@percher/core 0.3.0 → 0.4.1

package/dist/plans.js

@@ -1,9 +1,20 @@
+/**
+ * Pool sizes are derived from `docs/operations/capacity-model.md`'s
+ * "Konkreta startpooler" table. They are the *sellable* totals per
+ * tier — the user can fill them with any mix of apps × sizes as
+ * long as the sum fits. Per-app `memory` / `cpu` are now defaults
+ * (used when `[resources]` is omitted in percher.toml), not hard
+ * ceilings.
+ *
+ * `apps` is a hard cap (anti-abuse backstop) enforced at app-create;
+ * pool dimensions are the load-bearing constraint.
+ */
 export const PLAN_CATALOG = {
     free: {
         label: "Free",
         priceEur: 0,
         limits: {
-            apps: 2,
+            apps: 3,
             deploysPerMonth: 50,
             deploysPerHour: 12,
             memory: "256mb",
@@ -21,23 +32,34 @@ export const PLAN_CATALOG = {
             cronJobs: 1,
             storageMb: 500,
             instances: 1,
-            slaUptime: null,
-            supportResponseTime: null,
             kvStorageMb: 10,
             uptimeIntervalSec: 0,
             dailyLiveDeploys: 50,
             dailyPreviewDeploys: 25,
+            userConcurrentDeploys: 2,
+            // 512 MB pool / 0.5 vCPU pool / 1 GB disk — per capacity-model
+            // CX22 line. Free relies on auto-sleep as the pressure valve,
+            // so committed actual usage is ≈ 0 when idle.
+            ramPoolMb: 512,
+            vcpuPool: 0.5,
+            diskPoolMb: 1_000,
         },
     },
     starter: {
         label: "Starter",
         priceEur: 3,
         limits: {
-            apps: 5,
+            apps: 10,
             deploysPerMonth: 200,
             deploysPerHour: 30,
             memory: "512mb",
-            cpu: 0.5,
+            // 0.25 default × 1 instance (Starter cap) = 0.25, fits the 1.0
+            // vCPU pool with generous headroom for users to bump per-app
+            // cpu in their toml. FUTURE21 rounded the pool from 0.75 to a
+            // full vCPU for round-number sellability — CPU isn't a hard
+            // capacity gate (kernel time-shares; we monitor cgroup
+            // throttling), so a half-vCPU bump costs nothing operationally.
+            cpu: 0.25,
             pids: 256,
             activePreviewsPerApp: 3,
             customDomainsPerApp: 2,
@@ -51,23 +73,32 @@ export const PLAN_CATALOG = {
             cronJobs: 3,
             storageMb: 5000,
             instances: 1,
-            slaUptime: null,
-            supportResponseTime: "72h email",
             kvStorageMb: 50,
             uptimeIntervalSec: 300,
             dailyLiveDeploys: 100,
             dailyPreviewDeploys: 50,
+            userConcurrentDeploys: 3,
+            // 1.5 GB / 1.0 vCPU / 5 GB disk — capacity-model CX22 line.
+            // FUTURE21 rounded vcpuPool from 0.75 → 1.0 for round-number
+            // sellability (CPU is time-shared by the kernel, not hard-gated).
+            ramPoolMb: 1_536,
+            vcpuPool: 1.0,
+            diskPoolMb: 5_000,
         },
     },
     maker: {
         label: "Maker",
         priceEur: 12,
         limits: {
-            apps: 10,
+            apps: 20,
             deploysPerMonth: 500,
             deploysPerHour: 60,
             memory: "1gb",
-            cpu: 1,
+            // 0.5 default × 2 instances (Maker cap) = 1.0, fits 2 vCPU
+            // pool with 1.0 headroom for users to bump per-app cpu. Was
+            // 1 — that saturated the pool with a single app × 2 instances
+            // and made the documented multi-app cap meaningless on CPU.
+            cpu: 0.5,
             pids: 512,
             activePreviewsPerApp: 3,
             customDomainsPerApp: 5,
@@ -79,25 +110,41 @@ export const PLAN_CATALOG = {
             logRetentionDays: 30,
             buildLogRetentionDays: 30,
             cronJobs: 10,
-            storageMb: 50_000,
+            storageMb: 25_000,
             instances: 2,
-            slaUptime: "99.5%",
-            supportResponseTime: "24h email",
             kvStorageMb: 200,
             uptimeIntervalSec: 60,
             dailyLiveDeploys: 200,
             dailyPreviewDeploys: 100,
+            userConcurrentDeploys: 5,
+            // 4 GB / 2 vCPU / 25 GB disk — capacity-model CX22 line.
+            // FUTURE21 halved diskPoolMb from 50 GB → 25 GB to keep the
+            // promised pool fits-on-disk-honestly on CX32 (80 GB local disk
+            // minus platform overhead). storageMb tracks diskPoolMb so the
+            // worst-case PB-app charge still fits exactly one PB-app per
+            // account (the existing 1-PB-app-per-account invariant).
+            // Worst-case committed (pool + 20 PB-sidecars) = 6.56 GB RAM,
+            // which is why Maker is closed on CX22 (committed_budget = 4.4 GB).
+            ramPoolMb: 4_096,
+            vcpuPool: 2,
+            diskPoolMb: 25_000,
         },
     },
     pro: {
         label: "Pro",
         priceEur: 29,
         limits: {
-            apps: 25,
+            apps: 40,
             deploysPerMonth: "unlimited",
             deploysPerHour: 120,
-            memory: "2gb",
-            cpu: 2,
+            memory: "1gb",
+            // 1.0 default × 4 instances (Pro cap) = 4.0, fits 4 vCPU pool
+            // exactly with no headroom. Was 2 — that would have made any
+            // multi-instance deploy exceed the pool at default cpu. Users
+            // can drop per-app cpu in toml to leave headroom for more
+            // apps, or bump it on a single-instance app up to the full
+            // pool (= dedicated 4 vCPU).
+            cpu: 1,
             pids: 1024,
             activePreviewsPerApp: 3,
             customDomainsPerApp: 10,
@@ -109,14 +156,24 @@ export const PLAN_CATALOG = {
             logRetentionDays: 90,
             buildLogRetentionDays: 90,
             cronJobs: 25,
-            storageMb: 200_000,
+            storageMb: 75_000,
             instances: 4,
-            slaUptime: "99.9%",
-            supportResponseTime: "8h email + priority Discord",
             kvStorageMb: 1000,
             uptimeIntervalSec: 30,
             dailyLiveDeploys: 1000,
             dailyPreviewDeploys: 500,
+            userConcurrentDeploys: 20,
+            // 10 GB / 4 vCPU / 75 GB disk — capacity-model CX22 line.
+            // FUTURE21 sized diskPoolMb down from 200 GB → 75 GB so the
+            // promised pool actually fits on the boxes we run (CX42 has
+            // 160 GB local disk — 75 GB pool leaves room for platform +
+            // one more paying customer). storageMb tracks diskPoolMb so a
+            // single PB-app per account remains the worst-case reservation.
+            // Worst-case committed (pool + 40 PB-sidecars) = 15.36 GB RAM,
+            // which is why Pro still requires CX42 minimum.
+            ramPoolMb: 10_240,
+            vcpuPool: 4,
+            diskPoolMb: 75_000,
         },
     },
 };
@@ -158,6 +215,7 @@ export function getEffectivePlanLimits(plan, isAdmin = false) {
         deploysPerHour: INF,
         dailyLiveDeploys: INF,
         dailyPreviewDeploys: INF,
+        userConcurrentDeploys: INF,
         activePreviewsPerApp: INF,
         customDomainsPerApp: INF,
         autoSleep: false,
@@ -168,6 +226,13 @@ export function getEffectivePlanLimits(plan, isAdmin = false) {
         buildLogRetentionDays: INF,
         cronJobs: INF,
         kvStorageMb: INF,
+        // FUTURE20 Fas 3 — admin bypasses pool checks too. Otherwise
+        // the operator's own apps would hit "your tier pool is full"
+        // when running platform-management apps (admin tooling,
+        // dogfood deploys, etc.).
+        ramPoolMb: INF,
+        vcpuPool: INF,
+        diskPoolMb: INF,
         // Admin probes still happen at the pro cadence (30s) — no point in
         // trying to make this "infinite", and faster than 30s starts to
         // matter for outbound bandwidth without paying for itself.

package/dist/plans.js.map

@@ -1 +1 @@
-{"version":3,"file":"plans.js","sourceRoot":"","sources":["../src/plans.ts"],"names":[],"mappings":"AA2DA,MAAM,CAAC,MAAM,YAAY,GAA6B;IACpD,IAAI,EAAE;QACJ,KAAK,EAAE,MAAM;QACb,QAAQ,EAAE,CAAC;QACX,MAAM,EAAE;YACN,IAAI,EAAE,CAAC;YACP,eAAe,EAAE,EAAE;YACnB,cAAc,EAAE,EAAE;YAClB,MAAM,EAAE,OAAO;YACf,GAAG,EAAE,IAAI;YACT,IAAI,EAAE,GAAG;YACT,oBAAoB,EAAE,CAAC;YACvB,mBAAmB,EAAE,CAAC;YACtB,mBAAmB,EAAE,KAAK;YAC1B,SAAS,EAAE,IAAI;YACf,qBAAqB,EAAE,EAAE;YACzB,mBAAmB,EAAE,CAAC;YACtB,eAAe,EAAE,CAAC;YAClB,gBAAgB,EAAE,CAAC;YACnB,qBAAqB,EAAE,CAAC;YACxB,QAAQ,EAAE,CAAC;YACX,SAAS,EAAE,GAAG;YACd,SAAS,EAAE,CAAC;YACZ,SAAS,EAAE,IAAI;YACf,mBAAmB,EAAE,IAAI;YACzB,WAAW,EAAE,EAAE;YACf,iBAAiB,EAAE,CAAC;YACpB,gBAAgB,EAAE,EAAE;YACpB,mBAAmB,EAAE,EAAE;SACxB;KACF;IACD,OAAO,EAAE;QACP,KAAK,EAAE,SAAS;QAChB,QAAQ,EAAE,CAAC;QACX,MAAM,EAAE;YACN,IAAI,EAAE,CAAC;YACP,eAAe,EAAE,GAAG;YACpB,cAAc,EAAE,EAAE;YAClB,MAAM,EAAE,OAAO;YACf,GAAG,EAAE,GAAG;YACR,IAAI,EAAE,GAAG;YACT,oBAAoB,EAAE,CAAC;YACvB,mBAAmB,EAAE,CAAC;YACtB,mBAAmB,EAAE,IAAI;YACzB,SAAS,EAAE,KAAK;YAChB,qBAAqB,EAAE,EAAE;YACzB,mBAAmB,EAAE,CAAC;YACtB,eAAe,EAAE,EAAE;YACnB,gBAAgB,EAAE,CAAC;YACnB,qBAAqB,EAAE,EAAE;YACzB,QAAQ,EAAE,CAAC;YACX,SAAS,EAAE,IAAI;YACf,SAAS,EAAE,CAAC;YACZ,SAAS,EAAE,IAAI;YACf,mBAAmB,EAAE,WAAW;YAChC,WAAW,EAAE,EAAE;YACf,iBAAiB,EAAE,GAAG;YACtB,gBAAgB,EAAE,GAAG;YACrB,mBAAmB,EAAE,EAAE;SACxB;KACF;IACD,KAAK,EAAE;QACL,KAAK,EAAE,OAAO;QACd,QAAQ,EAAE,EAAE;QACZ,MAAM,EAAE;YACN,IAAI,EAAE,EAAE;YACR,eAAe,EAAE,GAAG;YACpB,cAAc,EAAE,EAAE;YAClB,MAAM,EAAE,KAAK;YACb,GAAG,EAAE,CAAC;YACN,IAAI,EAAE,GAAG;YACT,oBAAoB,EAAE,CAAC;YACvB,mBAAmB,EAAE,CAAC;YACtB,mBAAmB,EAAE,IAAI;YACzB,SAAS,EAAE,KAAK;YAChB,qBAAqB,EAAE,EAAE;YACzB,mBAAmB,EAAE,CAAC;YACtB,eAAe,EAAE,EAAE;YACnB,gBAAgB,EAAE,EAAE;YACpB,qBAAqB,EAAE,EAAE;YACzB,QAAQ,EAAE,EAAE;YACZ,SAAS,EAAE,MAAM;YACjB,SAAS,EAAE,CAAC;YACZ,SAAS,EAAE,OAAO;YAClB,mBAAmB,EAAE,WAAW;YAChC,WAAW,EAAE,GAAG;YAChB,iBAAiB,EAAE,EAAE;YACrB,gBAAgB,EAAE,GAAG;YACrB,mBAAmB,EAAE,GAAG;SACzB;KACF;IACD,GAAG,EAAE;QACH,KAAK,EAAE,KAAK;QACZ,QAAQ,EAAE,EAAE;QACZ,MAAM,EAAE;YACN,IAAI,EAAE,EAAE;YACR,eAAe,EAAE,WAAW;YAC5B,cAAc,EAAE,GAAG;YACnB,MAAM,EAAE,KAAK;YACb,GAAG,EAAE,CAAC;YACN,IAAI,EAAE,IAAI;YACV,oBAAoB,EAAE,CAAC;YACvB,mBAAmB,EAAE,EAAE;YACvB,mBAAmB,EAAE,IAAI;YACzB,SAAS,EAAE,KAAK;YAChB,qBAAqB,EAAE,EAAE;YACzB,mBAAmB,EAAE,CAAC;YACtB,eAAe,EAAE,EAAE;YACnB,gBAAgB,EAAE,EAAE;YACpB,qBAAqB,EAAE,EAAE;YACzB,QAAQ,EAAE,EAAE;YACZ,SAAS,EAAE,OAAO;YAClB,SAAS,EAAE,CAAC;YACZ,SAAS,EAAE,OAAO;YAClB,mBAAmB,EAAE,6BAA6B;YAClD,WAAW,EAAE,IAAI;YACjB,iBAAiB,EAAE,EAAE;YACrB,gBAAgB,EAAE,IAAI;YACtB,mBAAmB,EAAE,GAAG;SACzB;KACF;CACF,CAAC;AAEF,MAAM,CAAC,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,YAAY,CAAa,CAAC;AAE9D,mEAAmE;AACnE,MAAM,UAAU,aAAa,CAAC,IAAY;IACxC,OAAO,YAAY,CAAC,IAAc,CAAC,EAAE,MAAM,IAAI,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC;AAC1E,CAAC;AAED,sEAAsE;AACtE,MAAM,UAAU,WAAW,CAAC,IAAY;IACtC,OAAO,YAAY,CAAC,IAAc,CAAC,IAAI,YAAY,CAAC,IAAI,CAAC;AAC3D,CAAC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,sBAAsB,CAAC,IAAY,EAAE,OAAO,GAAG,KAAK;IAClE,IAAI,CAAC,OAAO;QAAE,OAAO,aAAa,CAAC,IAAI,CAAC,CAAC;IACzC,MAAM,GAAG,GAAG,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC;IACpC,MAAM,GAAG,GAAG,MAAM,CAAC,iBAAiB,CAAC;IACrC,OAAO;QACL,GAAG,GAAG;QACN,IAAI,EAAE,GAAG;QACT,eAAe,EAAE,WAAW;QAC5B,cAAc,EAAE,GAAG;QACnB,gBAAgB,EAAE,GAAG;QACrB,mBAAmB,EAAE,GAAG;QACxB,oBAAoB,EAAE,GAAG;QACzB,mBAAmB,EAAE,GAAG;QACxB,SAAS,EAAE,KAAK;QAChB,qBAAqB,EAAE,GAAG;QAC1B,mBAAmB,EAAE,GAAG;QACxB,eAAe,EAAE,GAAG;QACpB,gBAAgB,EAAE,GAAG;QACrB,qBAAqB,EAAE,GAAG;QAC1B,QAAQ,EAAE,GAAG;QACb,WAAW,EAAE,GAAG;QAChB,mEAAmE;QACnE,gEAAgE;QAChE,2DAA2D;KAC5D,CAAC;AACJ,CAAC"}
+{"version":3,"file":"plans.js","sourceRoot":"","sources":["../src/plans.ts"],"names":[],"mappings":"AAiHA;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,YAAY,GAA6B;IACpD,IAAI,EAAE;QACJ,KAAK,EAAE,MAAM;QACb,QAAQ,EAAE,CAAC;QACX,MAAM,EAAE;YACN,IAAI,EAAE,CAAC;YACP,eAAe,EAAE,EAAE;YACnB,cAAc,EAAE,EAAE;YAClB,MAAM,EAAE,OAAO;YACf,GAAG,EAAE,IAAI;YACT,IAAI,EAAE,GAAG;YACT,oBAAoB,EAAE,CAAC;YACvB,mBAAmB,EAAE,CAAC;YACtB,mBAAmB,EAAE,KAAK;YAC1B,SAAS,EAAE,IAAI;YACf,qBAAqB,EAAE,EAAE;YACzB,mBAAmB,EAAE,CAAC;YACtB,eAAe,EAAE,CAAC;YAClB,gBAAgB,EAAE,CAAC;YACnB,qBAAqB,EAAE,CAAC;YACxB,QAAQ,EAAE,CAAC;YACX,SAAS,EAAE,GAAG;YACd,SAAS,EAAE,CAAC;YACZ,WAAW,EAAE,EAAE;YACf,iBAAiB,EAAE,CAAC;YACpB,gBAAgB,EAAE,EAAE;YACpB,mBAAmB,EAAE,EAAE;YACvB,qBAAqB,EAAE,CAAC;YACxB,+DAA+D;YAC/D,8DAA8D;YAC9D,8CAA8C;YAC9C,SAAS,EAAE,GAAG;YACd,QAAQ,EAAE,GAAG;YACb,UAAU,EAAE,KAAK;SAClB;KACF;IACD,OAAO,EAAE;QACP,KAAK,EAAE,SAAS;QAChB,QAAQ,EAAE,CAAC;QACX,MAAM,EAAE;YACN,IAAI,EAAE,EAAE;YACR,eAAe,EAAE,GAAG;YACpB,cAAc,EAAE,EAAE;YAClB,MAAM,EAAE,OAAO;YACf,+DAA+D;YAC/D,6DAA6D;YAC7D,8DAA8D;YAC9D,4DAA4D;YAC5D,uDAAuD;YACvD,gEAAgE;YAChE,GAAG,EAAE,IAAI;YACT,IAAI,EAAE,GAAG;YACT,oBAAoB,EAAE,CAAC;YACvB,mBAAmB,EAAE,CAAC;YACtB,mBAAmB,EAAE,IAAI;YACzB,SAAS,EAAE,KAAK;YAChB,qBAAqB,EAAE,EAAE;YACzB,mBAAmB,EAAE,CAAC;YACtB,eAAe,EAAE,EAAE;YACnB,gBAAgB,EAAE,CAAC;YACnB,qBAAqB,EAAE,EAAE;YACzB,QAAQ,EAAE,CAAC;YACX,SAAS,EAAE,IAAI;YACf,SAAS,EAAE,CAAC;YACZ,WAAW,EAAE,EAAE;YACf,iBAAiB,EAAE,GAAG;YACtB,gBAAgB,EAAE,GAAG;YACrB,mBAAmB,EAAE,EAAE;YACvB,qBAAqB,EAAE,CAAC;YACxB,4DAA4D;YAC5D,6DAA6D;YAC7D,kEAAkE;YAClE,SAAS,EAAE,KAAK;YAChB,QAAQ,EAAE,GAAG;YACb,UAAU,EAAE,KAAK;SAClB;KACF;IACD,KAAK,EAAE;QACL,KAAK,EAAE,OAAO;QACd,QAAQ,EAAE,EAAE;QACZ,MAAM,EAAE;YACN,IAAI,EAAE,EAAE;YACR,eAAe,EAAE,GAAG;YACpB,cAAc,EAAE,EAAE;YAClB,MAAM,EAAE,KAAK;YACb,2DAA2D;YAC3D,4DAA4D;YAC5D,8DAA8D;YAC9D,4DAA4D;YAC5D,GAAG,EAAE,GAAG;YACR,IAAI,EAAE,GAAG;YACT,oBAAoB,EAAE,CAAC;YACvB,mBAAmB,EAAE,CAAC;YACtB,mBAAmB,EAAE,IAAI;YACzB,SAAS,EAAE,KAAK;YAChB,qBAAqB,EAAE,EAAE;YACzB,mBAAmB,EAAE,CAAC;YACtB,eAAe,EAAE,EAAE;YACnB,gBAAgB,EAAE,EAAE;YACpB,qBAAqB,EAAE,EAAE;YACzB,QAAQ,EAAE,EAAE;YACZ,SAAS,EAAE,MAAM;YACjB,SAAS,EAAE,CAAC;YACZ,WAAW,EAAE,GAAG;YAChB,iBAAiB,EAAE,EAAE;YACrB,gBAAgB,EAAE,GAAG;YACrB,mBAAmB,EAAE,GAAG;YACxB,qBAAqB,EAAE,CAAC;YACxB,yDAAyD;YACzD,4DAA4D;YAC5D,gEAAgE;YAChE,+DAA+D;YAC/D,6DAA6D;YAC7D,yDAAyD;YACzD,8DAA8D;YAC9D,oEAAoE;YACpE,SAAS,EAAE,KAAK;YAChB,QAAQ,EAAE,CAAC;YACX,UAAU,EAAE,MAAM;SACnB;KACF;IACD,GAAG,EAAE;QACH,KAAK,EAAE,KAAK;QACZ,QAAQ,EAAE,EAAE;QACZ,MAAM,EAAE;YACN,IAAI,EAAE,EAAE;YACR,eAAe,EAAE,WAAW;YAC5B,cAAc,EAAE,GAAG;YACnB,MAAM,EAAE,KAAK;YACb,8DAA8D;YAC9D,6DAA6D;YAC7D,8DAA8D;YAC9D,0DAA0D;YAC1D,2DAA2D;YAC3D,6BAA6B;YAC7B,GAAG,EAAE,CAAC;YACN,IAAI,EAAE,IAAI;YACV,oBAAoB,EAAE,CAAC;YACvB,mBAAmB,EAAE,EAAE;YACvB,mBAAmB,EAAE,IAAI;YACzB,SAAS,EAAE,KAAK;YAChB,qBAAqB,EAAE,EAAE;YACzB,mBAAmB,EAAE,CAAC;YACtB,eAAe,EAAE,EAAE;YACnB,gBAAgB,EAAE,EAAE;YACpB,qBAAqB,EAAE,EAAE;YACzB,QAAQ,EAAE,EAAE;YACZ,SAAS,EAAE,MAAM;YACjB,SAAS,EAAE,CAAC;YACZ,WAAW,EAAE,IAAI;YACjB,iBAAiB,EAAE,EAAE;YACrB,gBAAgB,EAAE,IAAI;YACtB,mBAAmB,EAAE,GAAG;YACxB,qBAAqB,EAAE,EAAE;YACzB,0DAA0D;YAC1D,4DAA4D;YAC5D,4DAA4D;YAC5D,4DAA4D;YAC5D,8DAA8D;YAC9D,gEAAgE;YAChE,+DAA+D;YAC/D,gDAAgD;YAChD,SAAS,EAAE,MAAM;YACjB,QAAQ,EAAE,CAAC;YACX,UAAU,EAAE,MAAM;SACnB;KACF;CACF,CAAC;AAEF,MAAM,CAAC,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,YAAY,CAAa,CAAC;AAE9D,mEAAmE;AACnE,MAAM,UAAU,aAAa,CAAC,IAAY;IACxC,OAAO,YAAY,CAAC,IAAc,CAAC,EAAE,MAAM,IAAI,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC;AAC1E,CAAC;AAED,sEAAsE;AACtE,MAAM,UAAU,WAAW,CAAC,IAAY;IACtC,OAAO,YAAY,CAAC,IAAc,CAAC,IAAI,YAAY,CAAC,IAAI,CAAC;AAC3D,CAAC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,sBAAsB,CAAC,IAAY,EAAE,OAAO,GAAG,KAAK;IAClE,IAAI,CAAC,OAAO;QAAE,OAAO,aAAa,CAAC,IAAI,CAAC,CAAC;IACzC,MAAM,GAAG,GAAG,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC;IACpC,MAAM,GAAG,GAAG,MAAM,CAAC,iBAAiB,CAAC;IACrC,OAAO;QACL,GAAG,GAAG;QACN,IAAI,EAAE,GAAG;QACT,eAAe,EAAE,WAAW;QAC5B,cAAc,EAAE,GAAG;QACnB,gBAAgB,EAAE,GAAG;QACrB,mBAAmB,EAAE,GAAG;QACxB,qBAAqB,EAAE,GAAG;QAC1B,oBAAoB,EAAE,GAAG;QACzB,mBAAmB,EAAE,GAAG;QACxB,SAAS,EAAE,KAAK;QAChB,qBAAqB,EAAE,GAAG;QAC1B,mBAAmB,EAAE,GAAG;QACxB,eAAe,EAAE,GAAG;QACpB,gBAAgB,EAAE,GAAG;QACrB,qBAAqB,EAAE,GAAG;QAC1B,QAAQ,EAAE,GAAG;QACb,WAAW,EAAE,GAAG;QAChB,6DAA6D;QAC7D,6DAA6D;QAC7D,wDAAwD;QACxD,0BAA0B;QAC1B,SAAS,EAAE,GAAG;QACd,QAAQ,EAAE,GAAG;QACb,UAAU,EAAE,GAAG;QACf,mEAAmE;QACnE,gEAAgE;QAChE,2DAA2D;KAC5D,CAAC;AACJ,CAAC"}

package/dist/poll-deployment.d.ts

@@ -1,3 +1,4 @@
+import type { DeployEvent } from "@percher/client";
 import type { Context } from "./context";
 export interface DeploymentLike {
     id: string;
@@ -11,10 +12,21 @@ export interface PollDeploymentOptions<D extends DeploymentLike> {
     terminal?: readonly string[];
     /** Polling interval in ms (default 2000). */
     intervalMs?: number;
-    /** Total wall-clock budget in ms (default 5 minutes). */
+    /** Total wall-clock budget in ms. Defaults to the shared
+     *  `clientPublishPoll` budget so every CLI poll site stays aligned
+     *  with the API → worker fetch timeout (Phase 7.1). */
     timeoutMs?: number;
     /** Callback fired on each successful poll — for status emission. */
     onTick?: (deployment: D) => void;
+    /**
+     * Phase 6.1 — fires for each newly-recorded deploy event observed
+     * since the last poll. The poll loop fetches events alongside the
+     * deployment row, diffs against an internal seen-IDs set, and
+     * invokes this for each new row in chronological order. Any
+     * exception in the events-fetch path is swallowed so a failing
+     * events endpoint never crashes the deployment poll itself.
+     */
+    onEvent?: (event: DeployEvent) => void;
     /** Hook called when wall-clock timeout is hit. Should throw. */
     onTimeout: (deployment: D) => never;
     /** App display name, used in the network-error hint message. */

package/dist/poll-deployment.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"poll-deployment.d.ts","sourceRoot":"","sources":["../src/poll-deployment.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEzC,MAAM,WAAW,cAAc;IAC7B,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,qBAAqB,CAAC,CAAC,SAAS,cAAc;IAC7D,GAAG,EAAE,OAAO,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,CAAC,CAAC;IACX,uEAAuE;IACvE,QAAQ,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC7B,6CAA6C;IAC7C,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,yDAAyD;IACzD,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,oEAAoE;IACpE,MAAM,CAAC,EAAE,CAAC,UAAU,EAAE,CAAC,KAAK,IAAI,CAAC;IACjC,gEAAgE;IAChE,SAAS,EAAE,CAAC,UAAU,EAAE,CAAC,KAAK,KAAK,CAAC;IACpC,gEAAgE;IAChE,OAAO,EAAE,MAAM,CAAC;IAChB,2EAA2E;IAC3E,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;;;;OAIG;IACH,SAAS,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,MAAM,CAAC;CACzC;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAsB,cAAc,CAAC,CAAC,SAAS,cAAc,EAC3D,IAAI,EAAE,qBAAqB,CAAC,CAAC,CAAC,GAC7B,OAAO,CAAC,CAAC,CAAC,CAkDZ"}
+{"version":3,"file":"poll-deployment.d.ts","sourceRoot":"","sources":["../src/poll-deployment.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAEnD,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEzC,MAAM,WAAW,cAAc;IAC7B,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,qBAAqB,CAAC,CAAC,SAAS,cAAc;IAC7D,GAAG,EAAE,OAAO,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,CAAC,CAAC;IACX,uEAAuE;IACvE,QAAQ,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC7B,6CAA6C;IAC7C,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;;2DAEuD;IACvD,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,oEAAoE;IACpE,MAAM,CAAC,EAAE,CAAC,UAAU,EAAE,CAAC,KAAK,IAAI,CAAC;IACjC;;;;;;;OAOG;IACH,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,WAAW,KAAK,IAAI,CAAC;IACvC,gEAAgE;IAChE,SAAS,EAAE,CAAC,UAAU,EAAE,CAAC,KAAK,KAAK,CAAC;IACpC,gEAAgE;IAChE,OAAO,EAAE,MAAM,CAAC;IAChB,2EAA2E;IAC3E,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;;;;OAIG;IACH,SAAS,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,MAAM,CAAC;CACzC;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAsB,cAAc,CAAC,CAAC,SAAS,cAAc,EAC3D,IAAI,EAAE,qBAAqB,CAAC,CAAC,CAAC,GAC7B,OAAO,CAAC,CAAC,CAAC,CA+DZ"}

package/dist/poll-deployment.js

@@ -1,3 +1,4 @@
+import { TIMEOUTS } from "@percher/shared/timeouts";
 /**
  * Poll `getDeployment` until the deployment reaches a terminal status.
  *
@@ -16,10 +17,18 @@
 export async function pollDeployment(opts) {
     const terminal = opts.terminal ?? ["live", "failed"];
     const intervalMs = opts.intervalMs ?? 2000;
-    const timeoutMs = opts.timeoutMs ?? 5 * 60 * 1000;
+    const timeoutMs = opts.timeoutMs ?? TIMEOUTS.clientPublishPoll;
     const maxRetries = opts.maxRetries ?? 5;
     let deployment = opts.initial;
     const startedAt = Date.now();
+    const seenEventIds = new Set();
+    // Drain any pre-existing events for this deploy on the first tick so
+    // a long-running poll doesn't replay rows that landed before the
+    // caller started watching. The events between initial and first poll
+    // are still surfaced — see the post-poll fetch below.
+    if (opts.onEvent) {
+        await drainNewEvents(opts, deployment.id, seenEventIds);
+    }
     while (!terminal.includes(deployment.status)) {
         if (Date.now() - startedAt > timeoutMs) {
             opts.onTimeout(deployment);
@@ -51,7 +60,34 @@ export async function pollDeployment(opts) {
                 await new Promise((r) => setTimeout(r, backoff));
             }
         }
+        if (opts.onEvent) {
+            await drainNewEvents(opts, deployment.id, seenEventIds);
+        }
     }
     return deployment;
 }
+/**
+ * Fetch events for the active deploy and emit any rows whose ID
+ * hasn't been seen before. Errors from the events endpoint are
+ * intentionally swallowed: the deployment-status poll is the
+ * load-bearing primitive, and a transient events-fetch failure
+ * should never propagate up to the publish caller (which would
+ * surface as "publish crashed" while the deploy is running fine).
+ */
+async function drainNewEvents(opts, deployId, seenEventIds) {
+    if (!opts.onEvent)
+        return;
+    try {
+        const { events } = await opts.ctx.client.apps.getDeployEvents(opts.appId, deployId);
+        for (const event of events) {
+            if (seenEventIds.has(event.id))
+                continue;
+            seenEventIds.add(event.id);
+            opts.onEvent(event);
+        }
+    }
+    catch {
+        // Events fetch is best-effort. Status poll still drives the loop.
+    }
+}
 //# sourceMappingURL=poll-deployment.js.map

package/dist/poll-deployment.js.map

@@ -1 +1 @@
-{"version":3,"file":"poll-deployment.js","sourceRoot":"","sources":["../src/poll-deployment.ts"],"names":[],"mappings":"AAiCA;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,IAA8B;IAE9B,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IACrD,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC;IAC3C,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;IAClD,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,IAAI,CAAC,CAAC;IAExC,IAAI,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC;IAC9B,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAE7B,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;QAC7C,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,GAAG,SAAS,EAAE,CAAC;YACvC,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;QAC7B,CAAC;QAED,IAAI,CAAC,MAAM,EAAE,CAAC,UAAU,CAAC,CAAC;QAC1B,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC,CAAC;QAEpD,IAAI,OAAO,GAAG,CAAC,CAAC;QAChB,IAAI,MAAM,GAAG,KAAK,CAAC;QACnB,OAAO,CAAC,MAAM,EAAE,CAAC;YACf,IAAI,CAAC;gBACH,UAAU,GAAG,CAAC,MAAM,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,aAAa,CACpD,IAAI,CAAC,KAAK,EACV,UAAU,CAAC,EAAE,CACd,CAAiB,CAAC;gBACnB,MAAM,GAAG,IAAI,CAAC;YAChB,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,OAAO,EAAE,CAAC;gBACV,MAAM,GAAG,GAAI,GAAa,CAAC,OAAO,IAAI,MAAM,CAAC,GAAG,CAAC,CAAC;gBAClD,MAAM,SAAS,GAAG,GAAG,CAAC,UAAU,CAAC,gBAAgB,CAAC,CAAC;gBACnD,IAAI,CAAC,SAAS,IAAI,OAAO,IAAI,UAAU,EAAE,CAAC;oBACxC,IAAI,SAAS,EAAE,CAAC;wBACd,uDAAuD;wBACvD,mDAAmD;wBACnD,0DAA0D;wBAC1D,MAAM,IAAI,KAAK,CACb,GAAG,GAAG,mHAAmH,IAAI,CAAC,OAAO,EAAE,EACvI,EAAE,KAAK,EAAE,GAAG,EAAE,CACf,CAAC;oBACJ,CAAC;oBACD,MAAM,GAAG,CAAC;gBACZ,CAAC;gBACD,wDAAwD;gBACxD,MAAM,OAAO,GAAG,CAAC,IAAI,CAAC,SAAS,IAAI,CAAC,CAAC,CAAS,EAAE,EAAE,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;gBAClF,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC;YACnD,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,UAAU,CAAC;AACpB,CAAC"}
+{"version":3,"file":"poll-deployment.js","sourceRoot":"","sources":["../src/poll-deployment.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,QAAQ,EAAE,MAAM,0BAA0B,CAAC;AA6CpD;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,IAA8B;IAE9B,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IACrD,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC;IAC3C,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,QAAQ,CAAC,iBAAiB,CAAC;IAC/D,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,IAAI,CAAC,CAAC;IAExC,IAAI,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC;IAC9B,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC7B,MAAM,YAAY,GAAG,IAAI,GAAG,EAAU,CAAC;IAEvC,qEAAqE;IACrE,iEAAiE;IACjE,qEAAqE;IACrE,sDAAsD;IACtD,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;QACjB,MAAM,cAAc,CAAC,IAAI,EAAE,UAAU,CAAC,EAAE,EAAE,YAAY,CAAC,CAAC;IAC1D,CAAC;IAED,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;QAC7C,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,GAAG,SAAS,EAAE,CAAC;YACvC,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;QAC7B,CAAC;QAED,IAAI,CAAC,MAAM,EAAE,CAAC,UAAU,CAAC,CAAC;QAC1B,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC,CAAC;QAEpD,IAAI,OAAO,GAAG,CAAC,CAAC;QAChB,IAAI,MAAM,GAAG,KAAK,CAAC;QACnB,OAAO,CAAC,MAAM,EAAE,CAAC;YACf,IAAI,CAAC;gBACH,UAAU,GAAG,CAAC,MAAM,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,aAAa,CACpD,IAAI,CAAC,KAAK,EACV,UAAU,CAAC,EAAE,CACd,CAAiB,CAAC;gBACnB,MAAM,GAAG,IAAI,CAAC;YAChB,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,OAAO,EAAE,CAAC;gBACV,MAAM,GAAG,GAAI,GAAa,CAAC,OAAO,IAAI,MAAM,CAAC,GAAG,CAAC,CAAC;gBAClD,MAAM,SAAS,GAAG,GAAG,CAAC,UAAU,CAAC,gBAAgB,CAAC,CAAC;gBACnD,IAAI,CAAC,SAAS,IAAI,OAAO,IAAI,UAAU,EAAE,CAAC;oBACxC,IAAI,SAAS,EAAE,CAAC;wBACd,uDAAuD;wBACvD,mDAAmD;wBACnD,0DAA0D;wBAC1D,MAAM,IAAI,KAAK,CACb,GAAG,GAAG,mHAAmH,IAAI,CAAC,OAAO,EAAE,EACvI,EAAE,KAAK,EAAE,GAAG,EAAE,CACf,CAAC;oBACJ,CAAC;oBACD,MAAM,GAAG,CAAC;gBACZ,CAAC;gBACD,wDAAwD;gBACxD,MAAM,OAAO,GAAG,CAAC,IAAI,CAAC,SAAS,IAAI,CAAC,CAAC,CAAS,EAAE,EAAE,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;gBAClF,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC;YACnD,CAAC;QACH,CAAC;QAED,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACjB,MAAM,cAAc,CAAC,IAAI,EAAE,UAAU,CAAC,EAAE,EAAE,YAAY,CAAC,CAAC;QAC1D,CAAC;IACH,CAAC;IAED,OAAO,UAAU,CAAC;AACpB,CAAC;AAED;;;;;;;GAOG;AACH,KAAK,UAAU,cAAc,CAC3B,IAA8B,EAC9B,QAAgB,EAChB,YAAyB;IAEzB,IAAI,CAAC,IAAI,CAAC,OAAO;QAAE,OAAO;IAC1B,IAAI,CAAC;QACH,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;QACpF,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YAC3B,IAAI,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;gBAAE,SAAS;YACzC,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YAC3B,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QACtB,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,kEAAkE;IACpE,CAAC;AACH,CAAC"}

package/dist/publish-retry.d.ts

@@ -0,0 +1,29 @@
+export interface RetryDecision {
+    retryable: boolean;
+    delayMs: number;
+    /** Short reason for the decision — surfaces to the CLI status line. */
+    reason: string;
+    /** Canonical category used in retry telemetry / logs. */
+    category: "worker_unavailable" | "rate_limited" | "network" | "http_5xx" | "non_retryable" | "persistent";
+}
+export declare function classifyDeployRetry(err: unknown, attempt: number): RetryDecision;
+export interface RetryAttemptInfo {
+    attempt: number;
+    decision: RetryDecision;
+    err: unknown;
+}
+export interface RunWithRetryOptions<T> {
+    call: (attempt: number) => Promise<T>;
+    /** Called before the next attempt's wait. Use to surface progress. */
+    onRetry?: (info: RetryAttemptInfo) => void;
+    /** Override the sleep impl in tests so the backoff is instant. */
+    sleep?: (ms: number) => Promise<void>;
+    /** Hard cap; defaults to 4 (1 initial + 3 retries). */
+    maxAttempts?: number;
+}
+export interface RunWithRetryResult<T> {
+    result: T;
+    attempts: number;
+}
+export declare function runDeployWithRetry<T>(opts: RunWithRetryOptions<T>): Promise<RunWithRetryResult<T>>;
+//# sourceMappingURL=publish-retry.d.ts.map

package/dist/publish-retry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"publish-retry.d.ts","sourceRoot":"","sources":["../src/publish-retry.ts"],"names":[],"mappings":"AA6BA,MAAM,WAAW,aAAa;IAC5B,SAAS,EAAE,OAAO,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,uEAAuE;IACvE,MAAM,EAAE,MAAM,CAAC;IACf,yDAAyD;IACzD,QAAQ,EACJ,oBAAoB,GACpB,cAAc,GACd,SAAS,GACT,UAAU,GACV,eAAe,GACf,YAAY,CAAC;CAClB;AA2BD,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,GAAG,aAAa,CA2JhF;AAED,MAAM,WAAW,gBAAgB;IAC/B,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,aAAa,CAAC;IACxB,GAAG,EAAE,OAAO,CAAC;CACd;AAED,MAAM,WAAW,mBAAmB,CAAC,CAAC;IACpC,IAAI,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC;IACtC,sEAAsE;IACtE,OAAO,CAAC,EAAE,CAAC,IAAI,EAAE,gBAAgB,KAAK,IAAI,CAAC;IAC3C,kEAAkE;IAClE,KAAK,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACtC,uDAAuD;IACvD,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAID,MAAM,WAAW,kBAAkB,CAAC,CAAC;IACnC,MAAM,EAAE,CAAC,CAAC;IACV,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,wBAAsB,kBAAkB,CAAC,CAAC,EACxC,IAAI,EAAE,mBAAmB,CAAC,CAAC,CAAC,GAC3B,OAAO,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,CAqBhC"}

package/dist/publish-retry.js

@@ -0,0 +1,224 @@
+/**
+ * Publish-retry classifier and runner (Phase 7.2).
+ *
+ * The 2026-05-07 incident batch surfaced a class of agent-perceived
+ * failure where the platform's `WORKER_UNAVAILABLE` (transient — the
+ * worker was restarting) bubbled through the CLI as a hard error.
+ * Humans/agents recovered by typing `percher publish` again. The CLI
+ * should do that itself.
+ *
+ * Rules table (mirrored in `docs/plans/IMPLEMENTING_publish-resilience-and-clarity-plan.md`):
+ *
+ *   WORKER_UNAVAILABLE        retry 3× — 5s / 15s / 45s
+ *   WORKER_UNAVAILABLE_PERSISTENT  no retry — surface as platform incident
+ *   DEPLOY_RATE_LIMITED       retry 2× — honour retryAfterSec from response
+ *   network error / TCP reset retry 3× — 2s / 8s / 24s
+ *   HTTP 5xx                  retry 2× — 5s / 20s
+ *   HTTP 4xx (incl. 429 quota, 422 config)  no retry
+ *   BUILD_FAILED / BUILD_TIMEOUT / DEPLOY_STALLED  no retry — these are
+ *      observed during the *poll* phase, not the upload, but listed here
+ *      defensively so any future code path that encounters them while
+ *      retrying still classifies them correctly.
+ *
+ * Every retry reuses the same `Idempotency-Key` header so the API treats
+ * a re-attempt as "are you still working on this one?" rather than
+ * minting a new deploy row. The caller is responsible for generating the
+ * key (via `crypto.randomUUID()`) and threading it into the request.
+ */
+import { PercherApiError } from "@percher/client";
+const NON_RETRYABLE_CODES = new Set([
+    "WORKER_UNAVAILABLE_PERSISTENT",
+    "BUILD_FAILED",
+    "BUILD_TIMEOUT",
+    "DEPLOY_STALLED",
+    "REQUIRED_ENV_MISSING",
+    "ENV_KEY_UNDECLARED",
+    "DAILY_QUOTA_EXCEEDED",
+    "RETRY_LIMIT_REACHED",
+    "ACCOUNT_SUSPENDED",
+    "APP_SUSPENDED",
+    "EMAIL_NOT_VERIFIED",
+    "PREVIEW_LIMIT_REACHED",
+    "VALIDATION_ERROR",
+    // Phase 8.1 — past hardCap the queue is so deep that retry-after
+    // would lie about wait time. Treat as a platform incident: surface
+    // immediately so the user sees the status-page link instead of
+    // a CLI that loops every minute claiming "should be back in 5s".
+    "PLATFORM_DOWN",
+]);
+const WORKER_UNAVAILABLE_BACKOFF_MS = [5_000, 15_000, 45_000];
+const NETWORK_BACKOFF_MS = [2_000, 8_000, 24_000];
+const HTTP_5XX_BACKOFF_MS = [5_000, 20_000];
+export function classifyDeployRetry(err, attempt) {
+    // attempt is 1-indexed — `attempt = 1` means "first failure, decide
+    // delay before attempt 2"; the schedule arrays are 0-indexed.
+    const idx = attempt - 1;
+    if (err instanceof PercherApiError) {
+        if (err.code === "WORKER_UNAVAILABLE_PERSISTENT") {
+            return {
+                retryable: false,
+                delayMs: 0,
+                reason: "platform circuit breaker open — surfacing as incident",
+                category: "persistent",
+            };
+        }
+        if (err.code === "WORKER_UNAVAILABLE") {
+            const delay = WORKER_UNAVAILABLE_BACKOFF_MS[idx];
+            if (delay === undefined) {
+                return {
+                    retryable: false,
+                    delayMs: 0,
+                    reason: "worker unavailable after 3 attempts",
+                    category: "worker_unavailable",
+                };
+            }
+            return {
+                retryable: true,
+                delayMs: delay,
+                reason: "worker was restarting",
+                category: "worker_unavailable",
+            };
+        }
+        if (err.code === "DEPLOY_RATE_LIMITED") {
+            if (idx >= 2) {
+                return {
+                    retryable: false,
+                    delayMs: 0,
+                    reason: "rate-limited after 2 attempts",
+                    category: "rate_limited",
+                };
+            }
+            const retryAfterSec = typeof err.extra?.retryAfterSec === "number" ? err.extra.retryAfterSec : 5;
+            return {
+                retryable: true,
+                delayMs: Math.min(60_000, Math.max(1_000, retryAfterSec * 1000)),
+                reason: "per-app rate limit",
+                category: "rate_limited",
+            };
+        }
+        if (err.code === "USER_CONCURRENT_LIMIT") {
+            // Phase 8.2 — the user has the most parallel deploys their plan
+            // allows. Retrying after the suggested window often clears one
+            // of the in-flight builds. Single retry is enough; past that the
+            // user almost certainly needs to take action (upgrade or stop
+            // looping), so surface the error.
+            if (idx >= 1) {
+                return {
+                    retryable: false,
+                    delayMs: 0,
+                    reason: "concurrent-deploy cap still saturated after one wait",
+                    category: "rate_limited",
+                };
+            }
+            const retryAfterSec = typeof err.extra?.retryAfterSec === "number" ? err.extra.retryAfterSec : 60;
+            return {
+                retryable: true,
+                delayMs: Math.min(2 * 60_000, Math.max(5_000, retryAfterSec * 1000)),
+                reason: "per-user concurrent-deploy cap",
+                category: "rate_limited",
+            };
+        }
+        if (err.code === "PLATFORM_OVERLOADED") {
+            // Phase 8.1 — global backpressure. The API supplies a
+            // Retry-After header computed from the realistic drain estimate;
+            // honor it (capped at 5 min so a misbehaving server can't hold
+            // the CLI hostage). Up to 3 retries — past that the queue isn't
+            // draining for this caller and surfacing the incident is fairer.
+            if (idx >= 3) {
+                return {
+                    retryable: false,
+                    delayMs: 0,
+                    reason: "platform overloaded after 3 attempts",
+                    category: "rate_limited",
+                };
+            }
+            const retryAfterSec = typeof err.extra?.retryAfterSec === "number" ? err.extra.retryAfterSec : 30;
+            return {
+                retryable: true,
+                delayMs: Math.min(5 * 60_000, Math.max(5_000, retryAfterSec * 1000)),
+                reason: "platform overloaded — queue-depth backpressure",
+                category: "rate_limited",
+            };
+        }
+        if (NON_RETRYABLE_CODES.has(err.code)) {
+            return {
+                retryable: false,
+                delayMs: 0,
+                reason: `non-retryable: ${err.code}`,
+                category: "non_retryable",
+            };
+        }
+        if (err.status >= 500 && err.status < 600) {
+            const delay = HTTP_5XX_BACKOFF_MS[idx];
+            if (delay === undefined) {
+                return {
+                    retryable: false,
+                    delayMs: 0,
+                    reason: `HTTP ${err.status} after 2 attempts`,
+                    category: "http_5xx",
+                };
+            }
+            return {
+                retryable: true,
+                delayMs: delay,
+                reason: `HTTP ${err.status}`,
+                category: "http_5xx",
+            };
+        }
+        return {
+            retryable: false,
+            delayMs: 0,
+            reason: `HTTP ${err.status} ${err.code}`,
+            category: "non_retryable",
+        };
+    }
+    if (err instanceof Error &&
+        /network error|fetch failed|ECONNRESET|ENOTFOUND|ETIMEDOUT/i.test(err.message)) {
+        const delay = NETWORK_BACKOFF_MS[idx];
+        if (delay === undefined) {
+            return {
+                retryable: false,
+                delayMs: 0,
+                reason: "network error after 3 attempts",
+                category: "network",
+            };
+        }
+        return {
+            retryable: true,
+            delayMs: delay,
+            reason: "network blip",
+            category: "network",
+        };
+    }
+    return {
+        retryable: false,
+        delayMs: 0,
+        reason: "unknown error",
+        category: "non_retryable",
+    };
+}
+const defaultSleep = (ms) => new Promise((r) => setTimeout(r, ms));
+export async function runDeployWithRetry(opts) {
+    const max = opts.maxAttempts ?? 4;
+    const sleep = opts.sleep ?? defaultSleep;
+    let attempt = 0;
+    let lastErr;
+    while (attempt < max) {
+        attempt += 1;
+        try {
+            const result = await opts.call(attempt);
+            return { result, attempts: attempt };
+        }
+        catch (err) {
+            lastErr = err;
+            const decision = classifyDeployRetry(err, attempt);
+            if (!decision.retryable || attempt >= max) {
+                throw err;
+            }
+            opts.onRetry?.({ attempt, decision, err });
+            await sleep(decision.delayMs);
+        }
+    }
+    throw lastErr;
+}
+//# sourceMappingURL=publish-retry.js.map

package/dist/publish-retry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"publish-retry.js","sourceRoot":"","sources":["../src/publish-retry.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAiBlD,MAAM,mBAAmB,GAAG,IAAI,GAAG,CAAC;IAClC,+BAA+B;IAC/B,cAAc;IACd,eAAe;IACf,gBAAgB;IAChB,sBAAsB;IACtB,oBAAoB;IACpB,sBAAsB;IACtB,qBAAqB;IACrB,mBAAmB;IACnB,eAAe;IACf,oBAAoB;IACpB,uBAAuB;IACvB,kBAAkB;IAClB,iEAAiE;IACjE,mEAAmE;IACnE,+DAA+D;IAC/D,iEAAiE;IACjE,eAAe;CAChB,CAAC,CAAC;AAEH,MAAM,6BAA6B,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,CAAU,CAAC;AACvE,MAAM,kBAAkB,GAAG,CAAC,KAAK,EAAE,KAAK,EAAE,MAAM,CAAU,CAAC;AAC3D,MAAM,mBAAmB,GAAG,CAAC,KAAK,EAAE,MAAM,CAAU,CAAC;AAErD,MAAM,UAAU,mBAAmB,CAAC,GAAY,EAAE,OAAe;IAC/D,oEAAoE;IACpE,8DAA8D;IAC9D,MAAM,GAAG,GAAG,OAAO,GAAG,CAAC,CAAC;IAExB,IAAI,GAAG,YAAY,eAAe,EAAE,CAAC;QACnC,IAAI,GAAG,CAAC,IAAI,KAAK,+BAA+B,EAAE,CAAC;YACjD,OAAO;gBACL,SAAS,EAAE,KAAK;gBAChB,OAAO,EAAE,CAAC;gBACV,MAAM,EAAE,uDAAuD;gBAC/D,QAAQ,EAAE,YAAY;aACvB,CAAC;QACJ,CAAC;QACD,IAAI,GAAG,CAAC,IAAI,KAAK,oBAAoB,EAAE,CAAC;YACtC,MAAM,KAAK,GAAG,6BAA6B,CAAC,GAAG,CAAC,CAAC;YACjD,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;gBACxB,OAAO;oBACL,SAAS,EAAE,KAAK;oBAChB,OAAO,EAAE,CAAC;oBACV,MAAM,EAAE,qCAAqC;oBAC7C,QAAQ,EAAE,oBAAoB;iBAC/B,CAAC;YACJ,CAAC;YACD,OAAO;gBACL,SAAS,EAAE,IAAI;gBACf,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,uBAAuB;gBAC/B,QAAQ,EAAE,oBAAoB;aAC/B,CAAC;QACJ,CAAC;QACD,IAAI,GAAG,CAAC,IAAI,KAAK,qBAAqB,EAAE,CAAC;YACvC,IAAI,GAAG,IAAI,CAAC,EAAE,CAAC;gBACb,OAAO;oBACL,SAAS,EAAE,KAAK;oBAChB,OAAO,EAAE,CAAC;oBACV,MAAM,EAAE,+BAA+B;oBACvC,QAAQ,EAAE,cAAc;iBACzB,CAAC;YACJ,CAAC;YACD,MAAM,aAAa,GACjB,OAAO,GAAG,CAAC,KAAK,EAAE,aAAa,KAAK,QAAQ,CAAC,CAAC,CAAE,GAAG,CAAC,KAAK,CAAC,aAAwB,CAAC,CAAC,CAAC,CAAC,CAAC;YACzF,OAAO;gBACL,SAAS,EAAE,IAAI;gBACf,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,aAAa,GAAG,IAAI,CAAC,CAAC;gBAChE,MAAM,EAAE,oBAAoB;gBAC5B,QAAQ,EAAE,cAAc;aACzB,CAAC;QACJ,CAAC;QACD,IAAI,GAAG,CAAC,IAAI,KAAK,uBAAuB,EAAE,CAAC;YACzC,gEAAgE;YAChE,+DAA+D;YAC/D,iEAAiE;YACjE,8DAA8D;YAC9D,kCAAkC;YAClC,IAAI,GAAG,IAAI,CAAC,EAAE,CAAC;gBACb,OAAO;oBACL,SAAS,EAAE,KAAK;oBAChB,OAAO,EAAE,CAAC;oBACV,MAAM,EAAE,sDAAsD;oBAC9D,QAAQ,EAAE,cAAc;iBACzB,CAAC;YACJ,CAAC;YACD,MAAM,aAAa,GACjB,OAAO,GAAG,CAAC,KAAK,EAAE,aAAa,KAAK,QAAQ,CAAC,CAAC,CAAE,GAAG,CAAC,KAAK,CAAC,aAAwB,CAAC,CAAC,CAAC,EAAE,CAAC;YAC1F,OAAO;gBACL,SAAS,EAAE,IAAI;gBACf,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,aAAa,GAAG,IAAI,CAAC,CAAC;gBACpE,MAAM,EAAE,gCAAgC;gBACxC,QAAQ,EAAE,cAAc;aACzB,CAAC;QACJ,CAAC;QACD,IAAI,GAAG,CAAC,IAAI,KAAK,qBAAqB,EAAE,CAAC;YACvC,sDAAsD;YACtD,iEAAiE;YACjE,+DAA+D;YAC/D,gEAAgE;YAChE,iEAAiE;YACjE,IAAI,GAAG,IAAI,CAAC,EAAE,CAAC;gBACb,OAAO;oBACL,SAAS,EAAE,KAAK;oBAChB,OAAO,EAAE,CAAC;oBACV,MAAM,EAAE,sCAAsC;oBAC9C,QAAQ,EAAE,cAAc;iBACzB,CAAC;YACJ,CAAC;YACD,MAAM,aAAa,GACjB,OAAO,GAAG,CAAC,KAAK,EAAE,aAAa,KAAK,QAAQ,CAAC,CAAC,CAAE,GAAG,CAAC,KAAK,CAAC,aAAwB,CAAC,CAAC,CAAC,EAAE,CAAC;YAC1F,OAAO;gBACL,SAAS,EAAE,IAAI;gBACf,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,aAAa,GAAG,IAAI,CAAC,CAAC;gBACpE,MAAM,EAAE,gDAAgD;gBACxD,QAAQ,EAAE,cAAc;aACzB,CAAC;QACJ,CAAC;QACD,IAAI,mBAAmB,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YACtC,OAAO;gBACL,SAAS,EAAE,KAAK;gBAChB,OAAO,EAAE,CAAC;gBACV,MAAM,EAAE,kBAAkB,GAAG,CAAC,IAAI,EAAE;gBACpC,QAAQ,EAAE,eAAe;aAC1B,CAAC;QACJ,CAAC;QACD,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;YAC1C,MAAM,KAAK,GAAG,mBAAmB,CAAC,GAAG,CAAC,CAAC;YACvC,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;gBACxB,OAAO;oBACL,SAAS,EAAE,KAAK;oBAChB,OAAO,EAAE,CAAC;oBACV,MAAM,EAAE,QAAQ,GAAG,CAAC,MAAM,mBAAmB;oBAC7C,QAAQ,EAAE,UAAU;iBACrB,CAAC;YACJ,CAAC;YACD,OAAO;gBACL,SAAS,EAAE,IAAI;gBACf,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,QAAQ,GAAG,CAAC,MAAM,EAAE;gBAC5B,QAAQ,EAAE,UAAU;aACrB,CAAC;QACJ,CAAC;QACD,OAAO;YACL,SAAS,EAAE,KAAK;YAChB,OAAO,EAAE,CAAC;YACV,MAAM,EAAE,QAAQ,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,IAAI,EAAE;YACxC,QAAQ,EAAE,eAAe;SAC1B,CAAC;IACJ,CAAC;IAED,IACE,GAAG,YAAY,KAAK;QACpB,4DAA4D,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,EAC9E,CAAC;QACD,MAAM,KAAK,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAC;QACtC,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,OAAO;gBACL,SAAS,EAAE,KAAK;gBAChB,OAAO,EAAE,CAAC;gBACV,MAAM,EAAE,gCAAgC;gBACxC,QAAQ,EAAE,SAAS;aACpB,CAAC;QACJ,CAAC;QACD,OAAO;YACL,SAAS,EAAE,IAAI;YACf,OAAO,EAAE,KAAK;YACd,MAAM,EAAE,cAAc;YACtB,QAAQ,EAAE,SAAS;SACpB,CAAC;IACJ,CAAC;IAED,OAAO;QACL,SAAS,EAAE,KAAK;QAChB,OAAO,EAAE,CAAC;QACV,MAAM,EAAE,eAAe;QACvB,QAAQ,EAAE,eAAe;KAC1B,CAAC;AACJ,CAAC;AAkBD,MAAM,YAAY,GAAG,CAAC,EAAU,EAAE,EAAE,CAAC,IAAI,OAAO,CAAO,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;AAOjF,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,IAA4B;IAE5B,MAAM,GAAG,GAAG,IAAI,CAAC,WAAW,IAAI,CAAC,CAAC;IAClC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,YAAY,CAAC;IACzC,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,IAAI,OAAgB,CAAC;IACrB,OAAO,OAAO,GAAG,GAAG,EAAE,CAAC;QACrB,OAAO,IAAI,CAAC,CAAC;QACb,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACxC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;QACvC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,GAAG,GAAG,CAAC;YACd,MAAM,QAAQ,GAAG,mBAAmB,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;YACnD,IAAI,CAAC,QAAQ,CAAC,SAAS,IAAI,OAAO,IAAI,GAAG,EAAE,CAAC;gBAC1C,MAAM,GAAG,CAAC;YACZ,CAAC;YACD,IAAI,CAAC,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,CAAC;YAC3C,MAAM,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QAChC,CAAC;IACH,CAAC;IACD,MAAM,OAAO,CAAC;AAChB,CAAC"}