@percher/core 0.3.0 → 0.4.1

package/dist/recovery.d.ts

@@ -52,6 +52,17 @@ export type RecoveryAction =
  | "fix_config"
 /** Plan limits exceeded or otherwise needs human input; agent should ask the user. */
  | "ask_user"
+/**
+ * FUTURE16 Fas 3 — pre-fetched device-code is in-flight. Agent should
+ * call `percher_wait_for_auth` to short-poll the device-code exchange,
+ * then resume the original publish call. Pairs 1:1 with the
+ * `auth_pending` PublishStatus. Distinct from `open_login` (which
+ * tells the agent to *start* a login flow via `percher_login`) — by
+ * the time `wait_auth` is emitted the device-code already exists and
+ * the user has been pointed at the verification URL; only the wait
+ * step remains.
+ */
+ | "wait_auth"
 /** Success path — no further action required. */
  | "none";
 /** MCP tool the agent should invoke for `nextAction`, when applicable. */
@@ -70,7 +81,14 @@ export type SuggestedTool = "percher_login" | "percher_env_set" | "percher_deplo
  | "percher_redeploy"
 /** FUTURE1 Phase 4.2 — percher_reproduce tool, surfaced via
  *  alternativeActions on build-failure recovery. */
- | "percher_reproduce";
+ | "percher_reproduce"
+/**
+ * FUTURE16 Fas 3 — short-polls a pre-fetched device-code and resumes
+ * the original publish input once a token lands. Pairs with the
+ * `wait_auth` recovery action and the `auth_pending` publish status.
+ * MCP-only tool — CLI's `percher login` already polls in-process.
+ */
+ | "percher_wait_for_auth";
 /**
  * FUTURE12 Phase 1a — stable, enumerated reason an agent or human can
  * branch on. Intentionally orthogonal to `RecoveryAction`: action says
@@ -135,6 +153,13 @@ export type ReasonCode =
  | "log_fetch_failed"
 /** Deploy died before the build phase started (e.g. tarball validation). */
  | "failed_before_build"
+/** FUTURE_account-deletion-guards Fas 4. percher_account_delete
+ *  pre-flighted percher_account_deletion_preview and got back a
+ *  non-empty blocker list (apps_owned, apps_with_collaborators,
+ *  pending_outgoing_transfers, deploys_in_progress, etc.). The agent
+ *  must surface `recovery.prompt` verbatim and let the user resolve
+ *  the blockers via the existing routes before retrying. */
+ | "account_deletion_blocked"
 /** Catch-all for unclassified state — agents should route to doctor. */
  | "unknown";
 /**
@@ -152,7 +177,18 @@ export type DoctorMode = "auto" | "deploy" | "runtime" | "config" | "env" | "acc
  * deploy. Pinning the value here so the CLI/MCP can declare exhaustive
  * switches before the server path lands.
  */
-export type PublishStatus = "live" | "failed" | "needs_login" | "dry_run" | "queued" | "replaced" | "already_in_progress";
+export type PublishStatus = "live" | "failed" | "needs_login"
+/**
+ * FUTURE16 Fas 3 — MCP `percher_publish` returns this when the
+ * caller's session has no token AND a device-code has already been
+ * pre-fetched. The agent's next step is `percher_wait_for_auth`
+ * (carried in `recovery`); the tarball has NOT been packed yet, so
+ * the resume call is the first and only packaging operation in the
+ * entire auth flow. CLI uses the existing `needs_login` path —
+ * `auth_pending` is MCP-specific because only a long-lived agent
+ * session benefits from the pre-fetch + in-process poll split.
+ */
+ | "auth_pending" | "dry_run" | "queued" | "replaced" | "already_in_progress";
 /**
  * Structured problem entry used by `fix_config` and `fix_problems`
  * recoveries. Agents apply file edits directly using these.
@@ -199,7 +235,14 @@ interface BaseRecovery {
  * Phase 4 migrates it to `run_doctor`.
  */
 export interface ToolRecovery extends BaseRecovery {
-    nextAction: "open_login" | "wait_deploy" | "run_doctor" | "set_env_vars" | "retry" | "inspect_build_log";
+    nextAction: "open_login" | "wait_deploy" | "run_doctor" | "set_env_vars" | "retry" | "inspect_build_log"
+    /**
+     * FUTURE16 Fas 3 — short-poll a pre-fetched device-code via
+     * `percher_wait_for_auth`. `args` carries `{ deviceCode,
+     * publishArgs }` so the agent can resume the original publish
+     * call without re-deriving inputs.
+     */
+     | "wait_auth";
     suggestedTool: SuggestedTool;
     args: Record<string, unknown>;
 }
@@ -241,6 +284,20 @@ export declare function recoveryNone(opts?: {
 export declare function recoveryLogin(opts?: {
     reasonCode?: ReasonCode;
 }): ToolRecovery;
+/**
+ * FUTURE16 Fas 3 — pre-fetched device-code is in-flight; agent should
+ * call `percher_wait_for_auth` to short-poll the exchange and resume
+ * publish once a token lands. `publishArgs` carries the *raw user
+ * input flags* (cwd is implicit on ctx; preview/live/message/dryRun/
+ * etc. ride here) so the resume call is a first-time publish — no
+ * tarball state is preserved across the wait, no upload state to
+ * invalidate. That's the entire point of pre-fetch + in-process poll
+ * over the alternative anonymous-staged-tarball design (see plan).
+ */
+export declare function recoveryAuthPending(opts: {
+    deviceCode: string;
+    publishArgs: Record<string, unknown>;
+}): ToolRecovery;
 /** Wait on an in-flight deploy — agent should call `percher_wait_for_deploy`. */
 export declare function recoveryWait(opts: {
     app: string;

package/dist/recovery.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"recovery.d.ts","sourceRoot":"","sources":["../src/recovery.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AACpD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAErD;;;;;;GAMG;AACH,MAAM,MAAM,cAAc;AACxB,kEAAkE;AAChE,YAAY;AACd,iEAAiE;GAC/D,cAAc;AAChB;;;;GAIG;GACD,aAAa;AACf,qEAAqE;GACnE,OAAO;AACT;;;;;;;GAOG;GACD,YAAY;AACd,mFAAmF;GACjF,mBAAmB;AACrB;;;;;GAKG;GACD,cAAc;AAChB;;;;;;;;GAQG;GACD,mBAAmB;AACrB,+EAA+E;GAC7E,YAAY;AACd,sFAAsF;GACpF,UAAU;AACZ,iDAAiD;GAC/C,MAAM,CAAC;AAEX,0EAA0E;AAC1E,MAAM,MAAM,aAAa,GACrB,eAAe,GACf,iBAAiB,GACjB,yBAAyB,GACzB,iBAAiB;AACnB,kFAAkF;GAChF,yBAAyB;AAC3B;;;;GAIG;GACD,gBAAgB;AAClB;;qDAEqD;GACnD,kBAAkB;AACpB;oDACoD;GAClD,mBAAmB,CAAC;AAExB;;;;;;;;;GASG;AACH,MAAM,MAAM,UAAU;AACpB,0DAA0D;AACxD,MAAM;AACR,0EAA0E;GACxE,eAAe;AACjB,+DAA+D;GAC7D,eAAe;AACjB,4DAA4D;GAC1D,gBAAgB;AAClB,0DAA0D;GACxD,gBAAgB;AAClB,gFAAgF;GAC9E,sBAAsB;AACxB,yEAAyE;GACvE,oBAAoB;AACtB;4CAC4C;GAC1C,sBAAsB;AACxB,oEAAoE;GAClE,YAAY;AACd,qEAAqE;GACnE,eAAe;AACjB,0CAA0C;GACxC,iBAAiB;AACnB,+DAA+D;GAC7D,kBAAkB;AACpB,oEAAoE;GAClE,gBAAgB;AAClB,4EAA4E;GAC1E,gBAAgB;AAClB,yEAAyE;GACvE,4BAA4B;AAC9B,qDAAqD;GACnD,mBAAmB;AACrB,oDAAoD;GAClD,aAAa;AACf,0EAA0E;GACxE,cAAc;AAChB,uDAAuD;GACrD,iBAAiB;AACnB,wDAAwD;GACtD,gBAAgB;AAClB,8EAA8E;GAC5E,qBAAqB;AACvB,mEAAmE;GACjE,iBAAiB;AACnB,iEAAiE;GAC/D,mBAAmB;AACrB,yDAAyD;GACvD,qBAAqB;AACvB,iEAAiE;GAC/D,kBAAkB;AACpB,4EAA4E;GAC1E,qBAAqB;AACvB,wEAAwE;GACtE,SAAS,CAAC;AAEd;;;;;GAKG;AACH,MAAM,MAAM,UAAU,GAAG,MAAM,GAAG,QAAQ,GAAG,SAAS,GAAG,QAAQ,GAAG,KAAK,GAAG,SAAS,CAAC;AAEtF;;;;;;;GAOG;AACH,MAAM,MAAM,aAAa,GACrB,MAAM,GACN,QAAQ,GACR,aAAa,GACb,SAAS,GACT,QAAQ,GACR,UAAU,GACV,qBAAqB,CAAC;AAE1B;;;GAGG;AACH,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,oEAAoE;AACpE,MAAM,WAAW,mBAAmB;IAClC,MAAM,EAAE,cAAc,CAAC;IACvB,aAAa,CAAC,EAAE,aAAa,CAAC;IAC9B,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC/B,2DAA2D;IAC3D,IAAI,EAAE,MAAM,CAAC;CACd;AAED,8CAA8C;AAC9C,UAAU,YAAY;IACpB,yEAAyE;IACzE,SAAS,EAAE,OAAO,CAAC;IACnB;;;;;OAKG;IACH,UAAU,EAAE,UAAU,CAAC;IACvB;;;;;;;OAOG;IACH,kBAAkB,CAAC,EAAE,mBAAmB,EAAE,CAAC;CAC5C;AAED;;;;;GAKG;AACH,MAAM,WAAW,YAAa,SAAQ,YAAY;IAChD,UAAU,EACN,YAAY,GACZ,aAAa,GACb,YAAY,GACZ,cAAc,GACd,OAAO,GACP,mBAAmB,CAAC;IACxB,aAAa,EAAE,aAAa,CAAC;IAC7B,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC/B;AAED;;;GAGG;AACH,MAAM,WAAW,YAAa,SAAQ,YAAY;IAChD,UAAU,EAAE,YAAY,GAAG,cAAc,CAAC;IAC1C,QAAQ,EAAE,eAAe,EAAE,CAAC;CAC7B;AAED,mFAAmF;AACnF,MAAM,WAAW,YAAa,SAAQ,YAAY;IAChD,UAAU,EAAE,MAAM,CAAC;IACnB,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED,qFAAqF;AACrF,MAAM,WAAW,eAAgB,SAAQ,YAAY;IACnD,UAAU,EAAE,UAAU,CAAC;IACvB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;CACpB;AAED;;;;;;;;GAQG;AACH,MAAM,MAAM,eAAe,GAAG,YAAY,GAAG,YAAY,GAAG,YAAY,GAAG,eAAe,CAAC;AAS3F,0EAA0E;AAC1E,wBAAgB,YAAY,CAAC,IAAI,GAAE;IAAE,UAAU,CAAC,EAAE,UAAU,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,CAAA;CAAO,GAAG,YAAY,CAO/F;AAED,mEAAmE;AACnE,wBAAgB,aAAa,CAAC,IAAI,GAAE;IAAE,UAAU,CAAC,EAAE,UAAU,CAAA;CAAO,GAAG,YAAY,CAQlF;AAED,iFAAiF;AACjF,wBAAgB,YAAY,CAAC,IAAI,EAAE;IACjC,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,EAAE,MAAM,CAAC;IACjB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,UAAU,EAAE,UAAU,CAAC;CACxB,GAAG,YAAY,CAYf;AAED,+EAA+E;AAC/E,wBAAgB,cAAc,CAAC,IAAI,EAAE;IACnC,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,IAAI,CAAC,EAAE,UAAU,CAAC;IAClB,UAAU,EAAE,UAAU,CAAC;IACvB,kBAAkB,CAAC,EAAE,mBAAmB,EAAE,CAAC;CAC5C,GAAG,YAAY,CAef;AAED,0EAA0E;AAC1E,wBAAgB,WAAW,CAAC,IAAI,EAAE;IAChC,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,UAAU,CAAC,EAAE,UAAU,CAAC;CACzB,GAAG,YAAY,CAWf;AAED;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE;IACtC,QAAQ,EAAE,eAAe,EAAE,CAAC;IAC5B,UAAU,CAAC,EAAE,UAAU,CAAC;CACzB,GAAG,YAAY,CAOf;AAED;;;GAGG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE;IACxC,QAAQ,EAAE,eAAe,EAAE,CAAC;IAC5B,UAAU,CAAC,EAAE,UAAU,CAAC;IACxB,kBAAkB,CAAC,EAAE,mBAAmB,EAAE,CAAC;CAC5C,GAAG,YAAY,CAUf;AAED,kEAAkE;AAClE,wBAAgB,aAAa,CAAC,IAAI,EAAE;IAClC,aAAa,EAAE,aAAa,CAAC;IAC7B,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC9B,UAAU,EAAE,UAAU,CAAC;CACxB,GAAG,YAAY,CAQf;AAED;;;;GAIG;AACH,wBAAgB,WAAW,CAAC,IAAI,EAAE;IAChC,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB,UAAU,EAAE,UAAU,CAAC;IACvB,SAAS,CAAC,EAAE,OAAO,CAAC;CACrB,GAAG,eAAe,CAWlB;AAED;;;;GAIG;AACH,wBAAgB,uBAAuB,CAAC,IAAI,EAAE;IAC5C,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,UAAU,CAAC;IACxB,kBAAkB,CAAC,EAAE,mBAAmB,EAAE,CAAC;CAC5C,GAAG,YAAY,CAcf;AAQD,oCAAoC;AACpC,eAAO,MAAM,aAAa,EAAE,YAA6B,CAAC;AAE1D,6CAA6C;AAC7C,eAAO,MAAM,oBAAoB,EAAE,YAA8B,CAAC;AAElE,UAAU,cAAc;IACtB,+DAA+D;IAC/D,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IAC1B,6EAA6E;IAC7E,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,+EAA+E;IAC/E,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;;OAGG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACvC;;;;;OAKG;IACH,QAAQ,CAAC,EAAE,YAAY,EAAE,CAAC;CAC3B;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,6BAA6B,CAAC,CAAC,EAAE,YAAY,GAAG,eAAe,CAW9E;AAED;;;;GAIG;AACH,wBAAgB,sBAAsB,CACpC,UAAU,EAAE,UAAU,EACtB,OAAO,GAAE,cAAmB,GAC3B,eAAe,CAoHjB"}
+{"version":3,"file":"recovery.d.ts","sourceRoot":"","sources":["../src/recovery.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAEpD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAErD;;;;;;GAMG;AACH,MAAM,MAAM,cAAc;AACxB,kEAAkE;AAChE,YAAY;AACd,iEAAiE;GAC/D,cAAc;AAChB;;;;GAIG;GACD,aAAa;AACf,qEAAqE;GACnE,OAAO;AACT;;;;;;;GAOG;GACD,YAAY;AACd,mFAAmF;GACjF,mBAAmB;AACrB;;;;;GAKG;GACD,cAAc;AAChB;;;;;;;;GAQG;GACD,mBAAmB;AACrB,+EAA+E;GAC7E,YAAY;AACd,sFAAsF;GACpF,UAAU;AACZ;;;;;;;;;GASG;GACD,WAAW;AACb,iDAAiD;GAC/C,MAAM,CAAC;AAEX,0EAA0E;AAC1E,MAAM,MAAM,aAAa,GACrB,eAAe,GACf,iBAAiB,GACjB,yBAAyB,GACzB,iBAAiB;AACnB,kFAAkF;GAChF,yBAAyB;AAC3B;;;;GAIG;GACD,gBAAgB;AAClB;;qDAEqD;GACnD,kBAAkB;AACpB;oDACoD;GAClD,mBAAmB;AACrB;;;;;GAKG;GACD,uBAAuB,CAAC;AAE5B;;;;;;;;;GASG;AACH,MAAM,MAAM,UAAU;AACpB,0DAA0D;AACxD,MAAM;AACR,0EAA0E;GACxE,eAAe;AACjB,+DAA+D;GAC7D,eAAe;AACjB,4DAA4D;GAC1D,gBAAgB;AAClB,0DAA0D;GACxD,gBAAgB;AAClB,gFAAgF;GAC9E,sBAAsB;AACxB,yEAAyE;GACvE,oBAAoB;AACtB;4CAC4C;GAC1C,sBAAsB;AACxB,oEAAoE;GAClE,YAAY;AACd,qEAAqE;GACnE,eAAe;AACjB,0CAA0C;GACxC,iBAAiB;AACnB,+DAA+D;GAC7D,kBAAkB;AACpB,oEAAoE;GAClE,gBAAgB;AAClB,4EAA4E;GAC1E,gBAAgB;AAClB,yEAAyE;GACvE,4BAA4B;AAC9B,qDAAqD;GACnD,mBAAmB;AACrB,oDAAoD;GAClD,aAAa;AACf,0EAA0E;GACxE,cAAc;AAChB,uDAAuD;GACrD,iBAAiB;AACnB,wDAAwD;GACtD,gBAAgB;AAClB,8EAA8E;GAC5E,qBAAqB;AACvB,mEAAmE;GACjE,iBAAiB;AACnB,iEAAiE;GAC/D,mBAAmB;AACrB,yDAAyD;GACvD,qBAAqB;AACvB,iEAAiE;GAC/D,kBAAkB;AACpB,4EAA4E;GAC1E,qBAAqB;AACvB;;;;;4DAK4D;GAC1D,0BAA0B;AAC5B,wEAAwE;GACtE,SAAS,CAAC;AAEd;;;;;GAKG;AACH,MAAM,MAAM,UAAU,GAAG,MAAM,GAAG,QAAQ,GAAG,SAAS,GAAG,QAAQ,GAAG,KAAK,GAAG,SAAS,CAAC;AAEtF;;;;;;;GAOG;AACH,MAAM,MAAM,aAAa,GACrB,MAAM,GACN,QAAQ,GACR,aAAa;AACf;;;;;;;;;GASG;GACD,cAAc,GACd,SAAS,GACT,QAAQ,GACR,UAAU,GACV,qBAAqB,CAAC;AAE1B;;;GAGG;AACH,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,oEAAoE;AACpE,MAAM,WAAW,mBAAmB;IAClC,MAAM,EAAE,cAAc,CAAC;IACvB,aAAa,CAAC,EAAE,aAAa,CAAC;IAC9B,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC/B,2DAA2D;IAC3D,IAAI,EAAE,MAAM,CAAC;CACd;AAED,8CAA8C;AAC9C,UAAU,YAAY;IACpB,yEAAyE;IACzE,SAAS,EAAE,OAAO,CAAC;IACnB;;;;;OAKG;IACH,UAAU,EAAE,UAAU,CAAC;IACvB;;;;;;;OAOG;IACH,kBAAkB,CAAC,EAAE,mBAAmB,EAAE,CAAC;CAC5C;AAED;;;;;GAKG;AACH,MAAM,WAAW,YAAa,SAAQ,YAAY;IAChD,UAAU,EACN,YAAY,GACZ,aAAa,GACb,YAAY,GACZ,cAAc,GACd,OAAO,GACP,mBAAmB;IACrB;;;;;OAKG;OACD,WAAW,CAAC;IAChB,aAAa,EAAE,aAAa,CAAC;IAC7B,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC/B;AAED;;;GAGG;AACH,MAAM,WAAW,YAAa,SAAQ,YAAY;IAChD,UAAU,EAAE,YAAY,GAAG,cAAc,CAAC;IAC1C,QAAQ,EAAE,eAAe,EAAE,CAAC;CAC7B;AAED,mFAAmF;AACnF,MAAM,WAAW,YAAa,SAAQ,YAAY;IAChD,UAAU,EAAE,MAAM,CAAC;IACnB,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED,qFAAqF;AACrF,MAAM,WAAW,eAAgB,SAAQ,YAAY;IACnD,UAAU,EAAE,UAAU,CAAC;IACvB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;CACpB;AAED;;;;;;;;GAQG;AACH,MAAM,MAAM,eAAe,GAAG,YAAY,GAAG,YAAY,GAAG,YAAY,GAAG,eAAe,CAAC;AAS3F,0EAA0E;AAC1E,wBAAgB,YAAY,CAAC,IAAI,GAAE;IAAE,UAAU,CAAC,EAAE,UAAU,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,CAAA;CAAO,GAAG,YAAY,CAO/F;AAED,mEAAmE;AACnE,wBAAgB,aAAa,CAAC,IAAI,GAAE;IAAE,UAAU,CAAC,EAAE,UAAU,CAAA;CAAO,GAAG,YAAY,CAQlF;AAED;;;;;;;;;GASG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE;IACxC,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACtC,GAAG,YAAY,CAWf;AAED,iFAAiF;AACjF,wBAAgB,YAAY,CAAC,IAAI,EAAE;IACjC,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,EAAE,MAAM,CAAC;IACjB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,UAAU,EAAE,UAAU,CAAC;CACxB,GAAG,YAAY,CAYf;AAED,+EAA+E;AAC/E,wBAAgB,cAAc,CAAC,IAAI,EAAE;IACnC,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,IAAI,CAAC,EAAE,UAAU,CAAC;IAClB,UAAU,EAAE,UAAU,CAAC;IACvB,kBAAkB,CAAC,EAAE,mBAAmB,EAAE,CAAC;CAC5C,GAAG,YAAY,CAef;AAED,0EAA0E;AAC1E,wBAAgB,WAAW,CAAC,IAAI,EAAE;IAChC,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,UAAU,CAAC,EAAE,UAAU,CAAC;CACzB,GAAG,YAAY,CAWf;AAED;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE;IACtC,QAAQ,EAAE,eAAe,EAAE,CAAC;IAC5B,UAAU,CAAC,EAAE,UAAU,CAAC;CACzB,GAAG,YAAY,CAOf;AAED;;;GAGG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE;IACxC,QAAQ,EAAE,eAAe,EAAE,CAAC;IAC5B,UAAU,CAAC,EAAE,UAAU,CAAC;IACxB,kBAAkB,CAAC,EAAE,mBAAmB,EAAE,CAAC;CAC5C,GAAG,YAAY,CAUf;AAED,kEAAkE;AAClE,wBAAgB,aAAa,CAAC,IAAI,EAAE;IAClC,aAAa,EAAE,aAAa,CAAC;IAC7B,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC9B,UAAU,EAAE,UAAU,CAAC;CACxB,GAAG,YAAY,CAQf;AAED;;;;GAIG;AACH,wBAAgB,WAAW,CAAC,IAAI,EAAE;IAChC,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB,UAAU,EAAE,UAAU,CAAC;IACvB,SAAS,CAAC,EAAE,OAAO,CAAC;CACrB,GAAG,eAAe,CAWlB;AAED;;;;GAIG;AACH,wBAAgB,uBAAuB,CAAC,IAAI,EAAE;IAC5C,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,UAAU,CAAC;IACxB,kBAAkB,CAAC,EAAE,mBAAmB,EAAE,CAAC;CAC5C,GAAG,YAAY,CAcf;AAQD,oCAAoC;AACpC,eAAO,MAAM,aAAa,EAAE,YAA6B,CAAC;AAE1D,6CAA6C;AAC7C,eAAO,MAAM,oBAAoB,EAAE,YAA8B,CAAC;AAElE,UAAU,cAAc;IACtB,+DAA+D;IAC/D,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IAC1B,6EAA6E;IAC7E,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,+EAA+E;IAC/E,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;;OAGG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACvC;;;;;OAKG;IACH,QAAQ,CAAC,EAAE,YAAY,EAAE,CAAC;CAC3B;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,6BAA6B,CAAC,CAAC,EAAE,YAAY,GAAG,eAAe,CAW9E;AAED;;;;GAIG;AACH,wBAAgB,sBAAsB,CACpC,UAAU,EAAE,UAAU,EACtB,OAAO,GAAE,cAAmB,GAC3B,eAAe,CAoHjB"}

package/dist/recovery.js

@@ -1,3 +1,4 @@
+import { TIMEOUTS } from "@percher/shared/timeouts";
 // ── Builders ─────────────────────────────────────────────────────────
 //
 // All recovery construction goes through these. Each builder enforces
@@ -23,6 +24,28 @@ export function recoveryLogin(opts = {}) {
         reasonCode: opts.reasonCode ?? "auth_required",
     };
 }
+/**
+ * FUTURE16 Fas 3 — pre-fetched device-code is in-flight; agent should
+ * call `percher_wait_for_auth` to short-poll the exchange and resume
+ * publish once a token lands. `publishArgs` carries the *raw user
+ * input flags* (cwd is implicit on ctx; preview/live/message/dryRun/
+ * etc. ride here) so the resume call is a first-time publish — no
+ * tarball state is preserved across the wait, no upload state to
+ * invalidate. That's the entire point of pre-fetch + in-process poll
+ * over the alternative anonymous-staged-tarball design (see plan).
+ */
+export function recoveryAuthPending(opts) {
+    return {
+        retryable: false,
+        nextAction: "wait_auth",
+        suggestedTool: "percher_wait_for_auth",
+        args: {
+            deviceCode: opts.deviceCode,
+            publishArgs: opts.publishArgs,
+        },
+        reasonCode: "auth_required",
+    };
+}
 /** Wait on an in-flight deploy — agent should call `percher_wait_for_deploy`. */
 export function recoveryWait(opts) {
     return {
@@ -32,7 +55,7 @@ export function recoveryWait(opts) {
         args: {
             app: opts.app,
             deployId: opts.deployId,
-            timeoutSeconds: opts.timeoutSeconds ?? 30,
+            timeoutSeconds: opts.timeoutSeconds ?? TIMEOUTS.mcpWaitDeployDefault / 1000,
         },
         reasonCode: opts.reasonCode,
     };

package/dist/recovery.js.map

@@ -1 +1 @@
-{"version":3,"file":"recovery.js","sourceRoot":"","sources":["../src/recovery.ts"],"names":[],"mappings":"AAyQA,wEAAwE;AACxE,EAAE;AACF,sEAAsE;AACtE,oEAAoE;AACpE,sEAAsE;AACtE,iEAAiE;AAEjE,0EAA0E;AAC1E,MAAM,UAAU,YAAY,CAAC,OAAkD,EAAE;IAC/E,OAAO;QACL,SAAS,EAAE,KAAK;QAChB,UAAU,EAAE,MAAM;QAClB,UAAU,EAAE,IAAI,CAAC,UAAU,IAAI,MAAM;QACrC,GAAG,CAAC,IAAI,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACrD,CAAC;AACJ,CAAC;AAED,mEAAmE;AACnE,MAAM,UAAU,aAAa,CAAC,OAAoC,EAAE;IAClE,OAAO;QACL,SAAS,EAAE,KAAK;QAChB,UAAU,EAAE,YAAY;QACxB,aAAa,EAAE,eAAe;QAC9B,IAAI,EAAE,EAAE;QACR,UAAU,EAAE,IAAI,CAAC,UAAU,IAAI,eAAe;KAC/C,CAAC;AACJ,CAAC;AAED,iFAAiF;AACjF,MAAM,UAAU,YAAY,CAAC,IAK5B;IACC,OAAO;QACL,SAAS,EAAE,KAAK;QAChB,UAAU,EAAE,aAAa;QACzB,aAAa,EAAE,yBAAyB;QACxC,IAAI,EAAE;YACJ,GAAG,EAAE,IAAI,CAAC,GAAG;YACb,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,cAAc,EAAE,IAAI,CAAC,cAAc,IAAI,EAAE;SAC1C;QACD,UAAU,EAAE,IAAI,CAAC,UAAU;KAC5B,CAAC;AACJ,CAAC;AAED,+EAA+E;AAC/E,MAAM,UAAU,cAAc,CAAC,IAM9B;IACC,MAAM,IAAI,GAA4B,EAAE,CAAC;IACzC,IAAI,IAAI,CAAC,GAAG,KAAK,SAAS;QAAE,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC;IAChD,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS;QAAE,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;IAC/D,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS;QAAE,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;IACnD,OAAO;QACL,SAAS,EAAE,KAAK;QAChB,UAAU,EAAE,YAAY;QACxB,aAAa,EAAE,gBAAgB;QAC/B,IAAI;QACJ,UAAU,EAAE,IAAI,CAAC,UAAU;QAC3B,GAAG,CAAC,IAAI,CAAC,kBAAkB,KAAK,SAAS;YACvC,CAAC,CAAC,EAAE,kBAAkB,EAAE,IAAI,CAAC,kBAAkB,EAAE;YACjD,CAAC,CAAC,EAAE,CAAC;KACR,CAAC;AACJ,CAAC;AAED,0EAA0E;AAC1E,MAAM,UAAU,WAAW,CAAC,IAI3B;IACC,MAAM,IAAI,GAA4B,EAAE,CAAC;IACzC,IAAI,IAAI,CAAC,GAAG,KAAK,SAAS;QAAE,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC;IAChD,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC;QAAE,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;IAChD,OAAO;QACL,SAAS,EAAE,KAAK;QAChB,UAAU,EAAE,cAAc;QAC1B,aAAa,EAAE,iBAAiB;QAChC,IAAI;QACJ,UAAU,EAAE,IAAI,CAAC,UAAU,IAAI,aAAa;KAC7C,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,iBAAiB,CAAC,IAGjC;IACC,OAAO;QACL,SAAS,EAAE,KAAK;QAChB,UAAU,EAAE,YAAY;QACxB,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,UAAU,EAAE,IAAI,CAAC,UAAU,IAAI,gBAAgB;KAChD,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,mBAAmB,CAAC,IAInC;IACC,OAAO;QACL,SAAS,EAAE,KAAK;QAChB,UAAU,EAAE,cAAc;QAC1B,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,UAAU,EAAE,IAAI,CAAC,UAAU,IAAI,cAAc;QAC7C,GAAG,CAAC,IAAI,CAAC,kBAAkB,KAAK,SAAS;YACvC,CAAC,CAAC,EAAE,kBAAkB,EAAE,IAAI,CAAC,kBAAkB,EAAE;YACjD,CAAC,CAAC,EAAE,CAAC;KACR,CAAC;AACJ,CAAC;AAED,kEAAkE;AAClE,MAAM,UAAU,aAAa,CAAC,IAI7B;IACC,OAAO;QACL,SAAS,EAAE,IAAI;QACf,UAAU,EAAE,OAAO;QACnB,aAAa,EAAE,IAAI,CAAC,aAAa;QACjC,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,UAAU,EAAE,IAAI,CAAC,UAAU;KAC5B,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,WAAW,CAAC,IAK3B;IACC,IAAI,CAAC,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACpD,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;IAC7D,CAAC;IACD,OAAO;QACL,SAAS,EAAE,IAAI,CAAC,SAAS,IAAI,KAAK;QAClC,UAAU,EAAE,UAAU;QACtB,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,GAAG,CAAC,IAAI,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAChE,UAAU,EAAE,IAAI,CAAC,UAAU;KAC5B,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,uBAAuB,CAAC,IAKvC;IACC,MAAM,IAAI,GAA4B,IAAI,CAAC,QAAQ;QACjD,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,CAAC,QAAQ,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE;QACtC,CAAC,CAAC,EAAE,YAAY,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC;IAC1C,OAAO;QACL,SAAS,EAAE,KAAK;QAChB,UAAU,EAAE,mBAAmB;QAC/B,aAAa,EAAE,yBAAyB;QACxC,IAAI;QACJ,UAAU,EAAE,IAAI,CAAC,UAAU,IAAI,cAAc;QAC7C,GAAG,CAAC,IAAI,CAAC,kBAAkB,KAAK,SAAS;YACvC,CAAC,CAAC,EAAE,kBAAkB,EAAE,IAAI,CAAC,kBAAkB,EAAE;YACjD,CAAC,CAAC,EAAE,CAAC;KACR,CAAC;AACJ,CAAC;AAED,wEAAwE;AACxE,EAAE;AACF,oEAAoE;AACpE,mEAAmE;AACnE,6CAA6C;AAE7C,oCAAoC;AACpC,MAAM,CAAC,MAAM,aAAa,GAAiB,YAAY,EAAE,CAAC;AAE1D,6CAA6C;AAC7C,MAAM,CAAC,MAAM,oBAAoB,GAAiB,aAAa,EAAE,CAAC;AAuBlE;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,6BAA6B,CAAC,CAAe;IAC3D,+DAA+D;IAC/D,8CAA8C;IAC9C,MAAM,IAAI,GAAG,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC;IAC1B,MAAM,OAAO,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,OAAO,WAAW,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;IAC1F,OAAO;QACL,IAAI;QACJ,GAAG,CAAC,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvD,GAAG,CAAC,OAAO,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7D,OAAO;KACR,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,sBAAsB,CACpC,UAAsB,EACtB,UAA0B,EAAE;IAE5B,QAAQ,UAAU,EAAE,CAAC;QACnB,KAAK,aAAa;YAChB,OAAO,WAAW,CAAC;gBACjB,IAAI,EAAE,OAAO,CAAC,cAAc,IAAI,EAAE;gBAClC,UAAU,EAAE,aAAa;aAC1B,CAAC,CAAC;QAEL,KAAK,mBAAmB;YACtB,OAAO,aAAa,CAAC;gBACnB,aAAa,EAAE,iBAAiB;gBAChC,IAAI,EAAE,OAAO,CAAC,YAAY,IAAI,EAAE;gBAChC,UAAU,EAAE,mBAAmB;aAChC,CAAC,CAAC;QAEL,KAAK,gBAAgB;YACnB,OAAO,iBAAiB,CAAC;gBACvB,QAAQ,EAAE;oBACR;wBACE,IAAI,EAAE,cAAc;wBACpB,OAAO,EAAE,2DAA2D;qBACrE;iBACF;gBACD,UAAU,EAAE,gBAAgB;aAC7B,CAAC,CAAC;QAEL,KAAK,cAAc,CAAC;QACpB,KAAK,oBAAoB,CAAC;QAC1B,KAAK,sBAAsB,CAAC;QAC5B,KAAK,eAAe,CAAC;QACrB,KAAK,mBAAmB,CAAC;QACzB,KAAK,eAAe,CAAC;QACrB,KAAK,YAAY,CAAC,CAAC,CAAC;YAClB,gEAAgE;YAChE,4DAA4D;YAC5D,6DAA6D;YAC7D,wDAAwD;YACxD,gEAAgE;YAChE,iEAAiE;YACjE,kEAAkE;YAClE,MAAM,YAAY,GAAG,CAAC,OAAO,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;YACpE,MAAM,YAAY,GAAoC,OAAO,CAAC,QAAQ;gBACpE,CAAC,CAAC;oBACE,MAAM,EAAE,mBAAmB;oBAC3B,aAAa,EAAE,mBAAmB;oBAClC,IAAI,EAAE,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,GAAG,EAAE,OAAO,CAAC,OAAO,EAAE;oBAC1D,IAAI,EAAE,+FAA+F;iBACtG;gBACH,CAAC,CAAC,SAAS,CAAC;YAEd,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC5B,OAAO,mBAAmB,CAAC;oBACzB,QAAQ,EAAE,YAAY,CAAC,GAAG,CAAC,6BAA6B,CAAC;oBACzD,UAAU,EAAE,cAAc;oBAC1B,GAAG,CAAC,YAAY;wBACd,CAAC,CAAC;4BACE,kBAAkB,EAAE;gCAClB;oCACE,GAAG,YAAY;oCACf,IAAI,EAAE,+GAA+G;iCACtH;6BACF;yBACF;wBACH,CAAC,CAAC,EAAE,CAAC;iBACR,CAAC,CAAC;YACL,CAAC;YAED,2DAA2D;YAC3D,+DAA+D;YAC/D,6DAA6D;YAC7D,yDAAyD;YACzD,gEAAgE;YAChE,yDAAyD;YACzD,+DAA+D;YAC/D,+DAA+D;YAC/D,gEAAgE;YAChE,iEAAiE;YACjE,UAAU;YACV,EAAE;YACF,gEAAgE;YAChE,+DAA+D;YAC/D,gEAAgE;YAChE,0CAA0C;YAC1C,MAAM,UAAU,GAAwB;gBACtC,MAAM,EAAE,mBAAmB;gBAC3B,aAAa,EAAE,yBAAyB;gBACxC,IAAI,EAAE,OAAO,CAAC,QAAQ;oBACpB,CAAC,CAAC,EAAE,EAAE,EAAE,OAAO,CAAC,QAAQ,EAAE,GAAG,EAAE,OAAO,CAAC,OAAO,EAAE;oBAChD,CAAC,CAAC,EAAE,YAAY,EAAE,IAAI,EAAE,GAAG,EAAE,OAAO,CAAC,OAAO,EAAE;gBAChD,IAAI,EAAE,oGAAoG;aAC3G,CAAC;YACF,MAAM,kBAAkB,GAA0B,CAAC,UAAU,CAAC,CAAC;YAC/D,IAAI,YAAY,EAAE,CAAC;gBACjB,kBAAkB,CAAC,IAAI,CAAC;oBACtB,GAAG,YAAY;oBACf,IAAI,EAAE,uHAAuH;iBAC9H,CAAC,CAAC;YACL,CAAC;YACD,OAAO,cAAc,CAAC;gBACpB,GAAG,EAAE,OAAO,CAAC,OAAO;gBACpB,QAAQ,EAAE,OAAO,CAAC,QAAQ;gBAC1B,IAAI,EAAE,QAAQ;gBACd,UAAU,EAAE,cAAc;gBAC1B,kBAAkB;aACnB,CAAC,CAAC;QACL,CAAC;QAED;YACE,qEAAqE;YACrE,4DAA4D;YAC5D,OAAO,WAAW,CAAC;gBACjB,MAAM,EACJ,oIAAoI;gBACtI,UAAU,EAAE,SAAS;aACtB,CAAC,CAAC;IACP,CAAC;AACH,CAAC"}
+{"version":3,"file":"recovery.js","sourceRoot":"","sources":["../src/recovery.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,QAAQ,EAAE,MAAM,0BAA0B,CAAC;AAoTpD,wEAAwE;AACxE,EAAE;AACF,sEAAsE;AACtE,oEAAoE;AACpE,sEAAsE;AACtE,iEAAiE;AAEjE,0EAA0E;AAC1E,MAAM,UAAU,YAAY,CAAC,OAAkD,EAAE;IAC/E,OAAO;QACL,SAAS,EAAE,KAAK;QAChB,UAAU,EAAE,MAAM;QAClB,UAAU,EAAE,IAAI,CAAC,UAAU,IAAI,MAAM;QACrC,GAAG,CAAC,IAAI,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACrD,CAAC;AACJ,CAAC;AAED,mEAAmE;AACnE,MAAM,UAAU,aAAa,CAAC,OAAoC,EAAE;IAClE,OAAO;QACL,SAAS,EAAE,KAAK;QAChB,UAAU,EAAE,YAAY;QACxB,aAAa,EAAE,eAAe;QAC9B,IAAI,EAAE,EAAE;QACR,UAAU,EAAE,IAAI,CAAC,UAAU,IAAI,eAAe;KAC/C,CAAC;AACJ,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,mBAAmB,CAAC,IAGnC;IACC,OAAO;QACL,SAAS,EAAE,KAAK;QAChB,UAAU,EAAE,WAAW;QACvB,aAAa,EAAE,uBAAuB;QACtC,IAAI,EAAE;YACJ,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,WAAW,EAAE,IAAI,CAAC,WAAW;SAC9B;QACD,UAAU,EAAE,eAAe;KAC5B,CAAC;AACJ,CAAC;AAED,iFAAiF;AACjF,MAAM,UAAU,YAAY,CAAC,IAK5B;IACC,OAAO;QACL,SAAS,EAAE,KAAK;QAChB,UAAU,EAAE,aAAa;QACzB,aAAa,EAAE,yBAAyB;QACxC,IAAI,EAAE;YACJ,GAAG,EAAE,IAAI,CAAC,GAAG;YACb,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,cAAc,EAAE,IAAI,CAAC,cAAc,IAAI,QAAQ,CAAC,oBAAoB,GAAG,IAAI;SAC5E;QACD,UAAU,EAAE,IAAI,CAAC,UAAU;KAC5B,CAAC;AACJ,CAAC;AAED,+EAA+E;AAC/E,MAAM,UAAU,cAAc,CAAC,IAM9B;IACC,MAAM,IAAI,GAA4B,EAAE,CAAC;IACzC,IAAI,IAAI,CAAC,GAAG,KAAK,SAAS;QAAE,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC;IAChD,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS;QAAE,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;IAC/D,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS;QAAE,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;IACnD,OAAO;QACL,SAAS,EAAE,KAAK;QAChB,UAAU,EAAE,YAAY;QACxB,aAAa,EAAE,gBAAgB;QAC/B,IAAI;QACJ,UAAU,EAAE,IAAI,CAAC,UAAU;QAC3B,GAAG,CAAC,IAAI,CAAC,kBAAkB,KAAK,SAAS;YACvC,CAAC,CAAC,EAAE,kBAAkB,EAAE,IAAI,CAAC,kBAAkB,EAAE;YACjD,CAAC,CAAC,EAAE,CAAC;KACR,CAAC;AACJ,CAAC;AAED,0EAA0E;AAC1E,MAAM,UAAU,WAAW,CAAC,IAI3B;IACC,MAAM,IAAI,GAA4B,EAAE,CAAC;IACzC,IAAI,IAAI,CAAC,GAAG,KAAK,SAAS;QAAE,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC;IAChD,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC;QAAE,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;IAChD,OAAO;QACL,SAAS,EAAE,KAAK;QAChB,UAAU,EAAE,cAAc;QAC1B,aAAa,EAAE,iBAAiB;QAChC,IAAI;QACJ,UAAU,EAAE,IAAI,CAAC,UAAU,IAAI,aAAa;KAC7C,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,iBAAiB,CAAC,IAGjC;IACC,OAAO;QACL,SAAS,EAAE,KAAK;QAChB,UAAU,EAAE,YAAY;QACxB,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,UAAU,EAAE,IAAI,CAAC,UAAU,IAAI,gBAAgB;KAChD,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,mBAAmB,CAAC,IAInC;IACC,OAAO;QACL,SAAS,EAAE,KAAK;QAChB,UAAU,EAAE,cAAc;QAC1B,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,UAAU,EAAE,IAAI,CAAC,UAAU,IAAI,cAAc;QAC7C,GAAG,CAAC,IAAI,CAAC,kBAAkB,KAAK,SAAS;YACvC,CAAC,CAAC,EAAE,kBAAkB,EAAE,IAAI,CAAC,kBAAkB,EAAE;YACjD,CAAC,CAAC,EAAE,CAAC;KACR,CAAC;AACJ,CAAC;AAED,kEAAkE;AAClE,MAAM,UAAU,aAAa,CAAC,IAI7B;IACC,OAAO;QACL,SAAS,EAAE,IAAI;QACf,UAAU,EAAE,OAAO;QACnB,aAAa,EAAE,IAAI,CAAC,aAAa;QACjC,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,UAAU,EAAE,IAAI,CAAC,UAAU;KAC5B,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,WAAW,CAAC,IAK3B;IACC,IAAI,CAAC,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACpD,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;IAC7D,CAAC;IACD,OAAO;QACL,SAAS,EAAE,IAAI,CAAC,SAAS,IAAI,KAAK;QAClC,UAAU,EAAE,UAAU;QACtB,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,GAAG,CAAC,IAAI,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAChE,UAAU,EAAE,IAAI,CAAC,UAAU;KAC5B,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,uBAAuB,CAAC,IAKvC;IACC,MAAM,IAAI,GAA4B,IAAI,CAAC,QAAQ;QACjD,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,CAAC,QAAQ,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE;QACtC,CAAC,CAAC,EAAE,YAAY,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC;IAC1C,OAAO;QACL,SAAS,EAAE,KAAK;QAChB,UAAU,EAAE,mBAAmB;QAC/B,aAAa,EAAE,yBAAyB;QACxC,IAAI;QACJ,UAAU,EAAE,IAAI,CAAC,UAAU,IAAI,cAAc;QAC7C,GAAG,CAAC,IAAI,CAAC,kBAAkB,KAAK,SAAS;YACvC,CAAC,CAAC,EAAE,kBAAkB,EAAE,IAAI,CAAC,kBAAkB,EAAE;YACjD,CAAC,CAAC,EAAE,CAAC;KACR,CAAC;AACJ,CAAC;AAED,wEAAwE;AACxE,EAAE;AACF,oEAAoE;AACpE,mEAAmE;AACnE,6CAA6C;AAE7C,oCAAoC;AACpC,MAAM,CAAC,MAAM,aAAa,GAAiB,YAAY,EAAE,CAAC;AAE1D,6CAA6C;AAC7C,MAAM,CAAC,MAAM,oBAAoB,GAAiB,aAAa,EAAE,CAAC;AAuBlE;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,6BAA6B,CAAC,CAAe;IAC3D,+DAA+D;IAC/D,8CAA8C;IAC9C,MAAM,IAAI,GAAG,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC;IAC1B,MAAM,OAAO,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,OAAO,WAAW,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;IAC1F,OAAO;QACL,IAAI;QACJ,GAAG,CAAC,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvD,GAAG,CAAC,OAAO,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7D,OAAO;KACR,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,sBAAsB,CACpC,UAAsB,EACtB,UAA0B,EAAE;IAE5B,QAAQ,UAAU,EAAE,CAAC;QACnB,KAAK,aAAa;YAChB,OAAO,WAAW,CAAC;gBACjB,IAAI,EAAE,OAAO,CAAC,cAAc,IAAI,EAAE;gBAClC,UAAU,EAAE,aAAa;aAC1B,CAAC,CAAC;QAEL,KAAK,mBAAmB;YACtB,OAAO,aAAa,CAAC;gBACnB,aAAa,EAAE,iBAAiB;gBAChC,IAAI,EAAE,OAAO,CAAC,YAAY,IAAI,EAAE;gBAChC,UAAU,EAAE,mBAAmB;aAChC,CAAC,CAAC;QAEL,KAAK,gBAAgB;YACnB,OAAO,iBAAiB,CAAC;gBACvB,QAAQ,EAAE;oBACR;wBACE,IAAI,EAAE,cAAc;wBACpB,OAAO,EAAE,2DAA2D;qBACrE;iBACF;gBACD,UAAU,EAAE,gBAAgB;aAC7B,CAAC,CAAC;QAEL,KAAK,cAAc,CAAC;QACpB,KAAK,oBAAoB,CAAC;QAC1B,KAAK,sBAAsB,CAAC;QAC5B,KAAK,eAAe,CAAC;QACrB,KAAK,mBAAmB,CAAC;QACzB,KAAK,eAAe,CAAC;QACrB,KAAK,YAAY,CAAC,CAAC,CAAC;YAClB,gEAAgE;YAChE,4DAA4D;YAC5D,6DAA6D;YAC7D,wDAAwD;YACxD,gEAAgE;YAChE,iEAAiE;YACjE,kEAAkE;YAClE,MAAM,YAAY,GAAG,CAAC,OAAO,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;YACpE,MAAM,YAAY,GAAoC,OAAO,CAAC,QAAQ;gBACpE,CAAC,CAAC;oBACE,MAAM,EAAE,mBAAmB;oBAC3B,aAAa,EAAE,mBAAmB;oBAClC,IAAI,EAAE,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,GAAG,EAAE,OAAO,CAAC,OAAO,EAAE;oBAC1D,IAAI,EAAE,+FAA+F;iBACtG;gBACH,CAAC,CAAC,SAAS,CAAC;YAEd,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC5B,OAAO,mBAAmB,CAAC;oBACzB,QAAQ,EAAE,YAAY,CAAC,GAAG,CAAC,6BAA6B,CAAC;oBACzD,UAAU,EAAE,cAAc;oBAC1B,GAAG,CAAC,YAAY;wBACd,CAAC,CAAC;4BACE,kBAAkB,EAAE;gCAClB;oCACE,GAAG,YAAY;oCACf,IAAI,EAAE,+GAA+G;iCACtH;6BACF;yBACF;wBACH,CAAC,CAAC,EAAE,CAAC;iBACR,CAAC,CAAC;YACL,CAAC;YAED,2DAA2D;YAC3D,+DAA+D;YAC/D,6DAA6D;YAC7D,yDAAyD;YACzD,gEAAgE;YAChE,yDAAyD;YACzD,+DAA+D;YAC/D,+DAA+D;YAC/D,gEAAgE;YAChE,iEAAiE;YACjE,UAAU;YACV,EAAE;YACF,gEAAgE;YAChE,+DAA+D;YAC/D,gEAAgE;YAChE,0CAA0C;YAC1C,MAAM,UAAU,GAAwB;gBACtC,MAAM,EAAE,mBAAmB;gBAC3B,aAAa,EAAE,yBAAyB;gBACxC,IAAI,EAAE,OAAO,CAAC,QAAQ;oBACpB,CAAC,CAAC,EAAE,EAAE,EAAE,OAAO,CAAC,QAAQ,EAAE,GAAG,EAAE,OAAO,CAAC,OAAO,EAAE;oBAChD,CAAC,CAAC,EAAE,YAAY,EAAE,IAAI,EAAE,GAAG,EAAE,OAAO,CAAC,OAAO,EAAE;gBAChD,IAAI,EAAE,oGAAoG;aAC3G,CAAC;YACF,MAAM,kBAAkB,GAA0B,CAAC,UAAU,CAAC,CAAC;YAC/D,IAAI,YAAY,EAAE,CAAC;gBACjB,kBAAkB,CAAC,IAAI,CAAC;oBACtB,GAAG,YAAY;oBACf,IAAI,EAAE,uHAAuH;iBAC9H,CAAC,CAAC;YACL,CAAC;YACD,OAAO,cAAc,CAAC;gBACpB,GAAG,EAAE,OAAO,CAAC,OAAO;gBACpB,QAAQ,EAAE,OAAO,CAAC,QAAQ;gBAC1B,IAAI,EAAE,QAAQ;gBACd,UAAU,EAAE,cAAc;gBAC1B,kBAAkB;aACnB,CAAC,CAAC;QACL,CAAC;QAED;YACE,qEAAqE;YACrE,4DAA4D;YAC5D,OAAO,WAAW,CAAC;gBACjB,MAAM,EACJ,oIAAoI;gBACtI,UAAU,EAAE,SAAS;aACtB,CAAC,CAAC;IACP,CAAC;AACH,CAAC"}

package/dist/static-docker.d.ts

@@ -0,0 +1,77 @@
+/**
+ * Multi-stage Dockerfile + Caddyfile generator for static-framework
+ * projects — Vite, Astro (static), Eleventy and friends.
+ *
+ * These frameworks need a build step. Percher's `runtime = "static"`
+ * Caddy path only *serves* pre-built files — it rejects a
+ * `[build].command` outright (STATIC_BUILD_COMMAND_UNSUPPORTED). So a
+ * scaffolded Vite/Astro project can't ride that path as-is. Instead
+ * they ship as `runtime = "docker"`: a Bun stage runs the build, then
+ * the output is served by the same minimal Caddy image the native
+ * static runtime uses — slim image, fast cold start, no server to
+ * configure.
+ *
+ * This is the documented follow-up to FUTURE11 Fas 1 (a builder stage
+ * for the static path) done the only way that works on what Percher
+ * supports today: the user-owned `runtime = "docker"` lane.
+ *
+ * Used by both `bunx percher init` (scaffolds these files when it
+ * detects a static framework) and the bundled `bunx percher init`
+ * templates (astro, vite-react, …), so the CLI and the templates can
+ * never drift — `packages/core/test/static-docker.test.ts` pins the
+ * committed template files to this renderer's output.
+ *
+ * The serve stage mirrors `packages/api/src/pipeline/static-build.ts`
+ * (`buildStaticDockerfile` / `buildStaticCaddyfile`) — same cap-strip
+ * and same `bind 0.0.0.0` IPv4 fix — but lives here independently
+ * because `@percher/core` must not depend on `@percher/api`.
+ */
+/**
+ * Port the Caddy serve stage binds to. 8080 (>= 1024) so Caddy never
+ * needs `cap_net_bind_service` — which matters because the cap-strip
+ * below removes it. Matches the bundled `hugo` template and the
+ * `[web].port` these templates declare.
+ */
+export declare const STATIC_DOCKER_PORT = 8080;
+export interface StaticDockerfileInput {
+    /**
+     * Directory the framework's build command produces, relative to the
+     * project root (e.g. `dist` for Vite/Astro, `_site` for Eleventy).
+     */
+    outputDir: string;
+}
+/**
+ * Render the multi-stage Dockerfile. The build stage runs
+ * `bun install && bun run build`; the serve stage is a minimal Caddy
+ * image with the upstream binary's file capabilities stripped.
+ *
+ * Why the cap-strip: `caddy:2-alpine` ships `/usr/bin/caddy` with
+ * `cap_net_bind_service=+ep`. Percher starts every app container with
+ * `--security-opt no-new-privileges`, which makes `execve` refuse a
+ * binary whose file caps would grant more privilege than the parent —
+ * the result is an `operation not permitted` crash-loop. Copying the
+ * binary onto a plain `alpine` base and running `setcap -r` removes
+ * the caps; Caddy doesn't need them here (it binds :8080).
+ */
+export declare function renderStaticFrameworkDockerfile(input: StaticDockerfileInput): string;
+export interface StaticCaddyfileInput {
+    /**
+     * When true, deep links fall back to `/index.html` so client-side
+     * routers (React Router, Vue Router, …) handle the route instead of
+     * Caddy returning 404. True for SPA frameworks; false for static
+     * site generators that emit a real HTML file per route.
+     */
+    spa: boolean;
+}
+/**
+ * Render the Caddyfile served by the container.
+ *
+ * `bind 0.0.0.0` is load-bearing: Caddy's `:8080` shorthand binds only
+ * to the IPv6 wildcard inside Percher's app-container network
+ * namespace (`bindv6only` is set), but the deployer's health probe
+ * hits `http://127.0.0.1:8080` over IPv4. Without an explicit IPv4
+ * bind the probe gets "connection refused" while Caddy is up — every
+ * deploy then fails health check. Same fix as `static-build.ts`.
+ */
+export declare function renderStaticFrameworkCaddyfile(input: StaticCaddyfileInput): string;
+//# sourceMappingURL=static-docker.d.ts.map

package/dist/static-docker.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"static-docker.d.ts","sourceRoot":"","sources":["../src/static-docker.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAEH;;;;;GAKG;AACH,eAAO,MAAM,kBAAkB,OAAO,CAAC;AAEvC,MAAM,WAAW,qBAAqB;IACpC;;;OAGG;IACH,SAAS,EAAE,MAAM,CAAC;CACnB;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,+BAA+B,CAAC,KAAK,EAAE,qBAAqB,GAAG,MAAM,CAoCpF;AAED,MAAM,WAAW,oBAAoB;IACnC;;;;;OAKG;IACH,GAAG,EAAE,OAAO,CAAC;CACd;AAED;;;;;;;;;GASG;AACH,wBAAgB,8BAA8B,CAAC,KAAK,EAAE,oBAAoB,GAAG,MAAM,CAQlF"}

package/dist/static-docker.js

@@ -0,0 +1,105 @@
+/**
+ * Multi-stage Dockerfile + Caddyfile generator for static-framework
+ * projects — Vite, Astro (static), Eleventy and friends.
+ *
+ * These frameworks need a build step. Percher's `runtime = "static"`
+ * Caddy path only *serves* pre-built files — it rejects a
+ * `[build].command` outright (STATIC_BUILD_COMMAND_UNSUPPORTED). So a
+ * scaffolded Vite/Astro project can't ride that path as-is. Instead
+ * they ship as `runtime = "docker"`: a Bun stage runs the build, then
+ * the output is served by the same minimal Caddy image the native
+ * static runtime uses — slim image, fast cold start, no server to
+ * configure.
+ *
+ * This is the documented follow-up to FUTURE11 Fas 1 (a builder stage
+ * for the static path) done the only way that works on what Percher
+ * supports today: the user-owned `runtime = "docker"` lane.
+ *
+ * Used by both `bunx percher init` (scaffolds these files when it
+ * detects a static framework) and the bundled `bunx percher init`
+ * templates (astro, vite-react, …), so the CLI and the templates can
+ * never drift — `packages/core/test/static-docker.test.ts` pins the
+ * committed template files to this renderer's output.
+ *
+ * The serve stage mirrors `packages/api/src/pipeline/static-build.ts`
+ * (`buildStaticDockerfile` / `buildStaticCaddyfile`) — same cap-strip
+ * and same `bind 0.0.0.0` IPv4 fix — but lives here independently
+ * because `@percher/core` must not depend on `@percher/api`.
+ */
+/**
+ * Port the Caddy serve stage binds to. 8080 (>= 1024) so Caddy never
+ * needs `cap_net_bind_service` — which matters because the cap-strip
+ * below removes it. Matches the bundled `hugo` template and the
+ * `[web].port` these templates declare.
+ */
+export const STATIC_DOCKER_PORT = 8080;
+/**
+ * Render the multi-stage Dockerfile. The build stage runs
+ * `bun install && bun run build`; the serve stage is a minimal Caddy
+ * image with the upstream binary's file capabilities stripped.
+ *
+ * Why the cap-strip: `caddy:2-alpine` ships `/usr/bin/caddy` with
+ * `cap_net_bind_service=+ep`. Percher starts every app container with
+ * `--security-opt no-new-privileges`, which makes `execve` refuse a
+ * binary whose file caps would grant more privilege than the parent —
+ * the result is an `operation not permitted` crash-loop. Copying the
+ * binary onto a plain `alpine` base and running `setcap -r` removes
+ * the caps; Caddy doesn't need them here (it binds :8080).
+ */
+export function renderStaticFrameworkDockerfile(input) {
+    return `# Multi-stage build: a Bun stage compiles the static bundle, then a
+# minimal Caddy image serves it. This project uses runtime = "docker"
+# (not "static") because Percher's static runtime serves pre-built
+# files only — it does not run a build command. Generated by Percher;
+# safe to edit and own.
+
+# --- Build stage: install deps and build the static bundle -----------
+FROM oven/bun:1-alpine AS build
+WORKDIR /app
+COPY . .
+RUN bun install && bun run build
+
+# --- Serve stage: minimal Caddy image --------------------------------
+# caddy:2-alpine ships /usr/bin/caddy with cap_net_bind_service file
+# caps. Percher runs every container with --security-opt
+# no-new-privileges, which makes execve refuse a cap-bearing binary
+# (an "operation not permitted" crash-loop). Copy Caddy onto a plain
+# alpine base and strip the caps with setcap -r — Caddy never needs
+# the cap here, it listens on :${STATIC_DOCKER_PORT} (>= 1024).
+FROM caddy:2-alpine AS caddy-source
+FROM alpine:3.21
+COPY --from=caddy-source /usr/bin/caddy /usr/bin/caddy
+RUN apk add --no-cache libcap \\
+ && setcap -r /usr/bin/caddy \\
+ && apk del libcap \\
+ && rm -rf /var/cache/apk/*
+COPY Caddyfile /etc/caddy/Caddyfile
+COPY --from=build /app/${input.outputDir} /srv
+# HOME points at the writable tmpfs so non-root Caddy can persist its
+# XDG state (storage-clean lock, config autosave) under Percher's
+# read-only root filesystem.
+ENV HOME=/tmp
+EXPOSE ${STATIC_DOCKER_PORT}
+CMD ["caddy", "run", "--config", "/etc/caddy/Caddyfile", "--adapter", "caddyfile"]
+`;
+}
+/**
+ * Render the Caddyfile served by the container.
+ *
+ * `bind 0.0.0.0` is load-bearing: Caddy's `:8080` shorthand binds only
+ * to the IPv6 wildcard inside Percher's app-container network
+ * namespace (`bindv6only` is set), but the deployer's health probe
+ * hits `http://127.0.0.1:8080` over IPv4. Without an explicit IPv4
+ * bind the probe gets "connection refused" while Caddy is up — every
+ * deploy then fails health check. Same fix as `static-build.ts`.
+ */
+export function renderStaticFrameworkCaddyfile(input) {
+    const directives = ["bind 0.0.0.0", "root * /srv", "encode gzip zstd"];
+    if (input.spa) {
+        directives.push("try_files {path} /index.html");
+    }
+    directives.push("file_server");
+    const body = directives.map((d) => `\t${d}`).join("\n");
+    return `:${STATIC_DOCKER_PORT} {\n${body}\n}\n`;
+}
+//# sourceMappingURL=static-docker.js.map

package/dist/static-docker.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"static-docker.js","sourceRoot":"","sources":["../src/static-docker.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAEH;;;;;GAKG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,IAAI,CAAC;AAUvC;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,+BAA+B,CAAC,KAA4B;IAC1E,OAAO;;;;;;;;;;;;;;;;;;iCAkBwB,kBAAkB;;;;;;;;;yBAS1B,KAAK,CAAC,SAAS;;;;;SAK/B,kBAAkB;;CAE1B,CAAC;AACF,CAAC;AAYD;;;;;;;;;GASG;AACH,MAAM,UAAU,8BAA8B,CAAC,KAA2B;IACxE,MAAM,UAAU,GAAG,CAAC,cAAc,EAAE,aAAa,EAAE,kBAAkB,CAAC,CAAC;IACvE,IAAI,KAAK,CAAC,GAAG,EAAE,CAAC;QACd,UAAU,CAAC,IAAI,CAAC,8BAA8B,CAAC,CAAC;IAClD,CAAC;IACD,UAAU,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IAC/B,MAAM,IAAI,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACxD,OAAO,IAAI,kBAAkB,OAAO,IAAI,OAAO,CAAC;AAClD,CAAC"}

package/dist/structured-error-codes.d.ts

@@ -0,0 +1,30 @@
+import type { ClassifiedError } from "./error-classifier";
+/**
+ * Phase 4 of the publish-resilience plan — CLI-side mapping from
+ * the canonical `DeployErrorCode` strings (defined server-side in
+ * `@percher/api/src/worker/error-codes.ts`) to the
+ * `ClassifiedError` shape the CLI's publish-failure renderer
+ * already consumes.
+ *
+ * Why this lives in @percher/core instead of @percher/client: the
+ * client surfaces the raw `errorCode` string on `Deployment` and
+ * stays unopinionated; the core package owns the rendering of
+ * publish failures and is the right place to decide "given this
+ * canonical code, what title/explanation/suggestion does the user
+ * see". The CLI's `publish-failure.ts` calls into this module
+ * BEFORE the regex-based `classifyError` so the structured code
+ * always wins when present.
+ *
+ * Set parity: the strings here MUST match the ones in the API's
+ * `DEPLOY_ERROR_CODES` const. Adding a new code requires updating
+ * both files. Forward-compat: an unknown code returns null, the
+ * CLI falls back to the regex classifier, no breakage.
+ */
+export type DeployErrorCode = "WORKER_UNAVAILABLE" | "WORKER_UNAVAILABLE_PERSISTENT" | "BUILD_TIMEOUT" | "BUILD_FAILED" | "WORKER_ERROR" | "DEPLOY_STALLED";
+/**
+ * Map a canonical Phase 4 error code to a {@link ClassifiedError}.
+ * Returns null for NULL / unknown codes so the caller can fall back
+ * to the regex-based `classifyError`.
+ */
+export declare function classifyByErrorCode(code: string | null | undefined, rawMessage: string): ClassifiedError | null;
+//# sourceMappingURL=structured-error-codes.d.ts.map

package/dist/structured-error-codes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"structured-error-codes.d.ts","sourceRoot":"","sources":["../src/structured-error-codes.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAc,MAAM,oBAAoB,CAAC;AAEtE;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,MAAM,MAAM,eAAe,GACvB,oBAAoB,GACpB,+BAA+B,GAC/B,eAAe,GACf,cAAc,GACd,cAAc,GACd,gBAAgB,CAAC;AAoFrB;;;;GAIG;AACH,wBAAgB,mBAAmB,CACjC,IAAI,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,EAC/B,UAAU,EAAE,MAAM,GACjB,eAAe,GAAG,IAAI,CAcxB"}

package/dist/structured-error-codes.js

@@ -0,0 +1,86 @@
+const MAPPINGS = {
+    WORKER_UNAVAILABLE: {
+        errorClass: "infra_unavailable",
+        phase: "infra",
+        cause: "worker_fetch_failed",
+        title: "Build worker is unreachable",
+        explanation: (raw) => raw
+            ? `The Percher build worker did not respond in time: ${trimMessage(raw)}. This is a platform-side issue, not your code.`
+            : "The Percher build worker did not respond in time. This is a platform-side issue, not your code.",
+        suggestion: "Wait 30 seconds and run `percher publish` again. If retry #2 also fails, pause 5 minutes before the next attempt — back-to-back retries during a partial outage just waste your time. After 3 spaced-out retries, check status.percher.app or contact support. Your build never started.",
+    },
+    WORKER_UNAVAILABLE_PERSISTENT: {
+        errorClass: "infra_unavailable",
+        phase: "infra",
+        cause: "worker_circuit_breaker_open",
+        title: "Build worker is in a crash loop",
+        explanation: () => "The Percher build worker has failed repeatedly in the last minute and the platform's circuit breaker has flipped open. Retrying immediately would just queue more failures.",
+        suggestion: "Wait 2-3 minutes for the platform to recover, then retry. If it persists past 5 minutes check status.percher.app or contact support — this is a platform incident, not your code.",
+    },
+    BUILD_TIMEOUT: {
+        errorClass: "build_failed",
+        phase: "build",
+        cause: "build_timeout",
+        title: "Build timed out",
+        explanation: () => "The build ran longer than the 10-minute platform limit and was aborted.",
+        suggestion: "Common causes: a slow `postinstall` hook, very large dependency tree, or a Dockerfile that pulls a huge base image. Try `bun install` locally and check what's slow. If it's legitimately a heavy build, contact support to discuss raising the limit for your account.",
+    },
+    BUILD_FAILED: {
+        errorClass: "build_failed",
+        phase: "build",
+        cause: "build_nonzero_exit",
+        title: "Build failed",
+        explanation: (raw) => raw
+            ? `The build process returned a non-zero exit code: ${trimMessage(raw)}. Read the build log below for the exact error.`
+            : "The build process returned a non-zero exit code. Read the build log below for the exact error.",
+        suggestion: "Run your build locally to reproduce: `bun install && bun run build`. The error in the build log usually points to a missing dependency, a TypeScript/syntax error, or a misconfigured framework setting.",
+    },
+    WORKER_ERROR: {
+        errorClass: "infra_unavailable",
+        phase: "infra",
+        cause: "worker_internal_error",
+        title: "Platform error inside the build worker",
+        explanation: (raw) => raw
+            ? `The build worker hit an internal error: ${trimMessage(raw)}. This is a Percher bug, not your code.`
+            : "The build worker hit an internal error. This is a Percher bug, not your code.",
+        suggestion: "Retry once — transient platform errors usually clear within a minute. If it repeats, please report it: include the deploy ID and we'll investigate. Your account is not at fault.",
+    },
+    DEPLOY_STALLED: {
+        errorClass: "infra_unavailable",
+        phase: "infra",
+        cause: "deploy_stalled",
+        title: "Deploy stalled",
+        explanation: () => "The platform abandoned this deploy — likely because the API or build worker restarted mid-build. Your code is fine; the build never finished.",
+        suggestion: "Run `percher publish` again. The new deploy will start fresh. If you see this repeatedly across multiple publishes, check status.percher.app — it implies a recurring platform issue.",
+    },
+};
+/**
+ * Map a canonical Phase 4 error code to a {@link ClassifiedError}.
+ * Returns null for NULL / unknown codes so the caller can fall back
+ * to the regex-based `classifyError`.
+ */
+export function classifyByErrorCode(code, rawMessage) {
+    if (!code)
+        return null;
+    const mapping = MAPPINGS[code];
+    if (!mapping)
+        return null;
+    return {
+        title: mapping.title,
+        explanation: mapping.explanation(rawMessage),
+        suggestion: mapping.suggestion,
+        errorClass: mapping.errorClass,
+        phase: mapping.phase,
+        cause: mapping.cause,
+        relevantFiles: [],
+        missingEnvVars: [],
+    };
+}
+function trimMessage(raw) {
+    // Keep the first line + truncate. The CLI already shows the
+    // full build-log tail below; this is just enough context to
+    // explain WHY the platform-side classifier picked this code.
+    const firstLine = raw.split("\n")[0] ?? "";
+    return firstLine.length > 200 ? `${firstLine.slice(0, 200)}…` : firstLine;
+}
+//# sourceMappingURL=structured-error-codes.js.map

package/dist/structured-error-codes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"structured-error-codes.js","sourceRoot":"","sources":["../src/structured-error-codes.ts"],"names":[],"mappings":"AA8CA,MAAM,QAAQ,GAAyC;IACrD,kBAAkB,EAAE;QAClB,UAAU,EAAE,mBAAmB;QAC/B,KAAK,EAAE,OAAO;QACd,KAAK,EAAE,qBAAqB;QAC5B,KAAK,EAAE,6BAA6B;QACpC,WAAW,EAAE,CAAC,GAAG,EAAE,EAAE,CACnB,GAAG;YACD,CAAC,CAAC,qDAAqD,WAAW,CAAC,GAAG,CAAC,iDAAiD;YACxH,CAAC,CAAC,iGAAiG;QACvG,UAAU,EACR,0RAA0R;KAC7R;IACD,6BAA6B,EAAE;QAC7B,UAAU,EAAE,mBAAmB;QAC/B,KAAK,EAAE,OAAO;QACd,KAAK,EAAE,6BAA6B;QACpC,KAAK,EAAE,iCAAiC;QACxC,WAAW,EAAE,GAAG,EAAE,CAChB,6KAA6K;QAC/K,UAAU,EACR,mLAAmL;KACtL;IACD,aAAa,EAAE;QACb,UAAU,EAAE,cAAc;QAC1B,KAAK,EAAE,OAAO;QACd,KAAK,EAAE,eAAe;QACtB,KAAK,EAAE,iBAAiB;QACxB,WAAW,EAAE,GAAG,EAAE,CAAC,yEAAyE;QAC5F,UAAU,EACR,yQAAyQ;KAC5Q;IACD,YAAY,EAAE;QACZ,UAAU,EAAE,cAAc;QAC1B,KAAK,EAAE,OAAO;QACd,KAAK,EAAE,oBAAoB;QAC3B,KAAK,EAAE,cAAc;QACrB,WAAW,EAAE,CAAC,GAAG,EAAE,EAAE,CACnB,GAAG;YACD,CAAC,CAAC,oDAAoD,WAAW,CAAC,GAAG,CAAC,iDAAiD;YACvH,CAAC,CAAC,gGAAgG;QACtG,UAAU,EACR,0MAA0M;KAC7M;IACD,YAAY,EAAE;QACZ,UAAU,EAAE,mBAAmB;QAC/B,KAAK,EAAE,OAAO;QACd,KAAK,EAAE,uBAAuB;QAC9B,KAAK,EAAE,wCAAwC;QAC/C,WAAW,EAAE,CAAC,GAAG,EAAE,EAAE,CACnB,GAAG;YACD,CAAC,CAAC,2CAA2C,WAAW,CAAC,GAAG,CAAC,yCAAyC;YACtG,CAAC,CAAC,+EAA+E;QACrF,UAAU,EACR,mLAAmL;KACtL;IACD,cAAc,EAAE;QACd,UAAU,EAAE,mBAAmB;QAC/B,KAAK,EAAE,OAAO;QACd,KAAK,EAAE,gBAAgB;QACvB,KAAK,EAAE,gBAAgB;QACvB,WAAW,EAAE,GAAG,EAAE,CAChB,+IAA+I;QACjJ,UAAU,EACR,uLAAuL;KAC1L;CACF,CAAC;AAEF;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CACjC,IAA+B,EAC/B,UAAkB;IAElB,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IACvB,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAuB,CAAC,CAAC;IAClD,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAC1B,OAAO;QACL,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,WAAW,EAAE,OAAO,CAAC,WAAW,CAAC,UAAU,CAAC;QAC5C,UAAU,EAAE,OAAO,CAAC,UAAU;QAC9B,UAAU,EAAE,OAAO,CAAC,UAAU;QAC9B,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,aAAa,EAAE,EAAE;QACjB,cAAc,EAAE,EAAE;KACnB,CAAC;AACJ,CAAC;AAED,SAAS,WAAW,CAAC,GAAW;IAC9B,4DAA4D;IAC5D,4DAA4D;IAC5D,6DAA6D;IAC7D,MAAM,SAAS,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAC3C,OAAO,SAAS,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;AAC5E,CAAC"}

package/dist/tarball.d.ts

@@ -12,6 +12,17 @@ export interface TarballResult {
         path: string;
         size: number;
     }>;
+    /**
+     * Phase 7.8 follow-up — deterministic content-hash of the bundle.
+     * Used by the CLI's cache-probe call so identical sources hash to
+     * the same value across runs. Distinct from the gzipped-bytes hash
+     * the API computes on upload (which carries embedded mtimes from
+     * tar/gzip headers and therefore *cannot* be deterministic). The
+     * CLI sends this value as the `X-Tarball-Hash` header on the
+     * upload; the API stores it on `deployments.tarball_hash` so a
+     * subsequent probe matches.
+     */
+    contentHash: string;
 }
 export declare function createTarball(options: TarballOptions): Promise<TarballResult>;
 //# sourceMappingURL=tarball.d.ts.map

package/dist/tarball.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"tarball.d.ts","sourceRoot":"","sources":["../src/tarball.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAInD,MAAM,WAAW,cAAc;IAC7B,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,aAAa,CAAC;IACtB,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;CACxB;AAED,MAAM,WAAW,aAAa;IAC5B,MAAM,EAAE,cAAc,CAAC,UAAU,CAAC,CAAC;IACnC,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CACjD;AAiCD,wBAAsB,aAAa,CAAC,OAAO,EAAE,cAAc,GAAG,OAAO,CAAC,aAAa,CAAC,CA2CnF"}
+{"version":3,"file":"tarball.d.ts","sourceRoot":"","sources":["../src/tarball.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAInD,MAAM,WAAW,cAAc;IAC7B,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,aAAa,CAAC;IACtB,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;CACxB;AAED,MAAM,WAAW,aAAa;IAC5B,MAAM,EAAE,cAAc,CAAC,UAAU,CAAC,CAAC;IACnC,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAChD;;;;;;;;;OASG;IACH,WAAW,EAAE,MAAM,CAAC;CACrB;AAiCD,wBAAsB,aAAa,CAAC,OAAO,EAAE,cAAc,GAAG,OAAO,CAAC,aAAa,CAAC,CAgEnF"}

package/dist/tarball.js

@@ -1,4 +1,5 @@
-import { existsSync, readFileSync, readdirSync, statSync } from "node:fs";
+import { createHash } from "node:crypto";
+import { existsSync, readdirSync, readFileSync, statSync } from "node:fs";
 import { join, relative, sep } from "node:path";
 import { Readable } from "node:stream";
 import { createGzip } from "node:zlib";
@@ -45,18 +46,34 @@ export async function createTarball(options) {
     }
     if (options.extraIgnore)
         ig.add(options.extraIgnore);
-    const files = [];
+    // Sorted entries — required for the deterministic content-hash
+    // below. Without this, readdirSync's platform-dependent order
+    // produces a different hash on every run even for unchanged
+    // sources, and cache-probe never matches. Codex P2, 2026-05-08.
+    const fileBuffers = [];
     for (const rel of walk(options.cwd, options.cwd, ig)) {
-        const stats = statSync(join(options.cwd, rel));
-        files.push({ path: rel, size: stats.size });
+        const data = readFileSync(join(options.cwd, rel));
+        fileBuffers.push({ path: rel, size: data.length, data });
     }
-    const totalBytes = files.reduce((sum, f) => sum + f.size, 0);
+    fileBuffers.sort((a, b) => (a.path < b.path ? -1 : a.path > b.path ? 1 : 0));
+    const totalBytes = fileBuffers.reduce((sum, f) => sum + f.size, 0);
+    // Deterministic content-hash: SHA-256 over a canonical encoding of
+    // every file's path + bytes, in sorted order. The encoding uses
+    // length-prefixed sections so a path containing a delimiter can't
+    // collide with a longer/shorter path of the same prefix.
+    const contentHasher = createHash("sha256");
+    for (const f of fileBuffers) {
+        contentHasher.update(`PATH:${f.path.length}:${f.path}\n`);
+        contentHasher.update(`SIZE:${f.size}\n`);
+        contentHasher.update(f.data);
+        contentHasher.update("\n");
+    }
+    const contentHash = contentHasher.digest("hex");
     const pack = tarPack();
     (async () => {
-        for (const file of files) {
-            const data = readFileSync(join(options.cwd, file.path));
+        for (const file of fileBuffers) {
             await new Promise((resolve, reject) => {
-                pack.entry({ name: file.path, size: data.length }, data, (err) => err ? reject(err) : resolve());
+                pack.entry({ name: file.path, size: file.data.length }, file.data, (err) => err ? reject(err) : resolve());
             });
         }
         pack.finalize();
@@ -64,12 +81,16 @@ export async function createTarball(options) {
     const gzip = createGzip();
     const nodeStream = pack.pipe(gzip);
     const webStream = Readable.toWeb(nodeStream);
-    const topFiles = [...files].sort((a, b) => b.size - a.size).slice(0, 5);
+    const topFiles = [...fileBuffers]
+        .sort((a, b) => b.size - a.size)
+        .slice(0, 5)
+        .map((f) => ({ path: f.path, size: f.size }));
     return {
         stream: webStream,
         bytes: totalBytes,
-        fileCount: files.length,
+        fileCount: fileBuffers.length,
         topFiles,
+        contentHash,
     };
 }
 //# sourceMappingURL=tarball.js.map