@pushto/cli 0.2.0 → 0.4.6

package/dist/lib/config.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../src/lib/config.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,MAAM,CAAC;AAExB,UAAU,YAAY;IACpB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,eAAO,MAAM,MAAM,oBAKjB,CAAC;AAEH,eAAO,MAAM,QAAQ,QAAO,MAAM,GAAG,SAAgC,CAAC;AACtE,eAAO,MAAM,eAAe,QAAO,MAAM,GAAG,SAAuC,CAAC;AAEpF,eAAO,MAAM,QAAQ,GAAI,OAAO,MAAM,EAAE,eAAe,MAAM,KAAG,IAG/D,CAAC;AAEF,eAAO,MAAM,UAAU,QAAO,IAG7B,CAAC;AAEF,eAAO,MAAM,cAAc,QAAO,MAAM,GAAG,SAAsC,CAAC;AAElF,eAAO,MAAM,cAAc,GAAI,MAAM,MAAM,KAAG,IAE7C,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,cAAc,QAAO,OAYjC,CAAC"}
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../src/lib/config.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,MAAM,CAAC;AAExB,UAAU,YAAY;IACpB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,eAAO,MAAM,MAAM,oBAKjB,CAAC;AAEH;;;;;GAKG;AACH,eAAO,MAAM,QAAQ,QAAO,MAAM,GAAG,SAA4D,CAAC;AAClG,eAAO,MAAM,eAAe,QAAO,MAAM,GAAG,SAAuC,CAAC;AAEpF,eAAO,MAAM,QAAQ,GAAI,OAAO,MAAM,EAAE,eAAe,MAAM,KAAG,IAG/D,CAAC;AAEF,eAAO,MAAM,UAAU,QAAO,IAG7B,CAAC;AAEF,eAAO,MAAM,cAAc,QAAO,MAAM,GAAG,SAAsC,CAAC;AAElF,eAAO,MAAM,cAAc,GAAI,MAAM,MAAM,KAAG,IAE7C,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,cAAc,QAAO,OAejC,CAAC"}

package/dist/lib/config.js

@@ -5,7 +5,13 @@ export const config = new Conf({
         apiUrl: 'https://pushto.host',
     },
 });
-export const getToken = () => config.get('token');
+/**
+ * PUSHTO_TOKEN wins over stored config so a headless caller never has to run
+ * the browser login flow. An empty value is treated as unset, so
+ * `PUSHTO_TOKEN= pushto deploy` falls back rather than authenticating as "".
+ * This is also the bootstrap path for MCP auth, which expects a bearer token.
+ */
+export const getToken = () => process.env.PUSHTO_TOKEN || config.get('token');
 export const getRefreshToken = () => config.get('refreshToken');
 export const setToken = (token, refreshToken) => {
     config.set('token', token);
@@ -29,8 +35,13 @@ export const isTokenExpired = () => {
     if (!token)
         return true;
     try {
-        const payload = JSON.parse(Buffer.from(token.split('.')[1], 'base64').toString());
+        const parts = token.split('.');
+        if (parts.length < 2 || !parts[1])
+            return true;
+        const payload = JSON.parse(Buffer.from(parts[1], 'base64').toString());
         const exp = payload.exp;
+        if (typeof exp !== 'number')
+            return true;
         // Refresh 60 seconds before actual expiry
         return Date.now() / 1000 > exp - 60;
     }

package/dist/lib/config.js.map

@@ -1 +1 @@
-{"version":3,"file":"config.js","sourceRoot":"","sources":["../../src/lib/config.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,MAAM,CAAC;AASxB,MAAM,CAAC,MAAM,MAAM,GAAG,IAAI,IAAI,CAAe;IAC3C,WAAW,EAAE,QAAQ;IACrB,QAAQ,EAAE;QACR,MAAM,EAAE,qBAAqB;KAC9B;CACF,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,QAAQ,GAAG,GAAuB,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;AACtE,MAAM,CAAC,MAAM,eAAe,GAAG,GAAuB,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;AAEpF,MAAM,CAAC,MAAM,QAAQ,GAAG,CAAC,KAAa,EAAE,YAAqB,EAAQ,EAAE;IACrE,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IAC3B,IAAI,YAAY;QAAE,MAAM,CAAC,GAAG,CAAC,cAAc,EAAE,YAAY,CAAC,CAAC;AAC7D,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,UAAU,GAAG,GAAS,EAAE;IACnC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACvB,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;AAChC,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,cAAc,GAAG,GAAuB,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;AAElF,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,IAAY,EAAQ,EAAE;IACnD,MAAM,CAAC,GAAG,CAAC,aAAa,EAAE,IAAI,CAAC,CAAC;AAClC,CAAC,CAAC;AAEF;;;GAGG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,GAAY,EAAE;IAC1C,MAAM,KAAK,GAAG,QAAQ,EAAE,CAAC;IACzB,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IAExB,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;QAClF,MAAM,GAAG,GAAG,OAAO,CAAC,GAAa,CAAC;QAClC,0CAA0C;QAC1C,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,GAAG,GAAG,GAAG,EAAE,CAAC;IACtC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC,CAAC"}
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../../src/lib/config.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,MAAM,CAAC;AASxB,MAAM,CAAC,MAAM,MAAM,GAAG,IAAI,IAAI,CAAe;IAC3C,WAAW,EAAE,QAAQ;IACrB,QAAQ,EAAE;QACR,MAAM,EAAE,qBAAqB;KAC9B;CACF,CAAC,CAAC;AAEH;;;;;GAKG;AACH,MAAM,CAAC,MAAM,QAAQ,GAAG,GAAuB,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;AAClG,MAAM,CAAC,MAAM,eAAe,GAAG,GAAuB,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;AAEpF,MAAM,CAAC,MAAM,QAAQ,GAAG,CAAC,KAAa,EAAE,YAAqB,EAAQ,EAAE;IACrE,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IAC3B,IAAI,YAAY;QAAE,MAAM,CAAC,GAAG,CAAC,cAAc,EAAE,YAAY,CAAC,CAAC;AAC7D,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,UAAU,GAAG,GAAS,EAAE;IACnC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACvB,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;AAChC,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,cAAc,GAAG,GAAuB,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;AAElF,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,IAAY,EAAQ,EAAE;IACnD,MAAM,CAAC,GAAG,CAAC,aAAa,EAAE,IAAI,CAAC,CAAC;AAClC,CAAC,CAAC;AAEF;;;GAGG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,GAAY,EAAE;IAC1C,MAAM,KAAK,GAAG,QAAQ,EAAE,CAAC;IACzB,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IAExB,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC/B,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC;QAC/C,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;QACvE,MAAM,GAAG,GAAG,OAAO,CAAC,GAAa,CAAC;QAClC,IAAI,OAAO,GAAG,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC;QACzC,0CAA0C;QAC1C,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,GAAG,GAAG,GAAG,EAAE,CAAC;IACtC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC,CAAC"}

package/dist/lib/cron-tail.d.ts

@@ -0,0 +1,10 @@
+/**
+ * Follow-loop primitive for `pushto cron tail`: the history endpoint
+ * returns newest-first, a live tail prints unseen rows oldest-first.
+ */
+export interface TailExecution {
+    id: string;
+    executedAt: string;
+}
+export declare const selectNewExecutions: <T extends TailExecution>(seen: Set<string>, executions: T[]) => T[];
+//# sourceMappingURL=cron-tail.d.ts.map

package/dist/lib/cron-tail.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cron-tail.d.ts","sourceRoot":"","sources":["../../src/lib/cron-tail.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,MAAM,WAAW,aAAa;IAC5B,EAAE,EAAE,MAAM,CAAC;IACX,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,eAAO,MAAM,mBAAmB,GAAI,CAAC,SAAS,aAAa,EACzD,MAAM,GAAG,CAAC,MAAM,CAAC,EACjB,YAAY,CAAC,EAAE,KACd,CAAC,EAIoF,CAAC"}

package/dist/lib/cron-tail.js

@@ -0,0 +1,5 @@
+export const selectNewExecutions = (seen, executions) => executions
+    .filter((e) => !seen.has(e.id))
+    .slice()
+    .sort((a, b) => new Date(a.executedAt).getTime() - new Date(b.executedAt).getTime());
+//# sourceMappingURL=cron-tail.js.map

package/dist/lib/cron-tail.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cron-tail.js","sourceRoot":"","sources":["../../src/lib/cron-tail.ts"],"names":[],"mappings":"AASA,MAAM,CAAC,MAAM,mBAAmB,GAAG,CACjC,IAAiB,EACjB,UAAe,EACV,EAAE,CACP,UAAU;KACP,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;KAC9B,KAAK,EAAE;KACP,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,OAAO,EAAE,GAAG,IAAI,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC"}

package/dist/lib/detect-static-framework.d.ts

@@ -0,0 +1,31 @@
+/**
+ * CLI-side detection for static-output frameworks — the ones `pushto`
+ * builds locally and ships as an artifact (spec: docs/superpowers/specs/
+ * 2026-07-10-static-build-pipeline-design.md).
+ *
+ * This table deliberately does NOT import @pushto/shared: the published
+ * CLI ships standalone (npm + Homebrew Bun-compile). The shared
+ * FRAMEWORK_TABLE in packages/shared/src/constants.ts is the truth; a
+ * sync test in apps/web/__tests__/frameworks-docs-sync.test.ts fails CI
+ * if the two drift.
+ */
+export interface CliFrameworkEntry {
+    id: 'vite' | 'astro' | 'gatsby' | 'angular' | 'cra' | 'eleventy';
+    deps: readonly string[];
+    configFiles: readonly string[];
+    outputDirs: readonly string[];
+    spa: boolean;
+    /** `scripts.start` commands that are the framework's OWN dev server
+     *  (stock CRA/Angular/Gatsby/Eleventy scaffolds all ship one). Mirrors
+     *  packages/shared/src/constants.ts's FrameworkEntry.devStartCommands —
+     *  the sync test compares the two field-for-field. */
+    devStartCommands: readonly string[];
+}
+export declare const STATIC_BUILD_FRAMEWORKS: readonly CliFrameworkEntry[];
+export interface StaticFrameworkDetection {
+    framework: CliFrameworkEntry['id'];
+    spa: boolean;
+    outputDirs: string[];
+}
+export declare const detectStaticFramework: (dir: string) => StaticFrameworkDetection | null;
+//# sourceMappingURL=detect-static-framework.d.ts.map

package/dist/lib/detect-static-framework.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"detect-static-framework.d.ts","sourceRoot":"","sources":["../../src/lib/detect-static-framework.ts"],"names":[],"mappings":"AAGA;;;;;;;;;;GAUG;AAEH,MAAM,WAAW,iBAAiB;IAChC,EAAE,EAAE,MAAM,GAAG,OAAO,GAAG,QAAQ,GAAG,SAAS,GAAG,KAAK,GAAG,UAAU,CAAC;IACjE,IAAI,EAAE,SAAS,MAAM,EAAE,CAAC;IACxB,WAAW,EAAE,SAAS,MAAM,EAAE,CAAC;IAC/B,UAAU,EAAE,SAAS,MAAM,EAAE,CAAC;IAC9B,GAAG,EAAE,OAAO,CAAC;IACb;;;0DAGsD;IACtD,gBAAgB,EAAE,SAAS,MAAM,EAAE,CAAC;CACrC;AAMD,eAAO,MAAM,uBAAuB,EAAE,SAAS,iBAAiB,EAOtD,CAAC;AASX,MAAM,WAAW,wBAAwB;IACvC,SAAS,EAAE,iBAAiB,CAAC,IAAI,CAAC,CAAC;IACnC,GAAG,EAAE,OAAO,CAAC;IACb,UAAU,EAAE,MAAM,EAAE,CAAC;CACtB;AAgDD,eAAO,MAAM,qBAAqB,GAAI,KAAK,MAAM,KAAG,wBAAwB,GAAG,IA4C9E,CAAC"}

package/dist/lib/detect-static-framework.js

@@ -0,0 +1,96 @@
+import fs from 'node:fs';
+import path from 'node:path';
+// Order matters: specific frameworks first, the vite catch-all LAST
+// (astro/gatsby/etc. may pull vite in transitively; direct-dep checks
+// keep this unambiguous, but a user adding vite as a sibling devDep
+// must still land on the specific framework).
+export const STATIC_BUILD_FRAMEWORKS = [
+    { id: 'astro', deps: ['astro'], configFiles: [], outputDirs: ['dist'], spa: false, devStartCommands: ['astro dev', 'astro preview'] },
+    { id: 'gatsby', deps: ['gatsby'], configFiles: [], outputDirs: ['public'], spa: false, devStartCommands: ['gatsby develop', 'gatsby serve'] },
+    { id: 'angular', deps: ['@angular/core'], configFiles: ['angular.json'], outputDirs: ['ANGULAR_JSON'], spa: true, devStartCommands: ['ng serve'] },
+    { id: 'cra', deps: ['react-scripts'], configFiles: [], outputDirs: ['build'], spa: true, devStartCommands: ['react-scripts start'] },
+    { id: 'eleventy', deps: ['@11ty/eleventy'], configFiles: [], outputDirs: ['_site'], spa: false, devStartCommands: ['eleventy --serve', 'npx @11ty/eleventy --serve', 'npx eleventy --serve', '@11ty/eleventy --serve'] },
+    { id: 'vite', deps: ['vite'], configFiles: ['vite.config.js', 'vite.config.ts', 'vite.config.mjs', 'vite.config.mts'], outputDirs: ['dist'], spa: true, devStartCommands: ['vite', 'vite dev', 'vite preview'] },
+];
+// A dep from this list means the project is SSR-shaped and belongs on
+// the container path even though vite is probably also present.
+const SSR_MARKERS = [
+    'next', 'nuxt', '@sveltejs/kit',
+    '@solidjs/start', 'solid-start',
+];
+const readJson = (file) => {
+    try {
+        // JSON.parse returns any; treat as unknown and narrow field-by-field below
+        return JSON.parse(fs.readFileSync(file, 'utf-8'));
+    }
+    catch {
+        return null;
+    }
+};
+/** Expand angular.json into concrete output-dir candidates. */
+const angularOutputDirs = (dir) => {
+    const parsed = readJson(path.join(dir, 'angular.json'));
+    const projects = parsed && typeof parsed === 'object'
+        ? // Shape probed optionally; every access below is optional-chained, so wrong shape yields undefined
+            parsed.projects
+        : undefined;
+    const name = projects ? Object.keys(projects)[0] : undefined;
+    if (!name)
+        return ['dist'];
+    const project = projects?.[name];
+    const outputPath = project && typeof project === 'object'
+        ? // Shape probed optionally with nested optional chains; wrong structure yields undefined, not a crash
+            (project
+                .architect?.build?.options?.outputPath)
+        : undefined;
+    // outputPath can be a string or (v17 application builder) { base: string }
+    const base = typeof outputPath === 'string'
+        ? outputPath
+        : outputPath && typeof outputPath === 'object' && typeof 
+        // Narrowed to object; check for base property before accessing
+        outputPath.base === 'string'
+            ? // Base is now proven string; safe to cast
+                outputPath.base
+            : `dist/${name}`;
+    return [`${base}/browser`, base];
+};
+export const detectStaticFramework = (dir) => {
+    const pkgPath = path.join(dir, 'package.json');
+    if (!fs.existsSync(pkgPath))
+        return null;
+    const parsed = readJson(pkgPath);
+    if (!parsed || typeof parsed !== 'object')
+        return null;
+    // Proven to be a non-null object above; narrow to PkgJson shape
+    const pkg = parsed;
+    const allDeps = { ...pkg.dependencies, ...pkg.devDependencies };
+    // Tie-breaker 1: SSR frameworks are container-path regardless of scripts.
+    if (SSR_MARKERS.some((d) => d in allDeps) ||
+        Object.keys(allDeps).some((d) => d.startsWith('@remix-run/'))) {
+        return null;
+    }
+    for (const entry of STATIC_BUILD_FRAMEWORKS) {
+        const byDep = entry.deps.some((d) => d in allDeps);
+        const byConfig = entry.configFiles.some((f) => fs.existsSync(path.join(dir, f)));
+        if (!byDep && !byConfig)
+            continue;
+        // Tie-breaker 2: a start script means "this is a server" — UNLESS it's
+        // just the matched framework's own dev server (stock CRA/Angular/
+        // Gatsby/Eleventy scaffolds all ship one; the old rule treated any
+        // start script as dynamic and routed every one of them past the
+        // static-build path). Word-boundary match: the command IS the dev
+        // command, or continues with a space (flags) — `vite-custom-wrapper.js`
+        // must not match `vite`.
+        const rawStart = pkg.scripts?.start;
+        if (rawStart) {
+            const cmd = rawStart.trim();
+            const isOwnDevServer = entry.devStartCommands.some((c) => cmd === c || cmd.startsWith(`${c} `));
+            if (!isOwnDevServer)
+                return null;
+        }
+        const outputDirs = entry.outputDirs[0] === 'ANGULAR_JSON' ? angularOutputDirs(dir) : [...entry.outputDirs];
+        return { framework: entry.id, spa: entry.spa, outputDirs };
+    }
+    return null;
+};
+//# sourceMappingURL=detect-static-framework.js.map

package/dist/lib/detect-static-framework.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"detect-static-framework.js","sourceRoot":"","sources":["../../src/lib/detect-static-framework.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AA2B7B,oEAAoE;AACpE,sEAAsE;AACtE,oEAAoE;AACpE,8CAA8C;AAC9C,MAAM,CAAC,MAAM,uBAAuB,GAAiC;IACnE,EAAE,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,OAAO,CAAC,EAAE,WAAW,EAAE,EAAE,EAAE,UAAU,EAAE,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC,WAAW,EAAE,eAAe,CAAC,EAAE;IACrI,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,QAAQ,CAAC,EAAE,WAAW,EAAE,EAAE,EAAE,UAAU,EAAE,CAAC,QAAQ,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC,gBAAgB,EAAE,cAAc,CAAC,EAAE;IAC7I,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,eAAe,CAAC,EAAE,WAAW,EAAE,CAAC,cAAc,CAAC,EAAE,UAAU,EAAE,CAAC,cAAc,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,gBAAgB,EAAE,CAAC,UAAU,CAAC,EAAE;IAClJ,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,eAAe,CAAC,EAAE,WAAW,EAAE,EAAE,EAAE,UAAU,EAAE,CAAC,OAAO,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,gBAAgB,EAAE,CAAC,qBAAqB,CAAC,EAAE;IACpI,EAAE,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,gBAAgB,CAAC,EAAE,WAAW,EAAE,EAAE,EAAE,UAAU,EAAE,CAAC,OAAO,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC,kBAAkB,EAAE,4BAA4B,EAAE,sBAAsB,EAAE,wBAAwB,CAAC,EAAE;IACxN,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,CAAC,gBAAgB,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,iBAAiB,CAAC,EAAE,UAAU,EAAE,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,gBAAgB,EAAE,CAAC,MAAM,EAAE,UAAU,EAAE,cAAc,CAAC,EAAE;CACxM,CAAC;AAEX,sEAAsE;AACtE,gEAAgE;AAChE,MAAM,WAAW,GAAG;IAClB,MAAM,EAAE,MAAM,EAAE,eAAe;IAC/B,gBAAgB,EAAE,aAAa;CACvB,CAAC;AAcX,MAAM,QAAQ,GAAG,CAAC,IAAY,EAAW,EAAE;IACzC,IAAI,CAAC;QACH,2EAA2E;QAC3E,OAAO,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAY,CAAC;IAC/D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC,CAAC;AAEF,+DAA+D;AAC/D,MAAM,iBAAiB,GAAG,CAAC,GAAW,EAAY,EAAE;IAClD,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC,CAAC;IACxD,MAAM,QAAQ,GACZ,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ;QAClC,CAAC,CAAC,mGAAmG;YAClG,MAAiD,CAAC,QAAQ;QAC7D,CAAC,CAAC,SAAS,CAAC;IAChB,MAAM,IAAI,GAAG,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC7D,IAAI,CAAC,IAAI;QAAE,OAAO,CAAC,MAAM,CAAC,CAAC;IAC3B,MAAM,OAAO,GAAG,QAAQ,EAAE,CAAC,IAAI,CAAC,CAAC;IACjC,MAAM,UAAU,GACd,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ;QACpC,CAAC,CAAC,qGAAqG;YACrG,CAAE,OAA8E;iBAC7E,SAAS,EAAE,KAAK,EAAE,OAAO,EAAE,UAAU,CAAC;QAC3C,CAAC,CAAC,SAAS,CAAC;IAChB,2EAA2E;IAC3E,MAAM,IAAI,GACR,OAAO,UAAU,KAAK,QAAQ;QAC5B,CAAC,CAAC,UAAU;QACZ,CAAC,CAAC,UAAU,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,OAAO;QACrD,+DAA+D;QAC/D,UACD,CAAC,IAAI,KAAK,QAAQ;YACnB,CAAC,CAAC,0CAA0C;gBACzC,UAA+B,CAAC,IAAI;YACvC,CAAC,CAAC,QAAQ,IAAI,EAAE,CAAC;IACvB,OAAO,CAAC,GAAG,IAAI,UAAU,EAAE,IAAI,CAAC,CAAC;AACnC,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,GAAW,EAAmC,EAAE;IACpF,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;IAC/C,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC;QAAE,OAAO,IAAI,CAAC;IACzC,MAAM,MAAM,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC;IACjC,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACvD,gEAAgE;IAChE,MAAM,GAAG,GAAG,MAAiB,CAAC;IAE9B,MAAM,OAAO,GAAG,EAAE,GAAG,GAAG,CAAC,YAAY,EAAE,GAAG,GAAG,CAAC,eAAe,EAAE,CAAC;IAEhE,0EAA0E;IAC1E,IACE,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,OAAO,CAAC;QACrC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC,EAC7D,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,KAAK,MAAM,KAAK,IAAI,uBAAuB,EAAE,CAAC;QAC5C,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,OAAO,CAAC,CAAC;QACnD,MAAM,QAAQ,GAAG,KAAK,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QACjF,IAAI,CAAC,KAAK,IAAI,CAAC,QAAQ;YAAE,SAAS;QAElC,uEAAuE;QACvE,kEAAkE;QAClE,mEAAmE;QACnE,gEAAgE;QAChE,kEAAkE;QAClE,wEAAwE;QACxE,yBAAyB;QACzB,MAAM,QAAQ,GAAG,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC;QACpC,IAAI,QAAQ,EAAE,CAAC;YACb,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC;YAC5B,MAAM,cAAc,GAAG,KAAK,CAAC,gBAAgB,CAAC,IAAI,CAChD,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,KAAK,CAAC,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,CAC5C,CAAC;YACF,IAAI,CAAC,cAAc;gBAAE,OAAO,IAAI,CAAC;QACnC,CAAC;QAED,MAAM,UAAU,GACd,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,cAAc,CAAC,CAAC,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,UAAU,CAAC,CAAC;QAC1F,OAAO,EAAE,SAAS,EAAE,KAAK,CAAC,EAAE,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,UAAU,EAAE,CAAC;IAC7D,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC,CAAC"}

package/dist/lib/env-parse.d.ts

@@ -0,0 +1,48 @@
+/**
+ * Parse a .env file's content into a key/value record.
+ *
+ * Every surface that accepts a .env file speaks through this parser:
+ * `pushto deploy` (auto-import on every deploy), `pushto env push`, and the
+ * dashboard's import box + raw editor. Pre-fix the dashboard hand-rolled its
+ * own parse and the two drifted — `export KEY=value` lines (copied from a
+ * .bashrc) were rejected in the dashboard, and inline comments were stored
+ * INTO the value (`PORT=3000 # default port` saved a value of
+ * `3000 # default port`).
+ *
+ * This file exists twice, byte-identical: apps/cli/src/lib/env-parse.ts and
+ * apps/web/lib/env-parse.ts. The web app can't import from apps/cli, and the
+ * published CLI deliberately carries no workspace deps — a vitest pin
+ * (apps/web/lib/__tests__/env-parse.test.ts) keeps the copies in sync
+ * instead. Edit one, copy to the other, or the pin fails.
+ *
+ * Supports:
+ * - bare assignments:        KEY=value
+ * - `export` prefix:         export KEY=value     ← copied from .bashrc
+ * - quoted values:           KEY="value with spaces"  KEY='single quoted'
+ * - inline trailing comment: PORT=3000 # default port (only when value is unquoted)
+ * - blank lines + #-comments
+ *
+ * Does NOT support (and pushto's server-side validator would reject):
+ * - multi-line quoted values
+ * - escape sequences inside double quotes (treated literally)
+ */
+export type EnvParseSkip = {
+    key: string;
+    reason: string;
+};
+export type EnvParseResult = {
+    vars: Record<string, string>;
+    skipped: EnvParseSkip[];
+};
+/**
+ * Full parse: valid pairs plus a per-line skip list with reasons, so
+ * consumers can tell the user WHICH lines didn't make it and why instead
+ * of importing silently-fewer vars than the file holds.
+ */
+export declare const parseEnvContent: (content: string) => EnvParseResult;
+/**
+ * Record-only view for callers that don't surface skip reasons.
+ * Same parse, skips dropped.
+ */
+export declare const parseEnvFile: (content: string) => Record<string, string>;
+//# sourceMappingURL=env-parse.d.ts.map

package/dist/lib/env-parse.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"env-parse.d.ts","sourceRoot":"","sources":["../../src/lib/env-parse.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAEH,MAAM,MAAM,YAAY,GAAG;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAE3D,MAAM,MAAM,cAAc,GAAG;IAC3B,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC7B,OAAO,EAAE,YAAY,EAAE,CAAC;CACzB,CAAC;AAEF;;;;GAIG;AACH,eAAO,MAAM,eAAe,GAAI,SAAS,MAAM,KAAG,cA4DjD,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,YAAY,GAAI,SAAS,MAAM,KAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CACrC,CAAC"}

package/dist/lib/env-parse.js

@@ -0,0 +1,91 @@
+/**
+ * Parse a .env file's content into a key/value record.
+ *
+ * Every surface that accepts a .env file speaks through this parser:
+ * `pushto deploy` (auto-import on every deploy), `pushto env push`, and the
+ * dashboard's import box + raw editor. Pre-fix the dashboard hand-rolled its
+ * own parse and the two drifted — `export KEY=value` lines (copied from a
+ * .bashrc) were rejected in the dashboard, and inline comments were stored
+ * INTO the value (`PORT=3000 # default port` saved a value of
+ * `3000 # default port`).
+ *
+ * This file exists twice, byte-identical: apps/cli/src/lib/env-parse.ts and
+ * apps/web/lib/env-parse.ts. The web app can't import from apps/cli, and the
+ * published CLI deliberately carries no workspace deps — a vitest pin
+ * (apps/web/lib/__tests__/env-parse.test.ts) keeps the copies in sync
+ * instead. Edit one, copy to the other, or the pin fails.
+ *
+ * Supports:
+ * - bare assignments:        KEY=value
+ * - `export` prefix:         export KEY=value     ← copied from .bashrc
+ * - quoted values:           KEY="value with spaces"  KEY='single quoted'
+ * - inline trailing comment: PORT=3000 # default port (only when value is unquoted)
+ * - blank lines + #-comments
+ *
+ * Does NOT support (and pushto's server-side validator would reject):
+ * - multi-line quoted values
+ * - escape sequences inside double quotes (treated literally)
+ */
+/**
+ * Full parse: valid pairs plus a per-line skip list with reasons, so
+ * consumers can tell the user WHICH lines didn't make it and why instead
+ * of importing silently-fewer vars than the file holds.
+ */
+export const parseEnvContent = (content) => {
+    const vars = {};
+    const skipped = [];
+    const lines = content.split('\n');
+    for (let i = 0; i < lines.length; i++) {
+        let trimmed = lines[i].trim();
+        if (!trimmed || trimmed.startsWith('#'))
+            continue;
+        // Strip the bash-export prefix that people copy from their shell or
+        // .bashrc (`export DATABASE_URL=postgres://...`). Pre-fix this parsed
+        // as key=`export DATABASE_URL` which the server rejects on the
+        // [A-Z_] validator — DATABASE_URL silently never made it remote
+        // despite the success message claiming X vars imported.
+        if (trimmed.startsWith('export ')) {
+            trimmed = trimmed.slice(7).trim();
+        }
+        const eqIdx = trimmed.indexOf('=');
+        if (eqIdx === -1) {
+            skipped.push({ key: `line ${i + 1}`, reason: 'no `=` separator' });
+            continue;
+        }
+        const key = trimmed.slice(0, eqIdx).trim();
+        let value = trimmed.slice(eqIdx + 1).trim();
+        // Strip inline comments AFTER the value (only when not inside quotes).
+        // Common pattern: `PORT=3000 # default port`. The space-before-hash
+        // requirement avoids eating fragments of values that legitimately
+        // contain # (e.g. URLs with fragments, color codes like #ff0000 in
+        // some configs).
+        if (!value.startsWith('"') && !value.startsWith("'")) {
+            const hashIdx = value.indexOf('#');
+            if (hashIdx > 0 && /\s/.test(value[hashIdx - 1] ?? '')) {
+                value = value.slice(0, hashIdx).trim();
+            }
+        }
+        // Strip surrounding quotes (matched pair only; a lone quote stays).
+        if (value.length >= 2 &&
+            ((value.startsWith('"') && value.endsWith('"')) ||
+                (value.startsWith("'") && value.endsWith("'")))) {
+            value = value.slice(1, -1);
+        }
+        if (!key) {
+            skipped.push({ key: `line ${i + 1}`, reason: 'missing key before `=`' });
+            continue;
+        }
+        if (!value) {
+            skipped.push({ key, reason: 'empty value' });
+            continue;
+        }
+        vars[key] = value;
+    }
+    return { vars, skipped };
+};
+/**
+ * Record-only view for callers that don't surface skip reasons.
+ * Same parse, skips dropped.
+ */
+export const parseEnvFile = (content) => parseEnvContent(content).vars;
+//# sourceMappingURL=env-parse.js.map

package/dist/lib/env-parse.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"env-parse.js","sourceRoot":"","sources":["../../src/lib/env-parse.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AASH;;;;GAIG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,OAAe,EAAkB,EAAE;IACjE,MAAM,IAAI,GAA2B,EAAE,CAAC;IACxC,MAAM,OAAO,GAAmB,EAAE,CAAC;IACnC,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAElC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,IAAI,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAC9B,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,SAAS;QAElD,oEAAoE;QACpE,sEAAsE;QACtE,+DAA+D;QAC/D,gEAAgE;QAChE,wDAAwD;QACxD,IAAI,OAAO,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;YAClC,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QACpC,CAAC;QAED,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACnC,IAAI,KAAK,KAAK,CAAC,CAAC,EAAE,CAAC;YACjB,OAAO,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,QAAQ,CAAC,GAAG,CAAC,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC,CAAC;YACnE,SAAS;QACX,CAAC;QAED,MAAM,GAAG,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC;QAC3C,IAAI,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAE5C,uEAAuE;QACvE,oEAAoE;QACpE,kEAAkE;QAClE,mEAAmE;QACnE,iBAAiB;QACjB,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YACrD,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YACnC,IAAI,OAAO,GAAG,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC;gBACvD,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;YACzC,CAAC;QACH,CAAC;QAED,oEAAoE;QACpE,IACE,KAAK,CAAC,MAAM,IAAI,CAAC;YACjB,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;gBAC7C,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EACjD,CAAC;YACD,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAC7B,CAAC;QAED,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,OAAO,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,QAAQ,CAAC,GAAG,CAAC,EAAE,EAAE,MAAM,EAAE,wBAAwB,EAAE,CAAC,CAAC;YACzE,SAAS;QACX,CAAC;QACD,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC,CAAC;YAC7C,SAAS;QACX,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;IACpB,CAAC;IAED,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;AAC3B,CAAC,CAAC;AAEF;;;GAGG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,OAAe,EAA0B,EAAE,CACtE,eAAe,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC"}

package/dist/lib/errors.d.ts

@@ -0,0 +1,111 @@
+import type { PushtoError, PushtoErrorFix, PushtoErrorStage } from '@pushto/shared/errors';
+/**
+ * Exit bands. A caller that reads only $? still behaves correctly, because
+ * the band alone says what to do next.
+ */
+export declare const EXIT: {
+    readonly OK: 0;
+    /** reserved for genuinely unclassified failures — never reachable from a known code */
+    readonly UNCLASSIFIED: 1;
+    readonly USAGE: 2;
+    readonly AUTH: 10;
+    readonly NOT_FOUND: 20;
+    readonly INVALID_INPUT: 30;
+    readonly BUILD_FAILED: 40;
+    readonly QUOTA: 50;
+    readonly UPSTREAM: 60;
+};
+/**
+ * The closed registry. Adding a code here is the ONLY way to add one, which
+ * is what stops a call site from inventing an exit number under time
+ * pressure — the failure mode that produced 112 identical exit(1)s.
+ */
+export declare const CODES: {
+    readonly NOT_AUTHENTICATED: {
+        readonly band: 10;
+        readonly retryable: false;
+    };
+    readonly SESSION_EXPIRED: {
+        readonly band: 10;
+        readonly retryable: false;
+    };
+    readonly NO_PROJECT: {
+        readonly band: 20;
+        readonly retryable: false;
+    };
+    readonly PROJECT_NOT_FOUND: {
+        readonly band: 20;
+        readonly retryable: false;
+    };
+    readonly NO_DEPLOYMENT: {
+        readonly band: 20;
+        readonly retryable: false;
+    };
+    readonly BAD_USAGE: {
+        readonly band: 2;
+        readonly retryable: false;
+    };
+    readonly MISSING_ENTRYPOINT: {
+        readonly band: 30;
+        readonly retryable: false;
+    };
+    readonly NO_FILES: {
+        readonly band: 30;
+        readonly retryable: false;
+    };
+    readonly ARTIFACT_TOO_LARGE: {
+        readonly band: 30;
+        readonly retryable: false;
+    };
+    readonly INVALID_ENV_KEY: {
+        readonly band: 30;
+        readonly retryable: false;
+    };
+    readonly DB_ALREADY_EXISTS: {
+        readonly band: 30;
+        readonly retryable: false;
+    };
+    readonly BUILD_FAILED: {
+        readonly band: 40;
+        readonly retryable: false;
+    };
+    readonly CONTAINER_BOOT_FAILED: {
+        readonly band: 40;
+        readonly retryable: false;
+    };
+    readonly PAID_FEATURE: {
+        readonly band: 50;
+        readonly retryable: false;
+    };
+    readonly QUOTA_EXCEEDED: {
+        readonly band: 50;
+        readonly retryable: false;
+    };
+    readonly NETWORK: {
+        readonly band: 60;
+        readonly retryable: true;
+    };
+    readonly SERVER_ERROR: {
+        readonly band: 60;
+        readonly retryable: true;
+    };
+    readonly DB_PROVISION_FAILED: {
+        readonly band: 60;
+        readonly retryable: true;
+    };
+};
+export type PushtoErrorCode = keyof typeof CODES;
+export declare const exitCodeFor: (code: PushtoErrorCode) => number;
+export declare const isRetryable: (code: PushtoErrorCode) => boolean;
+/**
+ * Build an error carrying the retryable bit derived from its code, so a call
+ * site can never disagree with the registry about whether a retry is sane.
+ * Optional keys are omitted rather than set to undefined, so JSON.stringify
+ * produces a clean payload.
+ */
+export declare const buildError: (code: PushtoErrorCode, human: string, extra?: {
+    fix?: PushtoErrorFix;
+    stage?: PushtoErrorStage;
+    details?: Record<string, unknown>;
+}) => PushtoError;
+//# sourceMappingURL=errors.d.ts.map

package/dist/lib/errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../src/lib/errors.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,WAAW,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAE3F;;;GAGG;AACH,eAAO,MAAM,IAAI;;IAEf,uFAAuF;;;;;;;;;CAS/E,CAAC;AAOX;;;;GAIG;AACH,eAAO,MAAM,KAAK;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAuB2B,CAAC;AAE9C,MAAM,MAAM,eAAe,GAAG,MAAM,OAAO,KAAK,CAAC;AAEjD,eAAO,MAAM,WAAW,GAAI,MAAM,eAAe,KAAG,MAA0B,CAAC;AAE/E,eAAO,MAAM,WAAW,GAAI,MAAM,eAAe,KAAG,OAAgC,CAAC;AAErF;;;;;GAKG;AACH,eAAO,MAAM,UAAU,GACrB,MAAM,eAAe,EACrB,OAAO,MAAM,EACb,QAAQ;IAAE,GAAG,CAAC,EAAE,cAAc,CAAC;IAAC,KAAK,CAAC,EAAE,gBAAgB,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAAE,KAC5F,WAMF,CAAC"}

package/dist/lib/errors.js

@@ -0,0 +1,64 @@
+/**
+ * Exit bands. A caller that reads only $? still behaves correctly, because
+ * the band alone says what to do next.
+ */
+export const EXIT = {
+    OK: 0,
+    /** reserved for genuinely unclassified failures — never reachable from a known code */
+    UNCLASSIFIED: 1,
+    USAGE: 2,
+    AUTH: 10,
+    NOT_FOUND: 20,
+    INVALID_INPUT: 30,
+    BUILD_FAILED: 40,
+    QUOTA: 50,
+    UPSTREAM: 60,
+};
+/**
+ * The closed registry. Adding a code here is the ONLY way to add one, which
+ * is what stops a call site from inventing an exit number under time
+ * pressure — the failure mode that produced 112 identical exit(1)s.
+ */
+export const CODES = {
+    NOT_AUTHENTICATED: { band: EXIT.AUTH, retryable: false },
+    SESSION_EXPIRED: { band: EXIT.AUTH, retryable: false },
+    NO_PROJECT: { band: EXIT.NOT_FOUND, retryable: false },
+    PROJECT_NOT_FOUND: { band: EXIT.NOT_FOUND, retryable: false },
+    NO_DEPLOYMENT: { band: EXIT.NOT_FOUND, retryable: false },
+    BAD_USAGE: { band: EXIT.USAGE, retryable: false },
+    MISSING_ENTRYPOINT: { band: EXIT.INVALID_INPUT, retryable: false },
+    NO_FILES: { band: EXIT.INVALID_INPUT, retryable: false },
+    ARTIFACT_TOO_LARGE: { band: EXIT.INVALID_INPUT, retryable: false },
+    INVALID_ENV_KEY: { band: EXIT.INVALID_INPUT, retryable: false },
+    // The request was well-formed but wrong for the current state: the project
+    // already has a live database. Retrying identically cannot succeed, and the
+    // caller's move is to use the existing one, so this sits with invalid input
+    // rather than in the upstream/retryable band.
+    DB_ALREADY_EXISTS: { band: EXIT.INVALID_INPUT, retryable: false },
+    BUILD_FAILED: { band: EXIT.BUILD_FAILED, retryable: false },
+    CONTAINER_BOOT_FAILED: { band: EXIT.BUILD_FAILED, retryable: false },
+    PAID_FEATURE: { band: EXIT.QUOTA, retryable: false },
+    QUOTA_EXCEEDED: { band: EXIT.QUOTA, retryable: false },
+    NETWORK: { band: EXIT.UPSTREAM, retryable: true },
+    SERVER_ERROR: { band: EXIT.UPSTREAM, retryable: true },
+    DB_PROVISION_FAILED: { band: EXIT.UPSTREAM, retryable: true },
+};
+export const exitCodeFor = (code) => CODES[code].band;
+export const isRetryable = (code) => CODES[code].retryable;
+/**
+ * Build an error carrying the retryable bit derived from its code, so a call
+ * site can never disagree with the registry about whether a retry is sane.
+ * Optional keys are omitted rather than set to undefined, so JSON.stringify
+ * produces a clean payload.
+ */
+export const buildError = (code, human, extra) => {
+    const err = { code, human, retryable: isRetryable(code) };
+    if (extra?.fix)
+        err.fix = extra.fix;
+    if (extra?.stage)
+        err.stage = extra.stage;
+    if (extra?.details)
+        err.details = extra.details;
+    return err;
+};
+//# sourceMappingURL=errors.js.map

package/dist/lib/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../src/lib/errors.ts"],"names":[],"mappings":"AASA;;;GAGG;AACH,MAAM,CAAC,MAAM,IAAI,GAAG;IAClB,EAAE,EAAE,CAAC;IACL,uFAAuF;IACvF,YAAY,EAAE,CAAC;IACf,KAAK,EAAE,CAAC;IACR,IAAI,EAAE,EAAE;IACR,SAAS,EAAE,EAAE;IACb,aAAa,EAAE,EAAE;IACjB,YAAY,EAAE,EAAE;IAChB,KAAK,EAAE,EAAE;IACT,QAAQ,EAAE,EAAE;CACJ,CAAC;AAOX;;;;GAIG;AACH,MAAM,CAAC,MAAM,KAAK,GAAG;IACnB,iBAAiB,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE;IACxD,eAAe,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE;IACtD,UAAU,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,EAAE,SAAS,EAAE,KAAK,EAAE;IACtD,iBAAiB,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,EAAE,SAAS,EAAE,KAAK,EAAE;IAC7D,aAAa,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,EAAE,SAAS,EAAE,KAAK,EAAE;IACzD,SAAS,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE;IACjD,kBAAkB,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,aAAa,EAAE,SAAS,EAAE,KAAK,EAAE;IAClE,QAAQ,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,aAAa,EAAE,SAAS,EAAE,KAAK,EAAE;IACxD,kBAAkB,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,aAAa,EAAE,SAAS,EAAE,KAAK,EAAE;IAClE,eAAe,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,aAAa,EAAE,SAAS,EAAE,KAAK,EAAE;IAC/D,2EAA2E;IAC3E,4EAA4E;IAC5E,4EAA4E;IAC5E,8CAA8C;IAC9C,iBAAiB,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,aAAa,EAAE,SAAS,EAAE,KAAK,EAAE;IACjE,YAAY,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,YAAY,EAAE,SAAS,EAAE,KAAK,EAAE;IAC3D,qBAAqB,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,YAAY,EAAE,SAAS,EAAE,KAAK,EAAE;IACpE,YAAY,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE;IACpD,cAAc,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE;IACtD,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,QAAQ,EAAE,SAAS,EAAE,IAAI,EAAE;IACjD,YAAY,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,QAAQ,EAAE,SAAS,EAAE,IAAI,EAAE;IACtD,mBAAmB,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,QAAQ,EAAE,SAAS,EAAE,IAAI,EAAE;CAClB,CAAC;AAI9C,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,IAAqB,EAAU,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC;AAE/E,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,IAAqB,EAAW,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC;AAErF;;;;;GAKG;AACH,MAAM,CAAC,MAAM,UAAU,GAAG,CACxB,IAAqB,EACrB,KAAa,EACb,KAA6F,EAChF,EAAE;IACf,MAAM,GAAG,GAAgB,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC;IACvE,IAAI,KAAK,EAAE,GAAG;QAAE,GAAG,CAAC,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC;IACpC,IAAI,KAAK,EAAE,KAAK;QAAE,GAAG,CAAC,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC;IAC1C,IAAI,KAAK,EAAE,OAAO;QAAE,GAAG,CAAC,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC;IAChD,OAAO,GAAG,CAAC;AACb,CAAC,CAAC"}

package/dist/lib/file-walker.d.ts

@@ -0,0 +1,23 @@
+import { type Ignore } from 'ignore';
+export declare const ALWAYS_IGNORE: string[];
+export declare const loadIgnoreFilter: (rootDir: string) => Ignore;
+export interface WalkedFile {
+    /** Absolute filesystem path. */
+    fullPath: string;
+    /** Path relative to rootDir, with forward-slash separators (zip-archive style). */
+    archivePath: string;
+    /** File size in bytes. */
+    sizeBytes: number;
+}
+/**
+ * Walk a project directory using the same ignore semantics deploy.ts uses
+ * to build the deploy zip. Skips symlinks (traversal protection) and
+ * caps depth at 20.
+ *
+ * Both deploy.ts (zip the matched files) and doctor.ts (preview the
+ * matched files: count, total size, biggest) call this. If the two ever
+ * disagreed, doctor's "looks fine" would mismatch deploy's "exceeds limit"
+ * — frustrating to debug. One source = one truth.
+ */
+export declare const walkProject: (rootDir: string) => WalkedFile[];
+//# sourceMappingURL=file-walker.d.ts.map

package/dist/lib/file-walker.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"file-walker.d.ts","sourceRoot":"","sources":["../../src/lib/file-walker.ts"],"names":[],"mappings":"AAEA,OAAe,EAAE,KAAK,MAAM,EAAE,MAAM,QAAQ,CAAC;AAY7C,eAAO,MAAM,aAAa,UA0BzB,CAAC;AAWF,eAAO,MAAM,gBAAgB,GAAI,SAAS,MAAM,KAAG,MAclD,CAAC;AAEF,MAAM,WAAW,UAAU;IACzB,gCAAgC;IAChC,QAAQ,EAAE,MAAM,CAAC;IACjB,mFAAmF;IACnF,WAAW,EAAE,MAAM,CAAC;IACpB,0BAA0B;IAC1B,SAAS,EAAE,MAAM,CAAC;CACnB;AAED;;;;;;;;;GASG;AACH,eAAO,MAAM,WAAW,GAAI,SAAS,MAAM,KAAG,UAAU,EAyCvD,CAAC"}