.now();
     while (deployment.status !== "live" && deployment.status !== "failed") {
         if (Date.now() - startedAt > timeoutMs) {

package/dist/commands/rollback.js.map

@@ -1 +1 @@
-{"version":3,"file":"rollback.js","sourceRoot":"","sources":["../../src/commands/rollback.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,sBAAsB,EAAE,MAAM,aAAa,CAAC;AAErD,OAAO,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAC;AAE7C,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1C,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC1B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5B,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACvD,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;CACnD,CAAC,CAAC;AAGH,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,GAAY,EAAE,KAAoB;IAC/D,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,IAAI,sBAAsB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC1D,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,MAAM,IAAI,gBAAgB,CAAC,4CAA4C,EAAE;YACvE,IAAI,EAAE,aAAa;YACnB,IAAI,EAAE,8DAA8D;SACrE,CAAC,CAAC;IACL,CAAC;IACD,IAAI,UAAU,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC;IAEvE,MAAM,YAAY,GAAG,KAAK,CAAC,eAAe,IAAI,IAAI,CAAC;IACnD,MAAM,SAAS,GAAG,KAAK,CAAC,UAAU,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;IACpD,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAE7B,OAAO,UAAU,CAAC,MAAM,KAAK,MAAM,IAAI,UAAU,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QACtE,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,GAAG,SAAS,EAAE,CAAC;YACvC,MAAM,IAAI,gBAAgB,CAAC,oBAAoB,EAAE;gBAC/C,IAAI,EAAE,qBAAqB;gBAC3B,IAAI,EAAE,0CAA0C;aACjD,CAAC,CAAC;QACL,CAAC;QACD,GAAG,CAAC,MAAM,CAAC,GAAG,UAAU,CAAC,MAAM,KAAK,CAAC,CAAC;QACtC,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,YAAY,CAAC,CAAC,CAAC;QACtD,UAAU,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,EAAE,UAAU,CAAC,EAAE,CAAC,CAAC;IACxE,CAAC;IAED,IAAI,UAAU,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QACnC,MAAM,IAAI,gBAAgB,CAAC,iBAAiB,EAAE;YAC5C,IAAI,EAAE,oBAAoB;YAC1B,IAAI,EAAE,4CAA4C;SACnD,CAAC,CAAC;IACL,CAAC;IAED,OAAO,UAAU,CAAC;AACpB,CAAC"}
+{"version":3,"file":"rollback.js","sourceRoot":"","sources":["../../src/commands/rollback.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,CAAC,EAAE,MAAM,QAAQ,CAAC;AAC3B,OAAO,EAAE,sBAAsB,EAAE,MAAM,aAAa,CAAC;AAErD,OAAO,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAC;AAE7C;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1C,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC1B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CAC7B,CAAC,CAAC;AAeH,MAAM,CAAC,KAAK,UAAU,QAAQ,CAC5B,GAAY,EACZ,KAAoB,EACpB,YAA+B,EAAE;IAEjC,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,IAAI,sBAAsB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC1D,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,MAAM,IAAI,gBAAgB,CAAC,4CAA4C,EAAE;YACvE,IAAI,EAAE,aAAa;YACnB,IAAI,EAAE,8DAA8D;SACrE,CAAC,CAAC;IACL,CAAC;IACD,IAAI,UAAU,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC;IAEvE,MAAM,YAAY,GAAG,SAAS,CAAC,cAAc,IAAI,IAAI,CAAC;IACtD,MAAM,SAAS,GAAG,SAAS,CAAC,SAAS,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;IACvD,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAE7B,OAAO,UAAU,CAAC,MAAM,KAAK,MAAM,IAAI,UAAU,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QACtE,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,GAAG,SAAS,EAAE,CAAC;YACvC,MAAM,IAAI,gBAAgB,CAAC,oBAAoB,EAAE;gBAC/C,IAAI,EAAE,qBAAqB;gBAC3B,IAAI,EAAE,0CAA0C;aACjD,CAAC,CAAC;QACL,CAAC;QACD,GAAG,CAAC,MAAM,CAAC,GAAG,UAAU,CAAC,MAAM,KAAK,CAAC,CAAC;QACtC,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,YAAY,CAAC,CAAC,CAAC;QACtD,UAAU,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,EAAE,UAAU,CAAC,EAAE,CAAC,CAAC;IACxE,CAAC;IAED,IAAI,UAAU,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QACnC,MAAM,IAAI,gBAAgB,CAAC,iBAAiB,EAAE;YAC5C,IAAI,EAAE,oBAAoB;YAC1B,IAAI,EAAE,4CAA4C;SACnD,CAAC,CAAC;IACL,CAAC;IAED,OAAO,UAAU,CAAC;AACpB,CAAC"}