@percher/core 0.4.0 → 0.4.2

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AACA,OAAO,EACL,gBAAgB,GAGjB,MAAM,UAAU,CAAC;AAClB,OAAO,EAAE,eAAe,EAA0B,MAAM,UAAU,CAAC;AACnE,OAAO,EAAE,aAAa,EAA2C,MAAM,WAAW,CAAC;AACnF,OAAO,EACL,oBAAoB,GAGrB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,sBAAsB,EAAE,MAAM,YAAY,CAAC;AACpD,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAErD,OAAO,EAAE,MAAM,EAAe,MAAM,mBAAmB,CAAC;AACxD,OAAO,EACL,MAAM,EACN,iBAAiB,EAIjB,aAAa,GACd,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,aAAa,EACb,aAAa,EACb,wBAAwB,EACxB,wBAAwB,GAIzB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,KAAK,EAAE,gBAAgB,EAAmB,MAAM,kBAAkB,CAAC;AAC5E,OAAO,EAAE,IAAI,EAAE,eAAe,EAAmC,MAAM,iBAAiB,CAAC;AACzF,OAAO,EACL,MAAM,EACN,QAAQ,EACR,OAAO,EACP,iBAAiB,EACjB,mBAAmB,EACnB,kBAAkB,GACnB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,IAAI,EAAE,eAAe,EAAkB,MAAM,iBAAiB,CAAC;AACxE,OAAO,EAAE,SAAS,EAAE,oBAAoB,EAAuB,MAAM,sBAAsB,CAAC;AAC5F,OAAO,EAAE,IAAI,EAAE,eAAe,EAAkB,MAAM,iBAAiB,CAAC;AACxE,OAAO,EACL,SAAS,EACT,oBAAoB,GAGrB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,IAAI,EAAE,eAAe,EAAmC,MAAM,iBAAiB,CAAC;AACzF,OAAO,EACL,OAAO,EACP,kBAAkB,GAKnB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,aAAa,EACb,wBAAwB,GAGzB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,QAAQ,EACR,mBAAmB,GAEpB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,SAAS,EACT,oBAAoB,GAGrB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,aAAa,GAId,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAaL,aAAa,EACb,oBAAoB,EACpB,WAAW,EACX,cAAc,EACd,WAAW,EACX,iBAAiB,EACjB,mBAAmB,EACnB,sBAAsB,EACtB,uBAAuB,EACvB,aAAa,EACb,YAAY,EACZ,aAAa,EACb,YAAY,GACb,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,cAAc,EACd,yBAAyB,GAG1B,MAAM,4BAA4B,CAAC;AACpC,OAAO,EACL,MAAM,EACN,iBAAiB,GAGlB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,QAAQ,EACR,mBAAmB,GAGpB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,QAAQ,EACR,mBAAmB,GAEpB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,WAAW,EACX,sBAAsB,EAEtB,OAAO,EACP,kBAAkB,GAInB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,WAAW,EACX,sBAAsB,EAEtB,cAAc,EACd,yBAAyB,GAG1B,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,GAAG,EACH,cAAc,GAGf,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,MAAM,EACN,iBAAiB,GAOlB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,GAAG,EAAE,cAAc,EAAoC,MAAM,gBAAgB,CAAC;AACvF,OAAO,EAAE,IAAI,EAAE,eAAe,EAAmC,MAAM,iBAAiB,CAAC;AACzF,OAAO,EACL,UAAU,EACV,qBAAqB,GAGtB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,QAAQ,EACR,mBAAmB,GAGpB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,QAAQ,EACR,mBAAmB,GAIpB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,cAAc,EACd,yBAAyB,EACzB,aAAa,EACb,wBAAwB,GAKzB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,MAAM,EACN,iBAAiB,GAGlB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,SAAS,EACT,YAAY,EACZ,UAAU,EACV,YAAY,EACZ,oBAAoB,EACpB,uBAAuB,EACvB,qBAAqB,EACrB,uBAAuB,GAKxB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,MAAM,EACN,iBAAiB,GAElB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,SAAS,EACT,iBAAiB,GAElB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,aAAa,EACb,iBAAiB,GAGlB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EACL,aAAa,EACb,wBAAwB,EAGxB,kBAAkB,EAClB,6BAA6B,GAG9B,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,QAAQ,EACR,mBAAmB,GAGpB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,aAAa,EAAqC,MAAM,WAAW,CAAC;AAE7E,OAAO,EAAE,aAAa,EAAE,iBAAiB,EAAE,MAAM,4BAA4B,CAAC;AAC9E,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,MAAM,CAAC;AACjD,OAAO,EACL,aAAa,EACb,oBAAoB,EACpB,mBAAmB,EACnB,gBAAgB,EAChB,gBAAgB,GAOjB,MAAM,aAAa,CAAC;AAErB,OAAO,EACL,YAAY,EACZ,cAAc,EACd,0BAA0B,GAE3B,MAAM,gBAAgB,CAAC;AAExB,OAAO,EACL,YAAY,EACZ,QAAQ,EACR,aAAa,EACb,sBAAsB,EACtB,WAAW,GAIZ,MAAM,SAAS,CAAC;AAEjB,OAAO,EACL,cAAc,EACd,aAAa,EACb,aAAa,EACb,aAAa,EACb,yBAAyB,EACzB,wBAAwB,EACxB,wBAAwB,EACxB,wBAAwB,GAKzB,MAAM,qBAAqB,CAAC;AAE7B,OAAO,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,sBAAsB,EAAE,MAAM,YAAY,CAAC;AACpD,OAAO,EAML,aAAa,EACb,wBAAwB,EACxB,sBAAsB,EACtB,iCAAiC,EACjC,aAAa,EACb,wBAAwB,GACzB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAEL,oBAAoB,EACpB,+BAA+B,GAChC,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EACL,cAAc,EACd,yBAAyB,EACzB,aAAa,EACb,wBAAwB,EACxB,aAAa,EACb,wBAAwB,EACxB,aAAa,EACb,wBAAwB,GAKzB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAQL,UAAU,EACV,qBAAqB,EACrB,WAAW,EACX,sBAAsB,EACtB,aAAa,EACb,wBAAwB,GACzB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAGL,YAAY,EACZ,uBAAuB,GACxB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAGL,WAAW,EACX,sBAAsB,GACvB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAKL,aAAa,EACb,wBAAwB,EACxB,cAAc,EACd,yBAAyB,GAC1B,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAGL,MAAM,EACN,iBAAiB,GAClB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAuB,SAAS,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AAC5F,OAAO,EAAmC,IAAI,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AACzF,OAAO,EAGL,UAAU,EACV,qBAAqB,GACtB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAEL,SAAS,EACT,iBAAiB,GAClB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAIL,cAAc,EACd,yBAAyB,EACzB,WAAW,EACX,sBAAsB,GACvB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAoC,GAAG,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AACvF,OAAO,EAGL,QAAQ,EACR,mBAAmB,GACpB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAOL,MAAM,EACN,iBAAiB,GAClB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAKL,SAAS,EACT,oBAAoB,EACpB,UAAU,EACV,qBAAqB,EACrB,YAAY,EACZ,uBAAuB,EACvB,YAAY,EACZ,uBAAuB,GACxB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,OAAO,EACP,kBAAkB,EAClB,MAAM,EACN,iBAAiB,EACjB,QAAQ,EACR,mBAAmB,GACpB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAGL,SAAS,EACT,iBAAiB,GAClB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAKL,cAAc,EACd,yBAAyB,EACzB,mBAAmB,EACnB,8BAA8B,GAC/B,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAGL,QAAQ,EACR,mBAAmB,GACpB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAKL,aAAa,EACb,wBAAwB,EACxB,kBAAkB,EAClB,6BAA6B,GAC9B,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAGL,iBAAiB,EACjB,aAAa,GACd,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAmC,IAAI,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AACzF,OAAO,EAIL,QAAQ,EACR,mBAAmB,GACpB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAmB,KAAK,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AAC5E,OAAO,EAAkB,IAAI,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AACxE,OAAO,EAGL,GAAG,EACH,cAAc,GACf,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAKL,eAAe,EACf,0BAA0B,EAC1B,iBAAiB,GAMlB,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAKL,uBAAuB,GAMxB,MAAM,iCAAiC,CAAC;AACzC,OAAO,EAIL,qBAAqB,EACrB,gCAAgC,EAChC,oBAAoB,GACrB,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EAEL,yBAAyB,EACzB,uBAAuB,EACvB,uBAAuB,GACxB,MAAM,qCAAqC,CAAC;AAC7C,OAAO,EAKL,kBAAkB,GACnB,MAAM,iCAAiC,CAAC;AACzC,OAAO,EACL,cAAc,EACd,kBAAkB,EAQlB,mBAAmB,EACnB,eAAe,GAChB,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EAAkB,IAAI,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AACxE,OAAO,EAKL,OAAO,EACP,kBAAkB,GACnB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAmC,IAAI,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AACzF,OAAO,EAEL,QAAQ,EACR,mBAAmB,GACpB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAGL,MAAM,EACN,iBAAiB,GAClB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAGL,SAAS,EACT,oBAAoB,GACrB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAGL,cAAc,EACd,yBAAyB,GAC1B,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAGL,WAAW,EACX,sBAAsB,EAGtB,OAAO,EACP,kBAAkB,GACnB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAEL,MAAM,EACN,iBAAiB,GAClB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAEL,QAAQ,EACR,mBAAmB,GACpB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAIL,aAAa,EACb,wBAAwB,EACxB,cAAc,EACd,yBAAyB,EACzB,WAAW,EACX,sBAAsB,EAKtB,WAAW,EACX,sBAAsB,EACtB,SAAS,EACT,oBAAoB,EACpB,WAAW,EACX,sBAAsB,EACtB,YAAY,EACZ,uBAAuB,GACxB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,aAAa,EAIb,MAAM,EACN,iBAAiB,GAClB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAOL,cAAc,EACd,yBAAyB,EACzB,gBAAgB,EAChB,2BAA2B,EAC3B,kBAAkB,EAClB,6BAA6B,EAC7B,eAAe,EACf,0BAA0B,EAC1B,gBAAgB,EAChB,2BAA2B,EAC3B,iBAAiB,EACjB,4BAA4B,GAC7B,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAGL,SAAS,EACT,oBAAoB,GACrB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAGL,QAAQ,EACR,mBAAmB,GACpB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAGL,aAAa,EACb,wBAAwB,GACzB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAe,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAExD,OAAO,EAA0B,eAAe,EAAE,MAAM,UAAU,CAAC;AACnE,OAAO,EAGL,oBAAoB,GACrB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAEL,aAAa,GAGd,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,gBAAgB,GAGjB,MAAM,UAAU,CAAC;AAClB,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,EACL,cAAc,EACd,YAAY,EAEZ,0BAA0B,GAC3B,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,sBAAsB,EACtB,WAAW,EACX,aAAa,EACb,uBAAuB,EACvB,YAAY,EACZ,QAAQ,GAIT,MAAM,SAAS,CAAC;AACjB,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,MAAM,CAAC;AACjD,OAAO,EAML,oBAAoB,EACpB,aAAa,EAKb,WAAW,EACX,mBAAmB,EACnB,cAAc,EACd,WAAW,EACX,iBAAiB,EACjB,mBAAmB,EACnB,sBAAsB,EACtB,uBAAuB,EACvB,aAAa,EACb,YAAY,EACZ,aAAa,EACb,YAAY,GAIb,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,8BAA8B,EAC9B,+BAA+B,EAC/B,kBAAkB,GAGnB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,aAAa,EAA2C,MAAM,WAAW,CAAC;AACnF,OAAO,EACL,mBAAmB,EACnB,oBAAoB,EACpB,aAAa,EAGb,gBAAgB,EAChB,gBAAgB,GAKjB,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AACzD,OAAO,EAAE,iBAAiB,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC;AAC9E,OAAO,EAAE,aAAa,EAAqC,MAAM,WAAW,CAAC"}

package/dist/plans.d.ts

@@ -1,9 +1,38 @@
 export type PlanId = "free" | "starter" | "maker" | "pro";
+/**
+ * Disk-pool symmetry (Phase 1) — the disk footprint (MB) charged for
+ * a PocketBase app that has no measured volume sample yet. A new PB
+ * volume starts near-empty; this is the accounting placeholder until
+ * the PB-volume sampler records a real size. Same value across all
+ * tiers — it's a property of an empty PB volume, not of the plan.
+ * Pool accounting then tracks the measured size; the tier
+ * `diskPoolMb` is the real ceiling. See `PlanLimits.storageMb`.
+ */
+export declare const PB_INITIAL_FOOTPRINT_MB = 256;
 export interface PlanLimits {
+    /**
+     * Hard cap on app count per account, enforced at creation. Acts as
+     * anti-abuse backstop; pool dimensions are the real resource
+     * constraint. Enforcement lives in `packages/api/src/routes/apps.ts`
+     * (responds 403 `APP_LIMIT_REACHED` when the cap is hit).
+     */
     apps: number;
     deploysPerMonth: number | "unlimited";
     deploysPerHour: number;
+    /**
+     * Per-app default RAM allocation when the user doesn't specify
+     * `[resources].memory` in percher.toml. Pool-style enforcement
+     * (FUTURE20 Fas 3) replaces the old "this is a hard ceiling"
+     * semantics: a user can deploy an app of any size as long as
+     * Σ(allocated across their apps) ≤ `ramPoolMb`. Format mirrors
+     * the historical "256mb" / "1gb" strings parsed by `parseMemory`.
+     */
     memory: string;
+    /**
+     * Per-app default vCPU allocation when the user doesn't specify
+     * `[resources].cpu`. Same pool semantics as `memory` — sum across
+     * user's apps must fit `vcpuPool`.
+     */
     cpu: number;
     pids: number;
     activePreviewsPerApp: number;
@@ -20,16 +49,48 @@ export interface PlanLimits {
     buildLogRetentionDays: number;
     /** Max user-defined cron jobs (Phase 5.3) */
     cronJobs: number;
-    /** Object storage quota in MB (Phase 5.1 — prep, not yet enforced) */
+    /**
+     * Initial disk footprint in MB charged for a `data.mode =
+     * "pocketbase"` app that has no measured volume sample yet (a
+     * freshly-created, still-empty PB volume).
+     *
+     * Disk-pool symmetry (Phase 1, 2026-05-24): this is NO LONGER the
+     * whole-pool worst-case reservation it used to be. Pool accounting
+     * now sums the MEASURED PB volume size (`app_pb_volume_samples`,
+     * fed by the PB-volume sampler) per app against `diskPoolMb`; this
+     * footprint is only the placeholder used until the first sample
+     * lands. Per-app disk is elastic — a volume grows freely with its
+     * data up to the remaining pool. The tier pool (`diskPoolMb`) is
+     * the only real ceiling. NOT a UI-surfaced per-app cap.
+     */
     storageMb: number;
     /** Max parallel container instances per app (Phase 6.1) */
     instances: number;
-    /** SLA uptime target (Phase 8.3). null = no SLA for this tier. */
-    slaUptime: string | null;
-    /** Support response target (Phase 8.3). null = community support only. */
-    supportResponseTime: string | null;
     /** Per-app KV store size cap in MB (Phase 5.4) */
     kvStorageMb: number;
+    /**
+     * FUTURE20 Fas 3 — total RAM in MB the user can commit across
+     * ALL their apps × instances. Hard cap enforced at deploy +
+     * autoscale time. `apps × memory × instances` is the worst-case
+     * if the user fills every slot at the per-app default; the pool
+     * is the actually-sellable total per tier.
+     */
+    ramPoolMb: number;
+    /**
+     * FUTURE20 Fas 3 — total vCPU the user can commit across all
+     * their apps × instances. Hard cap; same dimension as `cpu` per
+     * app but enforced as a sum. Box-level oversubscription is OK
+     * (kernel time-shares; we monitor cgroup throttling); per-account
+     * pool is the contract with the user.
+     */
+    vcpuPool: number;
+    /**
+     * FUTURE20 Fas 3 — total disk in MB the user can commit across
+     * all their app data + PB sidecar volumes. Tracked at deploy
+     * time; soft-warned today (PB volumes don't have docker quotas
+     * wired yet), hard-enforced when a new app would exceed it.
+     */
+    diskPoolMb: number;
     /**
      * Uptime probe interval in seconds. 0 disables external uptime
      * monitoring entirely (Free tier). Non-zero values become the
@@ -63,6 +124,17 @@ export interface PlanInfo {
     priceEur: number;
     limits: PlanLimits;
 }
+/**
+ * Pool sizes are derived from `docs/operations/capacity-model.md`'s
+ * "Konkreta startpooler" table. They are the *sellable* totals per
+ * tier — the user can fill them with any mix of apps × sizes as
+ * long as the sum fits. Per-app `memory` / `cpu` are now defaults
+ * (used when `[resources]` is omitted in percher.toml), not hard
+ * ceilings.
+ *
+ * `apps` is a hard cap (anti-abuse backstop) enforced at app-create;
+ * pool dimensions are the load-bearing constraint.
+ */
 export declare const PLAN_CATALOG: Record<PlanId, PlanInfo>;
 export declare const PLAN_IDS: PlanId[];
 /** Look up plan limits, defaulting to free for unknown plan ids */
@@ -77,9 +149,15 @@ export declare function getPlanInfo(plan: string): PlanInfo;
  * plus `Number.POSITIVE_INFINITY` for every cap that would otherwise
  * cause platform-driven friction when they're operating the
  * platform: app count, deploy rate, preview slots, custom domains,
- * cron jobs, KV size, retention windows. Auto-sleep is forced off
- * and inactivity windows are essentially infinite so admin apps
- * never get hibernated or suspended underneath them.
+ * cron jobs, KV size. Auto-sleep is forced off and inactivity windows
+ * are essentially infinite so admin apps never get hibernated or
+ * suspended underneath them.
+ *
+ * EXCEPTION — `deployRetention` inherits Pro's finite 60, NOT infinity:
+ * it's storage (old deploy images/tarballs), and infinite made
+ * retention-cleanup a no-op for the operator's own apps. See the inline
+ * note on the override. (logRetentionDays / buildLogRetentionDays stay
+ * infinite — see that note for why.)
  *
  * Pure function, no side effects — callers compute `isAdmin` from
  * the user record (typically `isAdminEmail(user.email)`) and pass

package/dist/plans.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"plans.d.ts","sourceRoot":"","sources":["../src/plans.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,MAAM,GAAG,MAAM,GAAG,SAAS,GAAG,OAAO,GAAG,KAAK,CAAC;AAE1D,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,eAAe,EAAE,MAAM,GAAG,WAAW,CAAC;IACtC,cAAc,EAAE,MAAM,CAAC;IACvB,MAAM,EAAE,MAAM,CAAC;IACf,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,oBAAoB,EAAE,MAAM,CAAC;IAC7B,mBAAmB,EAAE,MAAM,CAAC;IAC5B,mBAAmB,EAAE,OAAO,CAAC;IAC7B,SAAS,EAAE,OAAO,CAAC;IACnB,qBAAqB,EAAE,MAAM,CAAC;IAC9B,mBAAmB,EAAE,MAAM,CAAC;IAC5B,qEAAqE;IACrE,eAAe,EAAE,MAAM,CAAC;IACxB,gCAAgC;IAChC,gBAAgB,EAAE,MAAM,CAAC;IACzB,8BAA8B;IAC9B,qBAAqB,EAAE,MAAM,CAAC;IAC9B,6CAA6C;IAC7C,QAAQ,EAAE,MAAM,CAAC;IACjB,sEAAsE;IACtE,SAAS,EAAE,MAAM,CAAC;IAClB,2DAA2D;IAC3D,SAAS,EAAE,MAAM,CAAC;IAClB,kEAAkE;IAClE,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,0EAA0E;IAC1E,mBAAmB,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,kDAAkD;IAClD,WAAW,EAAE,MAAM,CAAC;IACpB;;;;;OAKG;IACH,iBAAiB,EAAE,MAAM,CAAC;IAC1B;;;;;OAKG;IACH,gBAAgB,EAAE,MAAM,CAAC;IACzB;;8DAE0D;IAC1D,mBAAmB,EAAE,MAAM,CAAC;IAC5B;;;;;;;OAOG;IACH,qBAAqB,EAAE,MAAM,CAAC;CAC/B;AAED,MAAM,WAAW,QAAQ;IACvB,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,UAAU,CAAC;CACpB;AAED,eAAO,MAAM,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,QAAQ,CA6HjD,CAAC;AAEF,eAAO,MAAM,QAAQ,EAAgC,MAAM,EAAE,CAAC;AAE9D,mEAAmE;AACnE,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,UAAU,CAEtD;AAED,sEAAsE;AACtE,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,QAAQ,CAElD;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,UAAQ,GAAG,UAAU,CA0BhF"}
+{"version":3,"file":"plans.d.ts","sourceRoot":"","sources":["../src/plans.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,MAAM,GAAG,MAAM,GAAG,SAAS,GAAG,OAAO,GAAG,KAAK,CAAC;AAE1D;;;;;;;;GAQG;AACH,eAAO,MAAM,uBAAuB,MAAM,CAAC;AAE3C,MAAM,WAAW,UAAU;IACzB;;;;;OAKG;IACH,IAAI,EAAE,MAAM,CAAC;IACb,eAAe,EAAE,MAAM,GAAG,WAAW,CAAC;IACtC,cAAc,EAAE,MAAM,CAAC;IACvB;;;;;;;OAOG;IACH,MAAM,EAAE,MAAM,CAAC;IACf;;;;OAIG;IACH,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,oBAAoB,EAAE,MAAM,CAAC;IAC7B,mBAAmB,EAAE,MAAM,CAAC;IAC5B,mBAAmB,EAAE,OAAO,CAAC;IAC7B,SAAS,EAAE,OAAO,CAAC;IACnB,qBAAqB,EAAE,MAAM,CAAC;IAC9B,mBAAmB,EAAE,MAAM,CAAC;IAC5B,qEAAqE;IACrE,eAAe,EAAE,MAAM,CAAC;IACxB,gCAAgC;IAChC,gBAAgB,EAAE,MAAM,CAAC;IACzB,8BAA8B;IAC9B,qBAAqB,EAAE,MAAM,CAAC;IAC9B,6CAA6C;IAC7C,QAAQ,EAAE,MAAM,CAAC;IACjB;;;;;;;;;;;;;OAaG;IACH,SAAS,EAAE,MAAM,CAAC;IAClB,2DAA2D;IAC3D,SAAS,EAAE,MAAM,CAAC;IAClB,kDAAkD;IAClD,WAAW,EAAE,MAAM,CAAC;IACpB;;;;;;OAMG;IACH,SAAS,EAAE,MAAM,CAAC;IAClB;;;;;;OAMG;IACH,QAAQ,EAAE,MAAM,CAAC;IACjB;;;;;OAKG;IACH,UAAU,EAAE,MAAM,CAAC;IACnB;;;;;OAKG;IACH,iBAAiB,EAAE,MAAM,CAAC;IAC1B;;;;;OAKG;IACH,gBAAgB,EAAE,MAAM,CAAC;IACzB;;8DAE0D;IAC1D,mBAAmB,EAAE,MAAM,CAAC;IAC5B;;;;;;;OAOG;IACH,qBAAqB,EAAE,MAAM,CAAC;CAC/B;AAED,MAAM,WAAW,QAAQ;IACvB,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,UAAU,CAAC;CACpB;AAED;;;;;;;;;;GAUG;AACH,eAAO,MAAM,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,QAAQ,CA2KjD,CAAC;AAEF,eAAO,MAAM,QAAQ,EAAgC,MAAM,EAAE,CAAC;AAE9D,mEAAmE;AACnE,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,UAAU,CAEtD;AAED,sEAAsE;AACtE,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,QAAQ,CAElD;AAED;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,UAAQ,GAAG,UAAU,CA0ChF"}

package/dist/plans.js

@@ -1,9 +1,30 @@
+/**
+ * Disk-pool symmetry (Phase 1) — the disk footprint (MB) charged for
+ * a PocketBase app that has no measured volume sample yet. A new PB
+ * volume starts near-empty; this is the accounting placeholder until
+ * the PB-volume sampler records a real size. Same value across all
+ * tiers — it's a property of an empty PB volume, not of the plan.
+ * Pool accounting then tracks the measured size; the tier
+ * `diskPoolMb` is the real ceiling. See `PlanLimits.storageMb`.
+ */
+export const PB_INITIAL_FOOTPRINT_MB = 256;
+/**
+ * Pool sizes are derived from `docs/operations/capacity-model.md`'s
+ * "Konkreta startpooler" table. They are the *sellable* totals per
+ * tier — the user can fill them with any mix of apps × sizes as
+ * long as the sum fits. Per-app `memory` / `cpu` are now defaults
+ * (used when `[resources]` is omitted in percher.toml), not hard
+ * ceilings.
+ *
+ * `apps` is a hard cap (anti-abuse backstop) enforced at app-create;
+ * pool dimensions are the load-bearing constraint.
+ */
 export const PLAN_CATALOG = {
     free: {
         label: "Free",
         priceEur: 0,
         limits: {
-            apps: 2,
+            apps: 3,
             deploysPerMonth: 50,
             deploysPerHour: 12,
             memory: "256mb",
@@ -19,26 +40,36 @@ export const PLAN_CATALOG = {
             logRetentionDays: 1,
             buildLogRetentionDays: 3,
             cronJobs: 1,
-            storageMb: 500,
+            storageMb: PB_INITIAL_FOOTPRINT_MB,
             instances: 1,
-            slaUptime: null,
-            supportResponseTime: null,
             kvStorageMb: 10,
             uptimeIntervalSec: 0,
             dailyLiveDeploys: 50,
             dailyPreviewDeploys: 25,
             userConcurrentDeploys: 2,
+            // 512 MB pool / 0.5 vCPU pool / 1 GB disk — per capacity-model
+            // CX22 line. Free relies on auto-sleep as the pressure valve,
+            // so committed actual usage is ≈ 0 when idle.
+            ramPoolMb: 512,
+            vcpuPool: 0.5,
+            diskPoolMb: 1_000,
         },
     },
     starter: {
         label: "Starter",
         priceEur: 3,
         limits: {
-            apps: 5,
+            apps: 10,
             deploysPerMonth: 200,
             deploysPerHour: 30,
             memory: "512mb",
-            cpu: 0.5,
+            // 0.25 default × 1 instance (Starter cap) = 0.25, fits the 1.0
+            // vCPU pool with generous headroom for users to bump per-app
+            // cpu in their toml. FUTURE21 rounded the pool from 0.75 to a
+            // full vCPU for round-number sellability — CPU isn't a hard
+            // capacity gate (kernel time-shares; we monitor cgroup
+            // throttling), so a half-vCPU bump costs nothing operationally.
+            cpu: 0.25,
             pids: 256,
             activePreviewsPerApp: 3,
             customDomainsPerApp: 2,
@@ -50,26 +81,34 @@ export const PLAN_CATALOG = {
             logRetentionDays: 7,
             buildLogRetentionDays: 14,
             cronJobs: 3,
-            storageMb: 5000,
+            storageMb: PB_INITIAL_FOOTPRINT_MB,
             instances: 1,
-            slaUptime: null,
-            supportResponseTime: "72h email",
             kvStorageMb: 50,
             uptimeIntervalSec: 300,
             dailyLiveDeploys: 100,
             dailyPreviewDeploys: 50,
             userConcurrentDeploys: 3,
+            // 1.5 GB / 1.0 vCPU / 5 GB disk — capacity-model CX22 line.
+            // FUTURE21 rounded vcpuPool from 0.75 → 1.0 for round-number
+            // sellability (CPU is time-shared by the kernel, not hard-gated).
+            ramPoolMb: 1_536,
+            vcpuPool: 1.0,
+            diskPoolMb: 5_000,
         },
     },
     maker: {
         label: "Maker",
         priceEur: 12,
         limits: {
-            apps: 10,
+            apps: 20,
             deploysPerMonth: 500,
             deploysPerHour: 60,
             memory: "1gb",
-            cpu: 1,
+            // 0.5 default × 2 instances (Maker cap) = 1.0, fits 2 vCPU
+            // pool with 1.0 headroom for users to bump per-app cpu. Was
+            // 1 — that saturated the pool with a single app × 2 instances
+            // and made the documented multi-app cap meaningless on CPU.
+            cpu: 0.5,
             pids: 512,
             activePreviewsPerApp: 3,
             customDomainsPerApp: 5,
@@ -81,26 +120,43 @@ export const PLAN_CATALOG = {
             logRetentionDays: 30,
             buildLogRetentionDays: 30,
             cronJobs: 10,
-            storageMb: 50_000,
+            storageMb: PB_INITIAL_FOOTPRINT_MB,
             instances: 2,
-            slaUptime: "99.5%",
-            supportResponseTime: "24h email",
             kvStorageMb: 200,
             uptimeIntervalSec: 60,
             dailyLiveDeploys: 200,
             dailyPreviewDeploys: 100,
             userConcurrentDeploys: 5,
+            // 4 GB / 2 vCPU / 25 GB disk — capacity-model CX22 line.
+            // FUTURE21 halved diskPoolMb from 50 GB → 25 GB to keep the
+            // promised pool fits-on-disk-honestly on CX32 (80 GB local disk
+            // minus platform overhead). Disk-pool symmetry (Phase 1) charges
+            // MEASURED PB volume sizes against this pool — not one whole-pool
+            // reservation per PB app — so a Maker account can run many PB
+            // apps until the summed measured disk nears 25 GB (no more
+            // 1-PB-app-per-account wall). Worst-case committed RAM (pool +
+            // 20 PB-sidecars) = 6.56 GB, which is why Maker is closed on
+            // CX22 (committed_budget = 4.4 GB).
+            ramPoolMb: 4_096,
+            vcpuPool: 2,
+            diskPoolMb: 25_000,
         },
     },
     pro: {
         label: "Pro",
         priceEur: 29,
         limits: {
-            apps: 25,
+            apps: 40,
             deploysPerMonth: "unlimited",
             deploysPerHour: 120,
-            memory: "2gb",
-            cpu: 2,
+            memory: "1gb",
+            // 1.0 default × 4 instances (Pro cap) = 4.0, fits 4 vCPU pool
+            // exactly with no headroom. Was 2 — that would have made any
+            // multi-instance deploy exceed the pool at default cpu. Users
+            // can drop per-app cpu in toml to leave headroom for more
+            // apps, or bump it on a single-instance app up to the full
+            // pool (= dedicated 4 vCPU).
+            cpu: 1,
             pids: 1024,
             activePreviewsPerApp: 3,
             customDomainsPerApp: 10,
@@ -112,15 +168,26 @@ export const PLAN_CATALOG = {
             logRetentionDays: 90,
             buildLogRetentionDays: 90,
             cronJobs: 25,
-            storageMb: 200_000,
+            storageMb: PB_INITIAL_FOOTPRINT_MB,
             instances: 4,
-            slaUptime: "99.9%",
-            supportResponseTime: "8h email + priority Discord",
             kvStorageMb: 1000,
             uptimeIntervalSec: 30,
             dailyLiveDeploys: 1000,
             dailyPreviewDeploys: 500,
             userConcurrentDeploys: 20,
+            // 10 GB / 4 vCPU / 75 GB disk — capacity-model CX22 line.
+            // FUTURE21 sized diskPoolMb down from 200 GB → 75 GB so the
+            // promised pool actually fits on the boxes we run (CX42 has
+            // 160 GB local disk — 75 GB pool leaves room for platform +
+            // one more paying customer). Disk-pool symmetry (Phase 1) tracks
+            // MEASURED PB volume sizes against this pool, so a Pro account
+            // runs many PB apps until summed measured disk nears 75 GB
+            // (no single-PB-app-per-account reservation). Worst-case
+            // committed RAM (pool + 40 PB-sidecars) = 15.36 GB, which is
+            // why Pro still requires CX42 minimum.
+            ramPoolMb: 10_240,
+            vcpuPool: 4,
+            diskPoolMb: 75_000,
         },
     },
 };
@@ -141,9 +208,15 @@ export function getPlanInfo(plan) {
  * plus `Number.POSITIVE_INFINITY` for every cap that would otherwise
  * cause platform-driven friction when they're operating the
  * platform: app count, deploy rate, preview slots, custom domains,
- * cron jobs, KV size, retention windows. Auto-sleep is forced off
- * and inactivity windows are essentially infinite so admin apps
- * never get hibernated or suspended underneath them.
+ * cron jobs, KV size. Auto-sleep is forced off and inactivity windows
+ * are essentially infinite so admin apps never get hibernated or
+ * suspended underneath them.
+ *
+ * EXCEPTION — `deployRetention` inherits Pro's finite 60, NOT infinity:
+ * it's storage (old deploy images/tarballs), and infinite made
+ * retention-cleanup a no-op for the operator's own apps. See the inline
+ * note on the override. (logRetentionDays / buildLogRetentionDays stay
+ * infinite — see that note for why.)
  *
  * Pure function, no side effects — callers compute `isAdmin` from
  * the user record (typically `isAdminEmail(user.email)`) and pass
@@ -168,11 +241,27 @@ export function getEffectivePlanLimits(plan, isAdmin = false) {
         autoSleep: false,
         inactivityWarningDays: INF,
         inactivityGraceDays: INF,
-        deployRetention: INF,
+        // deployRetention is NOT infinite for admin (decision 2026-05-24): it's
+        // the count of recent deploys whose Docker images + tarballs
+        // retention-cleanup keeps. Infinite meant the operator's own apps never
+        // shed old deploy images (the big disk consumer — e.g. stale multi-GB
+        // images lingered after an app was rebuilt). Inherit Pro's finite 60
+        // from `...pro` above. logRetentionDays / buildLogRetentionDays stay
+        // infinite: they only gate text/telemetry (not the image disk) AND
+        // logRetentionDays' finiteness doubles as the admin signal in
+        // plan5MinRetentionDays — flipping it would silently reap admin metrics
+        // history. Revisit those two separately if ever needed.
         logRetentionDays: INF,
         buildLogRetentionDays: INF,
         cronJobs: INF,
         kvStorageMb: INF,
+        // FUTURE20 Fas 3 — admin bypasses pool checks too. Otherwise
+        // the operator's own apps would hit "your tier pool is full"
+        // when running platform-management apps (admin tooling,
+        // dogfood deploys, etc.).
+        ramPoolMb: INF,
+        vcpuPool: INF,
+        diskPoolMb: INF,
         // Admin probes still happen at the pro cadence (30s) — no point in
         // trying to make this "infinite", and faster than 30s starts to
         // matter for outbound bandwidth without paying for itself.

package/dist/plans.js.map

@@ -1 +1 @@
-{"version":3,"file":"plans.js","sourceRoot":"","sources":["../src/plans.ts"],"names":[],"mappings":"AAoEA,MAAM,CAAC,MAAM,YAAY,GAA6B;IACpD,IAAI,EAAE;QACJ,KAAK,EAAE,MAAM;QACb,QAAQ,EAAE,CAAC;QACX,MAAM,EAAE;YACN,IAAI,EAAE,CAAC;YACP,eAAe,EAAE,EAAE;YACnB,cAAc,EAAE,EAAE;YAClB,MAAM,EAAE,OAAO;YACf,GAAG,EAAE,IAAI;YACT,IAAI,EAAE,GAAG;YACT,oBAAoB,EAAE,CAAC;YACvB,mBAAmB,EAAE,CAAC;YACtB,mBAAmB,EAAE,KAAK;YAC1B,SAAS,EAAE,IAAI;YACf,qBAAqB,EAAE,EAAE;YACzB,mBAAmB,EAAE,CAAC;YACtB,eAAe,EAAE,CAAC;YAClB,gBAAgB,EAAE,CAAC;YACnB,qBAAqB,EAAE,CAAC;YACxB,QAAQ,EAAE,CAAC;YACX,SAAS,EAAE,GAAG;YACd,SAAS,EAAE,CAAC;YACZ,SAAS,EAAE,IAAI;YACf,mBAAmB,EAAE,IAAI;YACzB,WAAW,EAAE,EAAE;YACf,iBAAiB,EAAE,CAAC;YACpB,gBAAgB,EAAE,EAAE;YACpB,mBAAmB,EAAE,EAAE;YACvB,qBAAqB,EAAE,CAAC;SACzB;KACF;IACD,OAAO,EAAE;QACP,KAAK,EAAE,SAAS;QAChB,QAAQ,EAAE,CAAC;QACX,MAAM,EAAE;YACN,IAAI,EAAE,CAAC;YACP,eAAe,EAAE,GAAG;YACpB,cAAc,EAAE,EAAE;YAClB,MAAM,EAAE,OAAO;YACf,GAAG,EAAE,GAAG;YACR,IAAI,EAAE,GAAG;YACT,oBAAoB,EAAE,CAAC;YACvB,mBAAmB,EAAE,CAAC;YACtB,mBAAmB,EAAE,IAAI;YACzB,SAAS,EAAE,KAAK;YAChB,qBAAqB,EAAE,EAAE;YACzB,mBAAmB,EAAE,CAAC;YACtB,eAAe,EAAE,EAAE;YACnB,gBAAgB,EAAE,CAAC;YACnB,qBAAqB,EAAE,EAAE;YACzB,QAAQ,EAAE,CAAC;YACX,SAAS,EAAE,IAAI;YACf,SAAS,EAAE,CAAC;YACZ,SAAS,EAAE,IAAI;YACf,mBAAmB,EAAE,WAAW;YAChC,WAAW,EAAE,EAAE;YACf,iBAAiB,EAAE,GAAG;YACtB,gBAAgB,EAAE,GAAG;YACrB,mBAAmB,EAAE,EAAE;YACvB,qBAAqB,EAAE,CAAC;SACzB;KACF;IACD,KAAK,EAAE;QACL,KAAK,EAAE,OAAO;QACd,QAAQ,EAAE,EAAE;QACZ,MAAM,EAAE;YACN,IAAI,EAAE,EAAE;YACR,eAAe,EAAE,GAAG;YACpB,cAAc,EAAE,EAAE;YAClB,MAAM,EAAE,KAAK;YACb,GAAG,EAAE,CAAC;YACN,IAAI,EAAE,GAAG;YACT,oBAAoB,EAAE,CAAC;YACvB,mBAAmB,EAAE,CAAC;YACtB,mBAAmB,EAAE,IAAI;YACzB,SAAS,EAAE,KAAK;YAChB,qBAAqB,EAAE,EAAE;YACzB,mBAAmB,EAAE,CAAC;YACtB,eAAe,EAAE,EAAE;YACnB,gBAAgB,EAAE,EAAE;YACpB,qBAAqB,EAAE,EAAE;YACzB,QAAQ,EAAE,EAAE;YACZ,SAAS,EAAE,MAAM;YACjB,SAAS,EAAE,CAAC;YACZ,SAAS,EAAE,OAAO;YAClB,mBAAmB,EAAE,WAAW;YAChC,WAAW,EAAE,GAAG;YAChB,iBAAiB,EAAE,EAAE;YACrB,gBAAgB,EAAE,GAAG;YACrB,mBAAmB,EAAE,GAAG;YACxB,qBAAqB,EAAE,CAAC;SACzB;KACF;IACD,GAAG,EAAE;QACH,KAAK,EAAE,KAAK;QACZ,QAAQ,EAAE,EAAE;QACZ,MAAM,EAAE;YACN,IAAI,EAAE,EAAE;YACR,eAAe,EAAE,WAAW;YAC5B,cAAc,EAAE,GAAG;YACnB,MAAM,EAAE,KAAK;YACb,GAAG,EAAE,CAAC;YACN,IAAI,EAAE,IAAI;YACV,oBAAoB,EAAE,CAAC;YACvB,mBAAmB,EAAE,EAAE;YACvB,mBAAmB,EAAE,IAAI;YACzB,SAAS,EAAE,KAAK;YAChB,qBAAqB,EAAE,EAAE;YACzB,mBAAmB,EAAE,CAAC;YACtB,eAAe,EAAE,EAAE;YACnB,gBAAgB,EAAE,EAAE;YACpB,qBAAqB,EAAE,EAAE;YACzB,QAAQ,EAAE,EAAE;YACZ,SAAS,EAAE,OAAO;YAClB,SAAS,EAAE,CAAC;YACZ,SAAS,EAAE,OAAO;YAClB,mBAAmB,EAAE,6BAA6B;YAClD,WAAW,EAAE,IAAI;YACjB,iBAAiB,EAAE,EAAE;YACrB,gBAAgB,EAAE,IAAI;YACtB,mBAAmB,EAAE,GAAG;YACxB,qBAAqB,EAAE,EAAE;SAC1B;KACF;CACF,CAAC;AAEF,MAAM,CAAC,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,YAAY,CAAa,CAAC;AAE9D,mEAAmE;AACnE,MAAM,UAAU,aAAa,CAAC,IAAY;IACxC,OAAO,YAAY,CAAC,IAAc,CAAC,EAAE,MAAM,IAAI,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC;AAC1E,CAAC;AAED,sEAAsE;AACtE,MAAM,UAAU,WAAW,CAAC,IAAY;IACtC,OAAO,YAAY,CAAC,IAAc,CAAC,IAAI,YAAY,CAAC,IAAI,CAAC;AAC3D,CAAC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,sBAAsB,CAAC,IAAY,EAAE,OAAO,GAAG,KAAK;IAClE,IAAI,CAAC,OAAO;QAAE,OAAO,aAAa,CAAC,IAAI,CAAC,CAAC;IACzC,MAAM,GAAG,GAAG,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC;IACpC,MAAM,GAAG,GAAG,MAAM,CAAC,iBAAiB,CAAC;IACrC,OAAO;QACL,GAAG,GAAG;QACN,IAAI,EAAE,GAAG;QACT,eAAe,EAAE,WAAW;QAC5B,cAAc,EAAE,GAAG;QACnB,gBAAgB,EAAE,GAAG;QACrB,mBAAmB,EAAE,GAAG;QACxB,qBAAqB,EAAE,GAAG;QAC1B,oBAAoB,EAAE,GAAG;QACzB,mBAAmB,EAAE,GAAG;QACxB,SAAS,EAAE,KAAK;QAChB,qBAAqB,EAAE,GAAG;QAC1B,mBAAmB,EAAE,GAAG;QACxB,eAAe,EAAE,GAAG;QACpB,gBAAgB,EAAE,GAAG;QACrB,qBAAqB,EAAE,GAAG;QAC1B,QAAQ,EAAE,GAAG;QACb,WAAW,EAAE,GAAG;QAChB,mEAAmE;QACnE,gEAAgE;QAChE,2DAA2D;KAC5D,CAAC;AACJ,CAAC"}
+{"version":3,"file":"plans.js","sourceRoot":"","sources":["../src/plans.ts"],"names":[],"mappings":"AAEA;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,GAAG,CAAC;AAuH3C;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,YAAY,GAA6B;IACpD,IAAI,EAAE;QACJ,KAAK,EAAE,MAAM;QACb,QAAQ,EAAE,CAAC;QACX,MAAM,EAAE;YACN,IAAI,EAAE,CAAC;YACP,eAAe,EAAE,EAAE;YACnB,cAAc,EAAE,EAAE;YAClB,MAAM,EAAE,OAAO;YACf,GAAG,EAAE,IAAI;YACT,IAAI,EAAE,GAAG;YACT,oBAAoB,EAAE,CAAC;YACvB,mBAAmB,EAAE,CAAC;YACtB,mBAAmB,EAAE,KAAK;YAC1B,SAAS,EAAE,IAAI;YACf,qBAAqB,EAAE,EAAE;YACzB,mBAAmB,EAAE,CAAC;YACtB,eAAe,EAAE,CAAC;YAClB,gBAAgB,EAAE,CAAC;YACnB,qBAAqB,EAAE,CAAC;YACxB,QAAQ,EAAE,CAAC;YACX,SAAS,EAAE,uBAAuB;YAClC,SAAS,EAAE,CAAC;YACZ,WAAW,EAAE,EAAE;YACf,iBAAiB,EAAE,CAAC;YACpB,gBAAgB,EAAE,EAAE;YACpB,mBAAmB,EAAE,EAAE;YACvB,qBAAqB,EAAE,CAAC;YACxB,+DAA+D;YAC/D,8DAA8D;YAC9D,8CAA8C;YAC9C,SAAS,EAAE,GAAG;YACd,QAAQ,EAAE,GAAG;YACb,UAAU,EAAE,KAAK;SAClB;KACF;IACD,OAAO,EAAE;QACP,KAAK,EAAE,SAAS;QAChB,QAAQ,EAAE,CAAC;QACX,MAAM,EAAE;YACN,IAAI,EAAE,EAAE;YACR,eAAe,EAAE,GAAG;YACpB,cAAc,EAAE,EAAE;YAClB,MAAM,EAAE,OAAO;YACf,+DAA+D;YAC/D,6DAA6D;YAC7D,8DAA8D;YAC9D,4DAA4D;YAC5D,uDAAuD;YACvD,gEAAgE;YAChE,GAAG,EAAE,IAAI;YACT,IAAI,EAAE,GAAG;YACT,oBAAoB,EAAE,CAAC;YACvB,mBAAmB,EAAE,CAAC;YACtB,mBAAmB,EAAE,IAAI;YACzB,SAAS,EAAE,KAAK;YAChB,qBAAqB,EAAE,EAAE;YACzB,mBAAmB,EAAE,CAAC;YACtB,eAAe,EAAE,EAAE;YACnB,gBAAgB,EAAE,CAAC;YACnB,qBAAqB,EAAE,EAAE;YACzB,QAAQ,EAAE,CAAC;YACX,SAAS,EAAE,uBAAuB;YAClC,SAAS,EAAE,CAAC;YACZ,WAAW,EAAE,EAAE;YACf,iBAAiB,EAAE,GAAG;YACtB,gBAAgB,EAAE,GAAG;YACrB,mBAAmB,EAAE,EAAE;YACvB,qBAAqB,EAAE,CAAC;YACxB,4DAA4D;YAC5D,6DAA6D;YAC7D,kEAAkE;YAClE,SAAS,EAAE,KAAK;YAChB,QAAQ,EAAE,GAAG;YACb,UAAU,EAAE,KAAK;SAClB;KACF;IACD,KAAK,EAAE;QACL,KAAK,EAAE,OAAO;QACd,QAAQ,EAAE,EAAE;QACZ,MAAM,EAAE;YACN,IAAI,EAAE,EAAE;YACR,eAAe,EAAE,GAAG;YACpB,cAAc,EAAE,EAAE;YAClB,MAAM,EAAE,KAAK;YACb,2DAA2D;YAC3D,4DAA4D;YAC5D,8DAA8D;YAC9D,4DAA4D;YAC5D,GAAG,EAAE,GAAG;YACR,IAAI,EAAE,GAAG;YACT,oBAAoB,EAAE,CAAC;YACvB,mBAAmB,EAAE,CAAC;YACtB,mBAAmB,EAAE,IAAI;YACzB,SAAS,EAAE,KAAK;YAChB,qBAAqB,EAAE,EAAE;YACzB,mBAAmB,EAAE,CAAC;YACtB,eAAe,EAAE,EAAE;YACnB,gBAAgB,EAAE,EAAE;YACpB,qBAAqB,EAAE,EAAE;YACzB,QAAQ,EAAE,EAAE;YACZ,SAAS,EAAE,uBAAuB;YAClC,SAAS,EAAE,CAAC;YACZ,WAAW,EAAE,GAAG;YAChB,iBAAiB,EAAE,EAAE;YACrB,gBAAgB,EAAE,GAAG;YACrB,mBAAmB,EAAE,GAAG;YACxB,qBAAqB,EAAE,CAAC;YACxB,yDAAyD;YACzD,4DAA4D;YAC5D,gEAAgE;YAChE,iEAAiE;YACjE,kEAAkE;YAClE,8DAA8D;YAC9D,2DAA2D;YAC3D,+DAA+D;YAC/D,6DAA6D;YAC7D,oCAAoC;YACpC,SAAS,EAAE,KAAK;YAChB,QAAQ,EAAE,CAAC;YACX,UAAU,EAAE,MAAM;SACnB;KACF;IACD,GAAG,EAAE;QACH,KAAK,EAAE,KAAK;QACZ,QAAQ,EAAE,EAAE;QACZ,MAAM,EAAE;YACN,IAAI,EAAE,EAAE;YACR,eAAe,EAAE,WAAW;YAC5B,cAAc,EAAE,GAAG;YACnB,MAAM,EAAE,KAAK;YACb,8DAA8D;YAC9D,6DAA6D;YAC7D,8DAA8D;YAC9D,0DAA0D;YAC1D,2DAA2D;YAC3D,6BAA6B;YAC7B,GAAG,EAAE,CAAC;YACN,IAAI,EAAE,IAAI;YACV,oBAAoB,EAAE,CAAC;YACvB,mBAAmB,EAAE,EAAE;YACvB,mBAAmB,EAAE,IAAI;YACzB,SAAS,EAAE,KAAK;YAChB,qBAAqB,EAAE,EAAE;YACzB,mBAAmB,EAAE,CAAC;YACtB,eAAe,EAAE,EAAE;YACnB,gBAAgB,EAAE,EAAE;YACpB,qBAAqB,EAAE,EAAE;YACzB,QAAQ,EAAE,EAAE;YACZ,SAAS,EAAE,uBAAuB;YAClC,SAAS,EAAE,CAAC;YACZ,WAAW,EAAE,IAAI;YACjB,iBAAiB,EAAE,EAAE;YACrB,gBAAgB,EAAE,IAAI;YACtB,mBAAmB,EAAE,GAAG;YACxB,qBAAqB,EAAE,EAAE;YACzB,0DAA0D;YAC1D,4DAA4D;YAC5D,4DAA4D;YAC5D,4DAA4D;YAC5D,iEAAiE;YACjE,+DAA+D;YAC/D,2DAA2D;YAC3D,yDAAyD;YACzD,6DAA6D;YAC7D,uCAAuC;YACvC,SAAS,EAAE,MAAM;YACjB,QAAQ,EAAE,CAAC;YACX,UAAU,EAAE,MAAM;SACnB;KACF;CACF,CAAC;AAEF,MAAM,CAAC,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,YAAY,CAAa,CAAC;AAE9D,mEAAmE;AACnE,MAAM,UAAU,aAAa,CAAC,IAAY;IACxC,OAAO,YAAY,CAAC,IAAc,CAAC,EAAE,MAAM,IAAI,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC;AAC1E,CAAC;AAED,sEAAsE;AACtE,MAAM,UAAU,WAAW,CAAC,IAAY;IACtC,OAAO,YAAY,CAAC,IAAc,CAAC,IAAI,YAAY,CAAC,IAAI,CAAC;AAC3D,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAM,UAAU,sBAAsB,CAAC,IAAY,EAAE,OAAO,GAAG,KAAK;IAClE,IAAI,CAAC,OAAO;QAAE,OAAO,aAAa,CAAC,IAAI,CAAC,CAAC;IACzC,MAAM,GAAG,GAAG,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC;IACpC,MAAM,GAAG,GAAG,MAAM,CAAC,iBAAiB,CAAC;IACrC,OAAO;QACL,GAAG,GAAG;QACN,IAAI,EAAE,GAAG;QACT,eAAe,EAAE,WAAW;QAC5B,cAAc,EAAE,GAAG;QACnB,gBAAgB,EAAE,GAAG;QACrB,mBAAmB,EAAE,GAAG;QACxB,qBAAqB,EAAE,GAAG;QAC1B,oBAAoB,EAAE,GAAG;QACzB,mBAAmB,EAAE,GAAG;QACxB,SAAS,EAAE,KAAK;QAChB,qBAAqB,EAAE,GAAG;QAC1B,mBAAmB,EAAE,GAAG;QACxB,wEAAwE;QACxE,6DAA6D;QAC7D,wEAAwE;QACxE,sEAAsE;QACtE,qEAAqE;QACrE,qEAAqE;QACrE,mEAAmE;QACnE,8DAA8D;QAC9D,wEAAwE;QACxE,wDAAwD;QACxD,gBAAgB,EAAE,GAAG;QACrB,qBAAqB,EAAE,GAAG;QAC1B,QAAQ,EAAE,GAAG;QACb,WAAW,EAAE,GAAG;QAChB,6DAA6D;QAC7D,6DAA6D;QAC7D,wDAAwD;QACxD,0BAA0B;QAC1B,SAAS,EAAE,GAAG;QACd,QAAQ,EAAE,GAAG;QACb,UAAU,EAAE,GAAG;QACf,mEAAmE;QACnE,gEAAgE;QAChE,2DAA2D;KAC5D,CAAC;AACJ,CAAC"}

package/dist/recovery.d.ts

@@ -52,6 +52,17 @@ export type RecoveryAction =
  | "fix_config"
 /** Plan limits exceeded or otherwise needs human input; agent should ask the user. */
  | "ask_user"
+/**
+ * FUTURE16 Fas 3 — pre-fetched device-code is in-flight. Agent should
+ * call `percher_wait_for_auth` to short-poll the device-code exchange,
+ * then resume the original publish call. Pairs 1:1 with the
+ * `auth_pending` PublishStatus. Distinct from `open_login` (which
+ * tells the agent to *start* a login flow via `percher_login`) — by
+ * the time `wait_auth` is emitted the device-code already exists and
+ * the user has been pointed at the verification URL; only the wait
+ * step remains.
+ */
+ | "wait_auth"
 /** Success path — no further action required. */
  | "none";
 /** MCP tool the agent should invoke for `nextAction`, when applicable. */
@@ -70,7 +81,14 @@ export type SuggestedTool = "percher_login" | "percher_env_set" | "percher_deplo
  | "percher_redeploy"
 /** FUTURE1 Phase 4.2 — percher_reproduce tool, surfaced via
  *  alternativeActions on build-failure recovery. */
- | "percher_reproduce";
+ | "percher_reproduce"
+/**
+ * FUTURE16 Fas 3 — short-polls a pre-fetched device-code and resumes
+ * the original publish input once a token lands. Pairs with the
+ * `wait_auth` recovery action and the `auth_pending` publish status.
+ * MCP-only tool — CLI's `percher login` already polls in-process.
+ */
+ | "percher_wait_for_auth";
 /**
  * FUTURE12 Phase 1a — stable, enumerated reason an agent or human can
  * branch on. Intentionally orthogonal to `RecoveryAction`: action says
@@ -135,6 +153,26 @@ export type ReasonCode =
  | "log_fetch_failed"
 /** Deploy died before the build phase started (e.g. tarball validation). */
  | "failed_before_build"
+/** FUTURE_app-suspension-lift Fas 3. App was suspended by admin
+ *  moderation (or by the failure-loop guard when the new
+ *  lift-via-publish flow is enabled). The recovery prompt + the
+ *  client error's `extra` block carry `liftAfter` (ISO timestamp
+ *  or null), `liftableNow` (bool), `canLiftViaPublish` (bool),
+ *  and `fixInstructions` (string or null). Agents should:
+ *    - if `canLiftViaPublish && liftableNow` → ask the user to
+ *      fix per `fixInstructions` then retry publish (a successful
+ *      deploy auto-clears the suspension);
+ *    - if `canLiftViaPublish && !liftableNow` → surface the
+ *      countdown to `liftAfter` verbatim, don't retry sooner;
+ *    - otherwise → contact-support path (existing behaviour). */
+ | "app_suspended"
+/** FUTURE_account-deletion-guards Fas 4. percher_account_delete
+ *  pre-flighted percher_account_deletion_preview and got back a
+ *  non-empty blocker list (apps_owned, apps_with_collaborators,
+ *  pending_outgoing_transfers, deploys_in_progress, etc.). The agent
+ *  must surface `recovery.prompt` verbatim and let the user resolve
+ *  the blockers via the existing routes before retrying. */
+ | "account_deletion_blocked"
 /** Catch-all for unclassified state — agents should route to doctor. */
  | "unknown";
 /**
@@ -152,7 +190,18 @@ export type DoctorMode = "auto" | "deploy" | "runtime" | "config" | "env" | "acc
  * deploy. Pinning the value here so the CLI/MCP can declare exhaustive
  * switches before the server path lands.
  */
-export type PublishStatus = "live" | "failed" | "needs_login" | "dry_run" | "queued" | "replaced" | "already_in_progress";
+export type PublishStatus = "live" | "failed" | "needs_login"
+/**
+ * FUTURE16 Fas 3 — MCP `percher_publish` returns this when the
+ * caller's session has no token AND a device-code has already been
+ * pre-fetched. The agent's next step is `percher_wait_for_auth`
+ * (carried in `recovery`); the tarball has NOT been packed yet, so
+ * the resume call is the first and only packaging operation in the
+ * entire auth flow. CLI uses the existing `needs_login` path —
+ * `auth_pending` is MCP-specific because only a long-lived agent
+ * session benefits from the pre-fetch + in-process poll split.
+ */
+ | "auth_pending" | "dry_run" | "queued" | "replaced" | "already_in_progress";
 /**
  * Structured problem entry used by `fix_config` and `fix_problems`
  * recoveries. Agents apply file edits directly using these.
@@ -199,7 +248,14 @@ interface BaseRecovery {
  * Phase 4 migrates it to `run_doctor`.
  */
 export interface ToolRecovery extends BaseRecovery {
-    nextAction: "open_login" | "wait_deploy" | "run_doctor" | "set_env_vars" | "retry" | "inspect_build_log";
+    nextAction: "open_login" | "wait_deploy" | "run_doctor" | "set_env_vars" | "retry" | "inspect_build_log"
+    /**
+     * FUTURE16 Fas 3 — short-poll a pre-fetched device-code via
+     * `percher_wait_for_auth`. `args` carries `{ deviceCode,
+     * publishArgs }` so the agent can resume the original publish
+     * call without re-deriving inputs.
+     */
+     | "wait_auth";
     suggestedTool: SuggestedTool;
     args: Record<string, unknown>;
 }
@@ -241,6 +297,20 @@ export declare function recoveryNone(opts?: {
 export declare function recoveryLogin(opts?: {
     reasonCode?: ReasonCode;
 }): ToolRecovery;
+/**
+ * FUTURE16 Fas 3 — pre-fetched device-code is in-flight; agent should
+ * call `percher_wait_for_auth` to short-poll the exchange and resume
+ * publish once a token lands. `publishArgs` carries the *raw user
+ * input flags* (cwd is implicit on ctx; preview/live/message/dryRun/
+ * etc. ride here) so the resume call is a first-time publish — no
+ * tarball state is preserved across the wait, no upload state to
+ * invalidate. That's the entire point of pre-fetch + in-process poll
+ * over the alternative anonymous-staged-tarball design (see plan).
+ */
+export declare function recoveryAuthPending(opts: {
+    deviceCode: string;
+    publishArgs: Record<string, unknown>;
+}): ToolRecovery;
 /** Wait on an in-flight deploy — agent should call `percher_wait_for_deploy`. */
 export declare function recoveryWait(opts: {
     app: string;

package/dist/recovery.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"recovery.d.ts","sourceRoot":"","sources":["../src/recovery.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAEpD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAErD;;;;;;GAMG;AACH,MAAM,MAAM,cAAc;AACxB,kEAAkE;AAChE,YAAY;AACd,iEAAiE;GAC/D,cAAc;AAChB;;;;GAIG;GACD,aAAa;AACf,qEAAqE;GACnE,OAAO;AACT;;;;;;;GAOG;GACD,YAAY;AACd,mFAAmF;GACjF,mBAAmB;AACrB;;;;;GAKG;GACD,cAAc;AAChB;;;;;;;;GAQG;GACD,mBAAmB;AACrB,+EAA+E;GAC7E,YAAY;AACd,sFAAsF;GACpF,UAAU;AACZ,iDAAiD;GAC/C,MAAM,CAAC;AAEX,0EAA0E;AAC1E,MAAM,MAAM,aAAa,GACrB,eAAe,GACf,iBAAiB,GACjB,yBAAyB,GACzB,iBAAiB;AACnB,kFAAkF;GAChF,yBAAyB;AAC3B;;;;GAIG;GACD,gBAAgB;AAClB;;qDAEqD;GACnD,kBAAkB;AACpB;oDACoD;GAClD,mBAAmB,CAAC;AAExB;;;;;;;;;GASG;AACH,MAAM,MAAM,UAAU;AACpB,0DAA0D;AACxD,MAAM;AACR,0EAA0E;GACxE,eAAe;AACjB,+DAA+D;GAC7D,eAAe;AACjB,4DAA4D;GAC1D,gBAAgB;AAClB,0DAA0D;GACxD,gBAAgB;AAClB,gFAAgF;GAC9E,sBAAsB;AACxB,yEAAyE;GACvE,oBAAoB;AACtB;4CAC4C;GAC1C,sBAAsB;AACxB,oEAAoE;GAClE,YAAY;AACd,qEAAqE;GACnE,eAAe;AACjB,0CAA0C;GACxC,iBAAiB;AACnB,+DAA+D;GAC7D,kBAAkB;AACpB,oEAAoE;GAClE,gBAAgB;AAClB,4EAA4E;GAC1E,gBAAgB;AAClB,yEAAyE;GACvE,4BAA4B;AAC9B,qDAAqD;GACnD,mBAAmB;AACrB,oDAAoD;GAClD,aAAa;AACf,0EAA0E;GACxE,cAAc;AAChB,uDAAuD;GACrD,iBAAiB;AACnB,wDAAwD;GACtD,gBAAgB;AAClB,8EAA8E;GAC5E,qBAAqB;AACvB,mEAAmE;GACjE,iBAAiB;AACnB,iEAAiE;GAC/D,mBAAmB;AACrB,yDAAyD;GACvD,qBAAqB;AACvB,iEAAiE;GAC/D,kBAAkB;AACpB,4EAA4E;GAC1E,qBAAqB;AACvB,wEAAwE;GACtE,SAAS,CAAC;AAEd;;;;;GAKG;AACH,MAAM,MAAM,UAAU,GAAG,MAAM,GAAG,QAAQ,GAAG,SAAS,GAAG,QAAQ,GAAG,KAAK,GAAG,SAAS,CAAC;AAEtF;;;;;;;GAOG;AACH,MAAM,MAAM,aAAa,GACrB,MAAM,GACN,QAAQ,GACR,aAAa,GACb,SAAS,GACT,QAAQ,GACR,UAAU,GACV,qBAAqB,CAAC;AAE1B;;;GAGG;AACH,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,oEAAoE;AACpE,MAAM,WAAW,mBAAmB;IAClC,MAAM,EAAE,cAAc,CAAC;IACvB,aAAa,CAAC,EAAE,aAAa,CAAC;IAC9B,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC/B,2DAA2D;IAC3D,IAAI,EAAE,MAAM,CAAC;CACd;AAED,8CAA8C;AAC9C,UAAU,YAAY;IACpB,yEAAyE;IACzE,SAAS,EAAE,OAAO,CAAC;IACnB;;;;;OAKG;IACH,UAAU,EAAE,UAAU,CAAC;IACvB;;;;;;;OAOG;IACH,kBAAkB,CAAC,EAAE,mBAAmB,EAAE,CAAC;CAC5C;AAED;;;;;GAKG;AACH,MAAM,WAAW,YAAa,SAAQ,YAAY;IAChD,UAAU,EACN,YAAY,GACZ,aAAa,GACb,YAAY,GACZ,cAAc,GACd,OAAO,GACP,mBAAmB,CAAC;IACxB,aAAa,EAAE,aAAa,CAAC;IAC7B,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC/B;AAED;;;GAGG;AACH,MAAM,WAAW,YAAa,SAAQ,YAAY;IAChD,UAAU,EAAE,YAAY,GAAG,cAAc,CAAC;IAC1C,QAAQ,EAAE,eAAe,EAAE,CAAC;CAC7B;AAED,mFAAmF;AACnF,MAAM,WAAW,YAAa,SAAQ,YAAY;IAChD,UAAU,EAAE,MAAM,CAAC;IACnB,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED,qFAAqF;AACrF,MAAM,WAAW,eAAgB,SAAQ,YAAY;IACnD,UAAU,EAAE,UAAU,CAAC;IACvB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;CACpB;AAED;;;;;;;;GAQG;AACH,MAAM,MAAM,eAAe,GAAG,YAAY,GAAG,YAAY,GAAG,YAAY,GAAG,eAAe,CAAC;AAS3F,0EAA0E;AAC1E,wBAAgB,YAAY,CAAC,IAAI,GAAE;IAAE,UAAU,CAAC,EAAE,UAAU,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,CAAA;CAAO,GAAG,YAAY,CAO/F;AAED,mEAAmE;AACnE,wBAAgB,aAAa,CAAC,IAAI,GAAE;IAAE,UAAU,CAAC,EAAE,UAAU,CAAA;CAAO,GAAG,YAAY,CAQlF;AAED,iFAAiF;AACjF,wBAAgB,YAAY,CAAC,IAAI,EAAE;IACjC,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,EAAE,MAAM,CAAC;IACjB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,UAAU,EAAE,UAAU,CAAC;CACxB,GAAG,YAAY,CAYf;AAED,+EAA+E;AAC/E,wBAAgB,cAAc,CAAC,IAAI,EAAE;IACnC,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,IAAI,CAAC,EAAE,UAAU,CAAC;IAClB,UAAU,EAAE,UAAU,CAAC;IACvB,kBAAkB,CAAC,EAAE,mBAAmB,EAAE,CAAC;CAC5C,GAAG,YAAY,CAef;AAED,0EAA0E;AAC1E,wBAAgB,WAAW,CAAC,IAAI,EAAE;IAChC,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,UAAU,CAAC,EAAE,UAAU,CAAC;CACzB,GAAG,YAAY,CAWf;AAED;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE;IACtC,QAAQ,EAAE,eAAe,EAAE,CAAC;IAC5B,UAAU,CAAC,EAAE,UAAU,CAAC;CACzB,GAAG,YAAY,CAOf;AAED;;;GAGG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE;IACxC,QAAQ,EAAE,eAAe,EAAE,CAAC;IAC5B,UAAU,CAAC,EAAE,UAAU,CAAC;IACxB,kBAAkB,CAAC,EAAE,mBAAmB,EAAE,CAAC;CAC5C,GAAG,YAAY,CAUf;AAED,kEAAkE;AAClE,wBAAgB,aAAa,CAAC,IAAI,EAAE;IAClC,aAAa,EAAE,aAAa,CAAC;IAC7B,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC9B,UAAU,EAAE,UAAU,CAAC;CACxB,GAAG,YAAY,CAQf;AAED;;;;GAIG;AACH,wBAAgB,WAAW,CAAC,IAAI,EAAE;IAChC,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB,UAAU,EAAE,UAAU,CAAC;IACvB,SAAS,CAAC,EAAE,OAAO,CAAC;CACrB,GAAG,eAAe,CAWlB;AAED;;;;GAIG;AACH,wBAAgB,uBAAuB,CAAC,IAAI,EAAE;IAC5C,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,UAAU,CAAC;IACxB,kBAAkB,CAAC,EAAE,mBAAmB,EAAE,CAAC;CAC5C,GAAG,YAAY,CAcf;AAQD,oCAAoC;AACpC,eAAO,MAAM,aAAa,EAAE,YAA6B,CAAC;AAE1D,6CAA6C;AAC7C,eAAO,MAAM,oBAAoB,EAAE,YAA8B,CAAC;AAElE,UAAU,cAAc;IACtB,+DAA+D;IAC/D,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IAC1B,6EAA6E;IAC7E,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,+EAA+E;IAC/E,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;;OAGG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACvC;;;;;OAKG;IACH,QAAQ,CAAC,EAAE,YAAY,EAAE,CAAC;CAC3B;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,6BAA6B,CAAC,CAAC,EAAE,YAAY,GAAG,eAAe,CAW9E;AAED;;;;GAIG;AACH,wBAAgB,sBAAsB,CACpC,UAAU,EAAE,UAAU,EACtB,OAAO,GAAE,cAAmB,GAC3B,eAAe,CAoHjB"}
+{"version":3,"file":"recovery.d.ts","sourceRoot":"","sources":["../src/recovery.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAEpD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAErD;;;;;;GAMG;AACH,MAAM,MAAM,cAAc;AACxB,kEAAkE;AAChE,YAAY;AACd,iEAAiE;GAC/D,cAAc;AAChB;;;;GAIG;GACD,aAAa;AACf,qEAAqE;GACnE,OAAO;AACT;;;;;;;GAOG;GACD,YAAY;AACd,mFAAmF;GACjF,mBAAmB;AACrB;;;;;GAKG;GACD,cAAc;AAChB;;;;;;;;GAQG;GACD,mBAAmB;AACrB,+EAA+E;GAC7E,YAAY;AACd,sFAAsF;GACpF,UAAU;AACZ;;;;;;;;;GASG;GACD,WAAW;AACb,iDAAiD;GAC/C,MAAM,CAAC;AAEX,0EAA0E;AAC1E,MAAM,MAAM,aAAa,GACrB,eAAe,GACf,iBAAiB,GACjB,yBAAyB,GACzB,iBAAiB;AACnB,kFAAkF;GAChF,yBAAyB;AAC3B;;;;GAIG;GACD,gBAAgB;AAClB;;qDAEqD;GACnD,kBAAkB;AACpB;oDACoD;GAClD,mBAAmB;AACrB;;;;;GAKG;GACD,uBAAuB,CAAC;AAE5B;;;;;;;;;GASG;AACH,MAAM,MAAM,UAAU;AACpB,0DAA0D;AACxD,MAAM;AACR,0EAA0E;GACxE,eAAe;AACjB,+DAA+D;GAC7D,eAAe;AACjB,4DAA4D;GAC1D,gBAAgB;AAClB,0DAA0D;GACxD,gBAAgB;AAClB,gFAAgF;GAC9E,sBAAsB;AACxB,yEAAyE;GACvE,oBAAoB;AACtB;4CAC4C;GAC1C,sBAAsB;AACxB,oEAAoE;GAClE,YAAY;AACd,qEAAqE;GACnE,eAAe;AACjB,0CAA0C;GACxC,iBAAiB;AACnB,+DAA+D;GAC7D,kBAAkB;AACpB,oEAAoE;GAClE,gBAAgB;AAClB,4EAA4E;GAC1E,gBAAgB;AAClB,yEAAyE;GACvE,4BAA4B;AAC9B,qDAAqD;GACnD,mBAAmB;AACrB,oDAAoD;GAClD,aAAa;AACf,0EAA0E;GACxE,cAAc;AAChB,uDAAuD;GACrD,iBAAiB;AACnB,wDAAwD;GACtD,gBAAgB;AAClB,8EAA8E;GAC5E,qBAAqB;AACvB,mEAAmE;GACjE,iBAAiB;AACnB,iEAAiE;GAC/D,mBAAmB;AACrB,yDAAyD;GACvD,qBAAqB;AACvB,iEAAiE;GAC/D,kBAAkB;AACpB,4EAA4E;GAC1E,qBAAqB;AACvB;;;;;;;;;;;iEAWiE;GAC/D,eAAe;AACjB;;;;;4DAK4D;GAC1D,0BAA0B;AAC5B,wEAAwE;GACtE,SAAS,CAAC;AAEd;;;;;GAKG;AACH,MAAM,MAAM,UAAU,GAAG,MAAM,GAAG,QAAQ,GAAG,SAAS,GAAG,QAAQ,GAAG,KAAK,GAAG,SAAS,CAAC;AAEtF;;;;;;;GAOG;AACH,MAAM,MAAM,aAAa,GACrB,MAAM,GACN,QAAQ,GACR,aAAa;AACf;;;;;;;;;GASG;GACD,cAAc,GACd,SAAS,GACT,QAAQ,GACR,UAAU,GACV,qBAAqB,CAAC;AAE1B;;;GAGG;AACH,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,oEAAoE;AACpE,MAAM,WAAW,mBAAmB;IAClC,MAAM,EAAE,cAAc,CAAC;IACvB,aAAa,CAAC,EAAE,aAAa,CAAC;IAC9B,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC/B,2DAA2D;IAC3D,IAAI,EAAE,MAAM,CAAC;CACd;AAED,8CAA8C;AAC9C,UAAU,YAAY;IACpB,yEAAyE;IACzE,SAAS,EAAE,OAAO,CAAC;IACnB;;;;;OAKG;IACH,UAAU,EAAE,UAAU,CAAC;IACvB;;;;;;;OAOG;IACH,kBAAkB,CAAC,EAAE,mBAAmB,EAAE,CAAC;CAC5C;AAED;;;;;GAKG;AACH,MAAM,WAAW,YAAa,SAAQ,YAAY;IAChD,UAAU,EACN,YAAY,GACZ,aAAa,GACb,YAAY,GACZ,cAAc,GACd,OAAO,GACP,mBAAmB;IACrB;;;;;OAKG;OACD,WAAW,CAAC;IAChB,aAAa,EAAE,aAAa,CAAC;IAC7B,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC/B;AAED;;;GAGG;AACH,MAAM,WAAW,YAAa,SAAQ,YAAY;IAChD,UAAU,EAAE,YAAY,GAAG,cAAc,CAAC;IAC1C,QAAQ,EAAE,eAAe,EAAE,CAAC;CAC7B;AAED,mFAAmF;AACnF,MAAM,WAAW,YAAa,SAAQ,YAAY;IAChD,UAAU,EAAE,MAAM,CAAC;IACnB,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED,qFAAqF;AACrF,MAAM,WAAW,eAAgB,SAAQ,YAAY;IACnD,UAAU,EAAE,UAAU,CAAC;IACvB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;CACpB;AAED;;;;;;;;GAQG;AACH,MAAM,MAAM,eAAe,GAAG,YAAY,GAAG,YAAY,GAAG,YAAY,GAAG,eAAe,CAAC;AAS3F,0EAA0E;AAC1E,wBAAgB,YAAY,CAAC,IAAI,GAAE;IAAE,UAAU,CAAC,EAAE,UAAU,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,CAAA;CAAO,GAAG,YAAY,CAO/F;AAED,mEAAmE;AACnE,wBAAgB,aAAa,CAAC,IAAI,GAAE;IAAE,UAAU,CAAC,EAAE,UAAU,CAAA;CAAO,GAAG,YAAY,CAQlF;AAED;;;;;;;;;GASG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE;IACxC,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACtC,GAAG,YAAY,CAWf;AAED,iFAAiF;AACjF,wBAAgB,YAAY,CAAC,IAAI,EAAE;IACjC,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,EAAE,MAAM,CAAC;IACjB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,UAAU,EAAE,UAAU,CAAC;CACxB,GAAG,YAAY,CAYf;AAED,+EAA+E;AAC/E,wBAAgB,cAAc,CAAC,IAAI,EAAE;IACnC,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,IAAI,CAAC,EAAE,UAAU,CAAC;IAClB,UAAU,EAAE,UAAU,CAAC;IACvB,kBAAkB,CAAC,EAAE,mBAAmB,EAAE,CAAC;CAC5C,GAAG,YAAY,CAef;AAED,0EAA0E;AAC1E,wBAAgB,WAAW,CAAC,IAAI,EAAE;IAChC,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,UAAU,CAAC,EAAE,UAAU,CAAC;CACzB,GAAG,YAAY,CAWf;AAED;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE;IACtC,QAAQ,EAAE,eAAe,EAAE,CAAC;IAC5B,UAAU,CAAC,EAAE,UAAU,CAAC;CACzB,GAAG,YAAY,CAOf;AAED;;;GAGG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE;IACxC,QAAQ,EAAE,eAAe,EAAE,CAAC;IAC5B,UAAU,CAAC,EAAE,UAAU,CAAC;IACxB,kBAAkB,CAAC,EAAE,mBAAmB,EAAE,CAAC;CAC5C,GAAG,YAAY,CAUf;AAED,kEAAkE;AAClE,wBAAgB,aAAa,CAAC,IAAI,EAAE;IAClC,aAAa,EAAE,aAAa,CAAC;IAC7B,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC9B,UAAU,EAAE,UAAU,CAAC;CACxB,GAAG,YAAY,CAQf;AAED;;;;GAIG;AACH,wBAAgB,WAAW,CAAC,IAAI,EAAE;IAChC,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB,UAAU,EAAE,UAAU,CAAC;IACvB,SAAS,CAAC,EAAE,OAAO,CAAC;CACrB,GAAG,eAAe,CAWlB;AAED;;;;GAIG;AACH,wBAAgB,uBAAuB,CAAC,IAAI,EAAE;IAC5C,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,UAAU,CAAC;IACxB,kBAAkB,CAAC,EAAE,mBAAmB,EAAE,CAAC;CAC5C,GAAG,YAAY,CAcf;AAQD,oCAAoC;AACpC,eAAO,MAAM,aAAa,EAAE,YAA6B,CAAC;AAE1D,6CAA6C;AAC7C,eAAO,MAAM,oBAAoB,EAAE,YAA8B,CAAC;AAElE,UAAU,cAAc;IACtB,+DAA+D;IAC/D,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IAC1B,6EAA6E;IAC7E,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,+EAA+E;IAC/E,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;;OAGG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACvC;;;;;OAKG;IACH,QAAQ,CAAC,EAAE,YAAY,EAAE,CAAC;CAC3B;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,6BAA6B,CAAC,CAAC,EAAE,YAAY,GAAG,eAAe,CAW9E;AAED;;;;GAIG;AACH,wBAAgB,sBAAsB,CACpC,UAAU,EAAE,UAAU,EACtB,OAAO,GAAE,cAAmB,GAC3B,eAAe,CAmIjB"}

package/dist/recovery.js

@@ -24,6 +24,28 @@ export function recoveryLogin(opts = {}) {
         reasonCode: opts.reasonCode ?? "auth_required",
     };
 }
+/**
+ * FUTURE16 Fas 3 — pre-fetched device-code is in-flight; agent should
+ * call `percher_wait_for_auth` to short-poll the exchange and resume
+ * publish once a token lands. `publishArgs` carries the *raw user
+ * input flags* (cwd is implicit on ctx; preview/live/message/dryRun/
+ * etc. ride here) so the resume call is a first-time publish — no
+ * tarball state is preserved across the wait, no upload state to
+ * invalidate. That's the entire point of pre-fetch + in-process poll
+ * over the alternative anonymous-staged-tarball design (see plan).
+ */
+export function recoveryAuthPending(opts) {
+    return {
+        retryable: false,
+        nextAction: "wait_auth",
+        suggestedTool: "percher_wait_for_auth",
+        args: {
+            deviceCode: opts.deviceCode,
+            publishArgs: opts.publishArgs,
+        },
+        reasonCode: "auth_required",
+    };
+}
 /** Wait on an in-flight deploy — agent should call `percher_wait_for_deploy`. */
 export function recoveryWait(opts) {
     return {
@@ -200,6 +222,20 @@ export function recoveryFromErrorClass(errorClass, failure = {}) {
                 args: failure.publishInput ?? {},
                 reasonCode: "infra_unavailable",
             });
+        case "platform_at_capacity":
+            // Track A — A1: a box-admission rejection is a transient platform-side
+            // limit (the host is full right now), not the app's fault. Hand the
+            // agent the same retry recovery as infra_unavailable so it re-issues
+            // the publish once capacity frees up, instead of falling through to
+            // the generic ask_user/doctor path. reasonCode `infra_transient`
+            // (retryable) keeps it distinct from a hard infra outage. The
+            // failure-loop guard already excludes this class (A2), so retries
+            // won't trip auto-suspension.
+            return recoveryRetry({
+                suggestedTool: "percher_publish",
+                args: failure.publishInput ?? {},
+                reasonCode: "infra_transient",
+            });
         case "config_invalid":
             return recoveryFixConfig({
                 problems: [