percher 0.4.1 → 0.4.2

package/dist/bin/percher.js

@@ -8824,7 +8824,7 @@ var require_util = __commonJS((exports) => {
       }
       path = url2.path;
     }
-    var isAbsolute2 = exports.isAbsolute(path);
+    var isAbsolute3 = exports.isAbsolute(path);
     var parts = path.split(/\/+/);
     for (var part, up = 0, i = parts.length - 1;i >= 0; i--) {
       part = parts[i];
@@ -8844,7 +8844,7 @@ var require_util = __commonJS((exports) => {
     }
     path = parts.join("/");
     if (path === "") {
-      path = isAbsolute2 ? "/" : ".";
+      path = isAbsolute3 ? "/" : ".";
     }
     if (url2) {
       url2.path = path;
@@ -101395,7 +101395,7 @@ function finalize(ctx, schema) {
     result.$schema = "http://json-schema.org/draft-07/schema#";
   } else if (ctx.target === "draft-04") {
     result.$schema = "http://json-schema.org/draft-04/schema#";
-  } else if (ctx.target === "openapi-3.0") {} else {}
+  } else if (ctx.target === "openapi-3.0") {}
   if (ctx.external?.uri) {
     const id = ctx.external.registry.get(schema)?.id;
     if (!id)
@@ -101643,7 +101643,7 @@ var literalProcessor = (schema, ctx, json, _params) => {
     if (val === undefined) {
       if (ctx.unrepresentable === "throw") {
         throw new Error("Literal `undefined` cannot be represented in JSON Schema");
-      } else {}
+      }
     } else if (typeof val === "bigint") {
       if (ctx.unrepresentable === "throw") {
         throw new Error("BigInt literals cannot be represented in JSON Schema");
@@ -104202,7 +104202,8 @@ var devSchema = exports_external.object({
 var requiredEnvSchema = exports_external.record(exports_external.string(), exports_external.enum(["secret", "url", "string"]));
 var cronSchema = exports_external.object({
   schedule: exports_external.string().min(1),
-  command: exports_external.string().min(1)
+  command: exports_external.string().min(1),
+  description: exports_external.string().max(200).optional()
 }).strict();
 var addonsSchema = exports_external.object({
   pocketbase: exports_external.object({ enabled: exports_external.boolean().optional() }).strict().optional(),
@@ -105221,6 +105222,27 @@ function isRestoreJobStatus(v) {
   return typeof v === "string" && RESTORE_JOB_STATUSES_FOR_ERROR.includes(v);
 }
 
+class SunsetError extends PercherApiError {
+  gateCode;
+  sunsetDate;
+  finalDeletionDate;
+  dashboardUrl;
+  constructor(message, options) {
+    super(message, options);
+    this.name = "SunsetError";
+    this.gateCode = options.gateCode;
+    this.sunsetDate = options.sunsetDate;
+    this.finalDeletionDate = options.finalDeletionDate;
+    this.dashboardUrl = options.dashboardUrl;
+  }
+}
+function isSunsetGateBody(body) {
+  if (typeof body !== "object" || body === null)
+    return false;
+  const b = body;
+  return (b.error === "platform_read_only" || b.error === "platform_delete_gated") && typeof b.sunsetDate === "string" && typeof b.finalDeletionDate === "string" && typeof b.dashboardUrl === "string";
+}
+
 // ../client/dist/http.js
 class Http {
   apiUrl;
@@ -105342,10 +105364,23 @@ class Http {
     return headers;
   }
   async parseError(res) {
-    let body = {};
+    let raw;
     try {
-      body = await res.json();
+      raw = await res.json();
     } catch {}
+    if (res.status === 503 && isSunsetGateBody(raw)) {
+      const requestIdHdr = res.headers.get("x-request-id") ?? undefined;
+      return new SunsetError(raw.message, {
+        status: res.status,
+        code: raw.error,
+        requestId: requestIdHdr,
+        gateCode: raw.error,
+        sunsetDate: raw.sunsetDate,
+        finalDeletionDate: raw.finalDeletionDate,
+        dashboardUrl: raw.dashboardUrl
+      });
+    }
+    const body = typeof raw === "object" && raw !== null ? raw : {};
     const code = body.error?.code ?? (res.status >= 500 ? "INTERNAL_ERROR" : "VALIDATION_ERROR");
     const message = body.error?.message ?? res.statusText ?? "request failed";
     const extra = {};
@@ -105385,6 +105420,12 @@ class AccountResource {
   getDiagnostics() {
     return this.http.get("/account/diagnostics");
   }
+  listTokens() {
+    return this.http.get("/account/tokens");
+  }
+  revokeToken(id) {
+    return this.http.delete(`/account/tokens/${encodeURIComponent(id)}`);
+  }
   exportData() {
     return this.http.get("/account/export");
   }
@@ -105426,6 +105467,9 @@ class AppsResource {
   list() {
     return this.http.get("/apps");
   }
+  listLight() {
+    return this.http.get("/apps?light=1");
+  }
   get(id) {
     return this.http.get(`/apps/${encodeURIComponent(id)}`);
   }
@@ -105461,6 +105505,37 @@ class AppsResource {
       crashAnalysisEnabled: enabled
     });
   }
+  setGalleryOptIn(appRef, enabled) {
+    return this.http.put(`/apps/${encodeURIComponent(appRef)}/gallery-opt-in`, {
+      enabled
+    });
+  }
+  setDescription(appRef, description) {
+    return this.http.patch(`/apps/${encodeURIComponent(appRef)}/description`, {
+      description
+    });
+  }
+  setIconColour(appRef, colour) {
+    return this.http.patch(`/apps/${encodeURIComponent(appRef)}/icon`, {
+      colour
+    });
+  }
+  uploadIconImage(appRef, bytes, mime) {
+    const ab = new ArrayBuffer(bytes.byteLength);
+    new Uint8Array(ab).set(bytes);
+    return this.http.postBinary(`/apps/${encodeURIComponent(appRef)}/icon/image`, new Blob([ab]), { "Content-Type": mime });
+  }
+  deleteIconImage(appRef) {
+    return this.http.deleteJson(`/apps/${encodeURIComponent(appRef)}/icon/image`);
+  }
+  uploadPreviewImage(appRef, bytes, mime) {
+    const ab = new ArrayBuffer(bytes.byteLength);
+    new Uint8Array(ab).set(bytes);
+    return this.http.postBinary(`/apps/${encodeURIComponent(appRef)}/preview/image`, new Blob([ab]), { "Content-Type": mime });
+  }
+  deletePreviewImage(appRef) {
+    return this.http.deleteJson(`/apps/${encodeURIComponent(appRef)}/preview/image`);
+  }
   async downloadSource(appRef, deployId) {
     return this.http.getBinary(`/apps/${encodeURIComponent(appRef)}/deploys/${encodeURIComponent(deployId)}/source`);
   }
@@ -105545,12 +105620,18 @@ class AppsResource {
   listJobs(appRef, limit = 20) {
     return this.http.get(`/apps/${encodeURIComponent(appRef)}/jobs?limit=${limit}`);
   }
+  listCrons(appRef) {
+    return this.http.get(`/apps/${encodeURIComponent(appRef)}/crons`);
+  }
   getDiagnostics(appRef) {
     return this.http.get(`/apps/${encodeURIComponent(appRef)}/diagnostics`);
   }
   getTopology(appRef) {
     return this.http.get(`/apps/${encodeURIComponent(appRef)}/topology`);
   }
+  getPocketBaseVolume(appRef) {
+    return this.http.get(`/apps/${encodeURIComponent(appRef)}/pocketbase/volume`);
+  }
   getResources(appRef, opts = {}) {
     const params = new URLSearchParams;
     if (opts.window)
@@ -105712,6 +105793,40 @@ class EnvResource {
   }
 }
 
+// ../client/dist/resources/env-scan.js
+class EnvScanResource {
+  http;
+  constructor(http) {
+    this.http = http;
+  }
+  scan(appId) {
+    return this.http.post(`/apps/${encodeURIComponent(appId)}/env-scan`);
+  }
+}
+
+// ../client/dist/resources/export.js
+class ExportResource {
+  http;
+  constructor(http) {
+    this.http = http;
+  }
+  mint(appRef, options) {
+    return this.http.post(`/apps/${encodeURIComponent(appRef)}/export/mint`, {
+      deliveryKind: options?.deliveryKind
+    });
+  }
+  revoke(appRef, tokenId) {
+    return this.http.post(`/apps/${encodeURIComponent(appRef)}/export/tokens/${encodeURIComponent(tokenId)}/revoke`);
+  }
+  history(appRef) {
+    return this.http.get(`/apps/${encodeURIComponent(appRef)}/export/history`);
+  }
+  async download(downloadUrl) {
+    const path = downloadUrl.startsWith("http") ? new URL(downloadUrl).pathname + new URL(downloadUrl).search : downloadUrl;
+    return this.http.stream(path);
+  }
+}
+
 // ../client/dist/sse.js
 async function* parseSseStream(stream, signal) {
   const reader = stream.getReader();
@@ -105859,6 +105974,43 @@ class PlatformResource {
   }
 }
 
+// ../client/dist/resources/search.js
+class SearchResource {
+  http;
+  constructor(http) {
+    this.http = http;
+  }
+  query(q) {
+    return this.http.get(`/search?q=${encodeURIComponent(q)}`);
+  }
+}
+
+// ../client/dist/resources/security.js
+class SecurityResource {
+  http;
+  constructor(http) {
+    this.http = http;
+  }
+  forApp(appRef) {
+    return this.http.get(`/apps/${encodeURIComponent(appRef)}/security`);
+  }
+  forAppAsAdmin(appRef) {
+    return this.http.get(`/admin/security/apps/${encodeURIComponent(appRef)}`);
+  }
+  resendNotificationAsAdmin(appRef) {
+    return this.http.post(`/admin/security/apps/${encodeURIComponent(appRef)}/notify`, {});
+  }
+  overview() {
+    return this.http.get("/admin/security/overview");
+  }
+  rescanAllAsAdmin() {
+    return this.http.post("/admin/security/rescan", {});
+  }
+  rescanAppAsAdmin(appRef) {
+    return this.http.post(`/admin/security/apps/${encodeURIComponent(appRef)}/rescan`, {});
+  }
+}
+
 // ../client/dist/resources/sharing.js
 class SharingResource {
   http;
@@ -105929,12 +106081,16 @@ class PercherClient {
   apps;
   data;
   env;
+  envScan;
+  export;
   logs;
   auth;
   billing;
   account;
   alerts;
   platform;
+  security;
+  search;
   sharing;
   invites;
   transfers;
@@ -105953,12 +106109,16 @@ class PercherClient {
     this.apps = new AppsResource(http);
     this.data = new DataResource(http);
     this.env = new EnvResource(http);
+    this.envScan = new EnvScanResource(http);
+    this.export = new ExportResource(http);
     this.logs = new LogsResource(http);
     this.auth = new AuthResource(http);
     this.billing = new BillingResource(http);
     this.account = new AccountResource(http);
     this.alerts = new AlertsResource(http);
     this.platform = new PlatformResource(http);
+    this.security = new SecurityResource(http);
+    this.search = new SearchResource(http);
     this.sharing = new SharingResource(http);
     this.invites = new InvitesResource(http);
     this.transfers = new TransfersResource(http);
@@ -106418,6 +106578,19 @@ var patterns = [
       missingEnvVars: []
     }
   },
+  {
+    pattern: /Bad Gateway|HTTP 502|\b502\b/i,
+    result: {
+      title: "Gateway error (transient)",
+      explanation: "A gateway in front of your app returned 502 Bad Gateway while the platform was routing the deploy. This is a transient platform-side hiccup, not your app code.",
+      suggestion: "Wait 30 seconds and run percher publish again. A single retry almost always lands cleanly. If 502s persist across several spaced-out retries, check status.percher.app — that's a platform incident, not your app.",
+      errorClass: "infra_unavailable",
+      phase: "infra",
+      cause: "bad_gateway",
+      relevantFiles: [],
+      missingEnvVars: []
+    }
+  },
   {
     pattern: /start command could not be found|no start command/i,
     result: {
@@ -106536,7 +106709,20 @@ var patterns = [
     }
   },
   {
-    pattern: /POCKETBASE|pocketbase.*error|pocketbase.*fail/i,
+    pattern: /committed_budget|\bbox admission|platform (?:is )?at capacity/i,
+    result: {
+      title: "Platform at capacity",
+      explanation: "The platform couldn't fit this deploy right now — the box is full, so the box-admission gate refused to start the container. This is a platform-side limit, not a problem with your app code or configuration.",
+      suggestion: "Wait a few minutes and run percher publish again — capacity frees up as other deploys finish. This failure does not count against your app, and a retry usually lands once there's room. If it persists, contact the operator.",
+      errorClass: "platform_at_capacity",
+      phase: "infra",
+      cause: "box_admission_rejected",
+      relevantFiles: [],
+      missingEnvVars: []
+    }
+  },
+  {
+    pattern: /pocketbase[^\n]{0,40}(?:error|fail|crash|panic|exit|unhealthy|could ?not|cannot|connection refused|timed out|not (?:start|ready|reachable))|(?:failed to (?:start|connect|reach)|error (?:starting|connecting to)|unable to (?:start|reach|connect to))[^\n]{0,40}pocketbase/i,
     result: {
       title: "PocketBase error",
       explanation: "PocketBase could not start or connect properly.",
@@ -106819,6 +107005,12 @@ function recoveryFromErrorClass(errorClass, failure = {}) {
         args: failure.publishInput ?? {},
         reasonCode: "infra_unavailable"
       });
+    case "platform_at_capacity":
+      return recoveryRetry({
+        suggestedTool: "percher_publish",
+        args: failure.publishInput ?? {},
+        reasonCode: "infra_transient"
+      });
     case "config_invalid":
       return recoveryFixConfig({
         problems: [
@@ -106987,7 +107179,7 @@ async function buildFailureError(ctx, app, deployment) {
     buildLogFetchFailed = true;
   }
   const errorMessage = deployment.errorMessage ?? "";
-  const classified = classifyByErrorCode(deployment.errorCode, errorMessage) ?? classifyError("Deployment failed", fullLog) ?? classifyError(errorMessage, "");
+  const classified = classifyByErrorCode(deployment.errorCode, errorMessage) ?? classifyError(errorMessage || "Deployment failed", fullLog);
   const rawErrorMessage = errorMessage && !buildLogTail && !classified?.explanation.includes(errorMessage) ? errorMessage : undefined;
   const problems = deployment.problems && deployment.problems.length > 0 ? deployment.problems : undefined;
   if (classified) {
@@ -107858,6 +108050,82 @@ async function envList(ctx, input = {}) {
     masked[k] = mask(v);
   return masked;
 }
+// ../core/dist/commands/export.js
+import { isAbsolute, resolve as resolvePath } from "node:path";
+var exportInputSchema = exports_external.object({
+  app: exports_external.string().optional(),
+  out: exports_external.string().optional(),
+  deliveryKind: exports_external.enum(["cli", "mcp"]).default("cli")
+});
+function resolveAppName3(ctx, provided) {
+  const name = provided ?? readPercherTomlAppName(ctx.cwd);
+  if (!name) {
+    throw new PercherCoreError("No app specified and no percher.toml found", {
+      code: "export.no-app",
+      hint: "Pass --app <name> or run from a directory with percher.toml."
+    });
+  }
+  return name;
+}
+async function streamToFile(outPath, source) {
+  const file2 = Bun.file(outPath);
+  const writer = file2.writer();
+  let bytes = 0;
+  const reader = source.getReader();
+  try {
+    while (true) {
+      const { done, value } = await reader.read();
+      if (done)
+        break;
+      if (value && value.length > 0) {
+        writer.write(value);
+        bytes += value.length;
+      }
+    }
+    await writer.end();
+  } catch (err) {
+    try {
+      await writer.end();
+    } catch {}
+    try {
+      await Bun.write(outPath, "");
+      await Bun.file(outPath).delete?.();
+    } catch {}
+    throw err;
+  }
+  return { bytes };
+}
+function resolveOutPath(ctxCwd, filename) {
+  if (isAbsolute(filename))
+    return filename;
+  return resolvePath(ctxCwd, filename);
+}
+async function exportApp(ctx, input) {
+  const name = resolveAppName3(ctx, input.app);
+  const mint = await ctx.client.export.mint(name, { deliveryKind: input.deliveryKind });
+  const dl = await ctx.client.export.download(mint.downloadUrl);
+  if (!dl.body) {
+    throw new PercherCoreError("Export download returned an empty body", {
+      code: "export.empty-body",
+      hint: "Try again — the link is single-use, so a new mint is required."
+    });
+  }
+  const filenameFromHeader = (() => {
+    const cd = dl.headers.get("Content-Disposition") ?? "";
+    const m = cd.match(/filename="?([^";]+)"?/);
+    return m?.[1];
+  })();
+  const filename = input.out ?? filenameFromHeader ?? `${name}-export.tar.gz`;
+  const outPath = resolveOutPath(ctx.cwd, filename);
+  const { bytes } = await streamToFile(outPath, dl.body);
+  return {
+    appName: name,
+    outPath,
+    bytes,
+    expiresAt: mint.expiresAt,
+    includedSecrets: false
+  };
+}
 // ../core/dist/commands/forgejo.js
 var FORGEJO_URL_RE = /^https:\/\/[\w.-]+\/[\w.-]+\/[\w.-]+(\.git)?$/;
 var forgejoConnectInputSchema = exports_external.object({
@@ -108728,6 +108996,26 @@ async function login(ctx, input = {}) {
 }
 // ../shared/dist/logs.js
 var MAX_LOG_SEARCH_LENGTH = 256;
+// ../shared/dist/platform-env.js
+var PERCHER_INJECTED_ENV_KEYS = new Set([
+  "NODE_ENV",
+  "PORT",
+  "DATABASE_URL",
+  "POCKETBASE_URL",
+  "POCKETBASE_ADMIN_EMAIL",
+  "POCKETBASE_ADMIN_PASSWORD",
+  "PERCHER_APP_NAME",
+  "PERCHER_APP_URL",
+  "HTTP_PROXY",
+  "HTTPS_PROXY",
+  "NO_PROXY",
+  "NODE_USE_ENV_PROXY"
+]);
+var PROXY_LOWERCASE_ALIASES = new Set([
+  "http_proxy",
+  "https_proxy",
+  "no_proxy"
+]);
 // ../shared/dist/runtime.js
 var DEFAULT_NODE_VERSION_MAJOR = "24";
 var DEFAULT_NODE_VERSION_LABEL = `${DEFAULT_NODE_VERSION_MAJOR} LTS`;
@@ -109641,7 +109929,7 @@ function collectWarnings2(collections, rlsPolicies, unsupported) {
 }
 // ../core/dist/commands/migrate-supabase-schema.js
 import { mkdir as mkdir2, writeFile as writeFile2 } from "node:fs/promises";
-import { isAbsolute, join as join17, relative as relative3, resolve as resolve6 } from "node:path";
+import { isAbsolute as isAbsolute2, join as join17, relative as relative3, resolve as resolve6 } from "node:path";
 
 // ../core/dist/commands/migrate-supabase-scripts.js
 function generateDataImportScripts(preview) {
@@ -110154,7 +110442,7 @@ async function migrateSupabaseSchema(ctx, input) {
 }
 function resolveOutputDir(cwd, requested) {
   const raw = requested ?? "./migration-preview";
-  return isAbsolute(raw) ? raw : resolve6(cwd, raw);
+  return isAbsolute2(raw) ? raw : resolve6(cwd, raw);
 }
 async function writePreviewFiles(ctx, outputDir, preview) {
   await mkdir2(outputDir, { recursive: true });
@@ -110927,14 +111215,46 @@ function matchSuspended(err) {
 function matchAppSuspended(err) {
   if (err.code !== "APP_SUSPENDED" || err.status !== 403)
     return null;
+  const liftAfterRaw = typeof err.extra?.liftAfter === "string" ? err.extra.liftAfter : null;
+  const liftableNow = err.extra?.liftableNow === true;
+  const canLiftViaPublish = err.extra?.canLiftViaPublish === true;
+  const fixInstructions = typeof err.extra?.fixInstructions === "string" && err.extra.fixInstructions.length > 0 ? err.extra.fixInstructions : null;
+  let suggestion;
+  let prompt;
+  let options;
+  if (canLiftViaPublish && liftableNow) {
+    suggestion = fixInstructions ? `Fix the underlying cause (${fixInstructions}) and run \`percher publish\` — a successful deploy will lift the suspension automatically.` : "Fix the underlying cause and run `percher publish` — a successful deploy will lift the suspension automatically.";
+    prompt = fixInstructions ? `${err.message}
+
+The suspension window has passed. Fix the underlying cause per the admin's instructions (${fixInstructions}), then run \`percher publish\` — a successful deploy will lift the suspension.` : `${err.message}
+
+The suspension window has passed. Fix the underlying cause, then run \`percher publish\` — a successful deploy will lift the suspension.`;
+    options = ["fix and republish", "open dashboard", "contact support"];
+  } else if (canLiftViaPublish && liftAfterRaw) {
+    suggestion = fixInstructions ? `Wait until ${liftAfterRaw}, then fix the underlying cause (${fixInstructions}) and run \`percher publish\`. A successful deploy after the window passes will lift the suspension.` : `Wait until ${liftAfterRaw}, then run \`percher publish\`. A successful deploy after the window passes will lift the suspension.`;
+    prompt = `${err.message}
+
+You can try again after ${liftAfterRaw}. Until then, retrying will fail.`;
+    options = ["wait and republish", "open dashboard", "contact support"];
+  } else if (liftAfterRaw) {
+    suggestion = `A Percher admin will review the suspension after ${liftAfterRaw}. Contact support if you need it lifted sooner.`;
+    prompt = `${err.message}
+
+Admin will review after ${liftAfterRaw}. Contact support at https://percher.app if you need it lifted sooner.`;
+    options = ["wait", "contact support"];
+  } else {
+    suggestion = "Contact support at https://percher.app or check the dashboard for unsuspend options. Re-publishing won't unsuspend the app.";
+    prompt = `${err.message} Open https://percher.app or contact support — re-publish won't help until the app is unsuspended.`;
+    options = ["contact support", "open dashboard"];
+  }
   return {
     title: "App suspended",
     explanation: err.message,
-    suggestion: "Contact support at https://percher.app or check the dashboard for unsuspend options. Re-publishing won't unsuspend the app.",
+    suggestion,
     recovery: recoveryAsk({
-      prompt: `${err.message} Open https://percher.app or contact support — re-publish won't help until the app is unsuspended.`,
-      options: ["contact support", "open dashboard"],
-      reasonCode: "unknown"
+      prompt,
+      options,
+      reasonCode: "app_suspended"
     }),
     summary: `App suspended: ${err.message}`
   };
@@ -113059,6 +113379,7 @@ var SOURCE_EXTS2 = new Set([
 ]);
 var DEFAULT_MAX_FILE_BYTES = 1024 * 1024;
 // ../core/dist/plans.js
+var PB_INITIAL_FOOTPRINT_MB = 256;
 var PLAN_CATALOG = {
   free: {
     label: "Free",
@@ -113080,7 +113401,7 @@ var PLAN_CATALOG = {
       logRetentionDays: 1,
       buildLogRetentionDays: 3,
       cronJobs: 1,
-      storageMb: 500,
+      storageMb: PB_INITIAL_FOOTPRINT_MB,
       instances: 1,
       kvStorageMb: 10,
       uptimeIntervalSec: 0,
@@ -113112,7 +113433,7 @@ var PLAN_CATALOG = {
       logRetentionDays: 7,
       buildLogRetentionDays: 14,
       cronJobs: 3,
-      storageMb: 5000,
+      storageMb: PB_INITIAL_FOOTPRINT_MB,
       instances: 1,
       kvStorageMb: 50,
       uptimeIntervalSec: 300,
@@ -113144,7 +113465,7 @@ var PLAN_CATALOG = {
       logRetentionDays: 30,
       buildLogRetentionDays: 30,
       cronJobs: 10,
-      storageMb: 25000,
+      storageMb: PB_INITIAL_FOOTPRINT_MB,
       instances: 2,
       kvStorageMb: 200,
       uptimeIntervalSec: 60,
@@ -113176,7 +113497,7 @@ var PLAN_CATALOG = {
       logRetentionDays: 90,
       buildLogRetentionDays: 90,
       cronJobs: 25,
-      storageMb: 75000,
+      storageMb: PB_INITIAL_FOOTPRINT_MB,
       instances: 4,
       kvStorageMb: 1000,
       uptimeIntervalSec: 30,
@@ -113290,6 +113611,18 @@ function formatStatus(status2) {
     return import_picocolors.default.red(status2);
   return import_picocolors.default.yellow(status2);
 }
+function formatBytes(bytes) {
+  if (!Number.isFinite(bytes) || bytes < 0)
+    return "—";
+  const units = ["B", "KB", "MB", "GB", "TB"];
+  let n = bytes;
+  let i = 0;
+  while (n >= 1024 && i < units.length - 1) {
+    n /= 1024;
+    i += 1;
+  }
+  return `${i === 0 ? n : n.toFixed(1)} ${units[i]}`;
+}
 function firstNonFlagAfter(argv, from, valueFlags = new Set) {
   let i = from + 1;
   while (i < argv.length) {
@@ -113329,6 +113662,9 @@ async function runDeploysInspect(ctx, input) {
     await writeLine(ctx, `${import_picocolors.default.bold("Type:")}      ${deploy.type}`);
   }
   await writeLine(ctx, `${import_picocolors.default.bold("Created:")}   ${formatDeployTimestamp(deploy.createdAt)}`);
+  if (typeof deploy.imageSizeBytes === "number") {
+    await writeLine(ctx, `${import_picocolors.default.bold("Image:")}     ${formatBytes(deploy.imageSizeBytes)}`);
+  }
   if (deploy.url) {
     await writeLine(ctx, `${import_picocolors.default.bold("URL:")}       ${deploy.url}`);
   }
@@ -113789,6 +114125,9 @@ async function handlePublishResult(ctx, result, options = {}) {
           await writeLine(ctx, import_picocolors4.default.dim("  Build cache: miss (fresh build)"));
         }
       }
+      if (typeof result.deployment?.imageSizeBytes === "number") {
+        await writeLine(ctx, import_picocolors4.default.dim(`  Image size: ${formatBytes(result.deployment.imageSizeBytes)}`));
+      }
       if (result.replacedPreview) {
         await writeLine(ctx, import_picocolors4.default.dim("  (replaced previous preview — free plan keeps 1 preview slot per app)"));
       }
@@ -113897,6 +114236,9 @@ function registerAppsCommands(cli, ctx) {
       } else if (status2 === "fresh") {
         await writeLine(ctx, import_picocolors4.default.dim("  Build cache: miss (fresh build)"));
       }
+      if (typeof result.deployment?.imageSizeBytes === "number") {
+        await writeLine(ctx, import_picocolors4.default.dim(`  Image size: ${formatBytes(result.deployment.imageSizeBytes)}`));
+      }
     }
   });
   cli.command("rename <name> [app]", "Rename an app (changes its subdomain)").action(async (name, app) => {
@@ -114318,10 +114660,24 @@ function registerEnvCommands(cli, ctx) {
   });
 }
 
-// src/commands/github.ts
+// src/commands/export.ts
 var import_picocolors9 = __toESM(require_picocolors(), 1);
+function registerExportCommands(cli, ctx) {
+  cli.command("export [app]", "Download an export bundle for an app (no secrets)").option("--out <path>", "Where to write the .tar.gz (defaults to ./{name}-{date}.tar.gz)").action(async (app, options) => {
+    const result = await exportApp(ctx, {
+      app,
+      out: options.out,
+      deliveryKind: "cli"
+    });
+    await writeLine(ctx, `${import_picocolors9.default.green("✓")} exported ${result.appName} → ${result.outPath} (${(result.bytes / 1024).toFixed(1)} KB)`);
+    await writeLine(ctx, import_picocolors9.default.dim("Env values are not included. To export encrypted env values, use the dashboard's Settings → Export and confirm your password."));
+  });
+}
+
+// src/commands/github.ts
+var import_picocolors10 = __toESM(require_picocolors(), 1);
 async function printWebhookInstructions(ctx, instructions, branch) {
-  await writeLine(ctx, import_picocolors9.default.bold("Add this webhook in GitHub to enable auto-deploy on push:"));
+  await writeLine(ctx, import_picocolors10.default.bold("Add this webhook in GitHub to enable auto-deploy on push:"));
   await writeLine(ctx, `  URL:   ${instructions.settingsUrl}`);
   await writeLine(ctx, "");
   await writeLine(ctx, "  Field            Value");
@@ -114331,9 +114687,9 @@ async function printWebhookInstructions(ctx, instructions, branch) {
   await writeLine(ctx, `  Secret           ${instructions.secret}`);
   await writeLine(ctx, "  Which events?    Just the push event");
   await writeLine(ctx, "");
-  await writeLine(ctx, import_picocolors9.default.yellow("  ⚠  Treat this secret like a password — save it now, it won't be shown again."));
+  await writeLine(ctx, import_picocolors10.default.yellow("  ⚠  Treat this secret like a password — save it now, it won't be shown again."));
   await writeLine(ctx, "");
-  await writeLine(ctx, import_picocolors9.default.dim(`After adding the webhook, every push to ${branch} will auto-deploy.`));
+  await writeLine(ctx, import_picocolors10.default.dim(`After adding the webhook, every push to ${branch} will auto-deploy.`));
 }
 function registerGithubCommands(cli, ctx) {
   cli.command("github [action] [repoUrl] [...rest]", "GitHub integration: connect | setup-webhook").option("--app <name>", "App name (overrides percher.toml)").option("--branch <branch>", "(connect only) Branch to track (default: main)").action(async (action, repoUrl, _rest, options) => {
@@ -114346,24 +114702,24 @@ function registerGithubCommands(cli, ctx) {
         repoUrl,
         branch: options.branch
       });
-      await writeLine(ctx, `${import_picocolors9.default.green("✓")} Connected to ${result.repoUrl} (branch: ${result.branch})`);
-      await writeLine(ctx, `${import_picocolors9.default.green("✓")} Deploy started: ${result.deployId}`);
+      await writeLine(ctx, `${import_picocolors10.default.green("✓")} Connected to ${result.repoUrl} (branch: ${result.branch})`);
+      await writeLine(ctx, `${import_picocolors10.default.green("✓")} Deploy started: ${result.deployId}`);
       await writeLine(ctx, "");
       if (result.webhookSetupFailed) {
-        await writeLine(ctx, import_picocolors9.default.yellow(`⚠  Webhook setup failed: ${result.webhookSetupError ?? "unknown error"}`));
-        await writeLine(ctx, import_picocolors9.default.yellow("   Auto-deploy will NOT work until you re-run webhook setup:"));
-        await writeLine(ctx, `   ${import_picocolors9.default.bold(`percher github setup-webhook${options.app ? ` --app ${options.app}` : ""}`)}`);
+        await writeLine(ctx, import_picocolors10.default.yellow(`⚠  Webhook setup failed: ${result.webhookSetupError ?? "unknown error"}`));
+        await writeLine(ctx, import_picocolors10.default.yellow("   Auto-deploy will NOT work until you re-run webhook setup:"));
+        await writeLine(ctx, `   ${import_picocolors10.default.bold(`percher github setup-webhook${options.app ? ` --app ${options.app}` : ""}`)}`);
         return;
       }
       if (result.webhookInstructions) {
         await printWebhookInstructions(ctx, result.webhookInstructions, result.branch);
       }
-      await writeLine(ctx, import_picocolors9.default.dim(`Track the initial deploy: percher deploys inspect ${result.deployId}`));
+      await writeLine(ctx, import_picocolors10.default.dim(`Track the initial deploy: percher deploys inspect ${result.deployId}`));
       return;
     }
     if (action === "setup-webhook") {
       const result = await githubSetupWebhook(ctx, { app: options.app });
-      await writeLine(ctx, `${import_picocolors9.default.green("✓")} Webhook regenerated for ${result.app}`);
+      await writeLine(ctx, `${import_picocolors10.default.green("✓")} Webhook regenerated for ${result.app}`);
       await writeLine(ctx, "");
       await printWebhookInstructions(ctx, result.webhookInstructions, result.branch);
       return;
@@ -114375,17 +114731,17 @@ function registerGithubCommands(cli, ctx) {
 }
 
 // src/commands/migrate.ts
-var import_picocolors10 = __toESM(require_picocolors(), 1);
+var import_picocolors11 = __toESM(require_picocolors(), 1);
 function registerMigrateCommands(cli, ctx) {
   cli.command("migrate-from-supabase", "Migrate a Supabase project to PocketBase (FUTURE9 Phase A read-only + Phase B preview writes)").option("--project <ref>", "Supabase project reference (the 20-char id from the project URL)").option("--token <token>", "Supabase personal access token (sbp_...). Read from SUPABASE_ACCESS_TOKEN if omitted.").option("--inspect-only", "Run schema introspection only (Phase A — read-only, no file writes)").option("--output-dir <dir>", "Where to write the Phase B preview files (default: ./migration-preview/)").option("--json", "Output the structured result as JSON").action(async (options) => {
     const projectRef = options.project;
     const token = options.token ?? ctx.env.SUPABASE_ACCESS_TOKEN;
     if (!projectRef) {
-      await writeLine(ctx, `${import_picocolors10.default.red("✗")} Missing --project. Pass your Supabase project ref (e.g. --project abcdefghijklmnopqrst).`);
+      await writeLine(ctx, `${import_picocolors11.default.red("✗")} Missing --project. Pass your Supabase project ref (e.g. --project abcdefghijklmnopqrst).`);
       throw new SilentExitError(1);
     }
     if (!token) {
-      await writeLine(ctx, `${import_picocolors10.default.red("✗")} Missing --token. Pass --token sbp_... or set SUPABASE_ACCESS_TOKEN. Generate one at https://supabase.com/dashboard/account/tokens`);
+      await writeLine(ctx, `${import_picocolors11.default.red("✗")} Missing --token. Pass --token sbp_... or set SUPABASE_ACCESS_TOKEN. Generate one at https://supabase.com/dashboard/account/tokens`);
       throw new SilentExitError(1);
     }
     if (options.inspectOnly) {
@@ -114420,103 +114776,103 @@ function registerMigrateCommands(cli, ctx) {
 async function renderInspectHuman(ctx, result) {
   if (result.status === "failed") {
     const err = result.error;
-    await writeLine(ctx, `${import_picocolors10.default.red("✗")} ${err?.title ?? "Inspection failed"}`);
+    await writeLine(ctx, `${import_picocolors11.default.red("✗")} ${err?.title ?? "Inspection failed"}`);
     if (err?.explanation)
       await writeLine(ctx, `  ${err.explanation}`);
     if (err?.suggestion)
-      await writeLine(ctx, import_picocolors10.default.dim(`  ${err.suggestion}`));
+      await writeLine(ctx, import_picocolors11.default.dim(`  ${err.suggestion}`));
     return;
   }
-  await writeLine(ctx, `${import_picocolors10.default.green("✓")} ${result.summary}`);
+  await writeLine(ctx, `${import_picocolors11.default.green("✓")} ${result.summary}`);
   await writeLine(ctx, "");
-  await writeLine(ctx, import_picocolors10.default.bold("Tables"));
+  await writeLine(ctx, import_picocolors11.default.bold("Tables"));
   if (result.tables.length === 0) {
-    await writeLine(ctx, import_picocolors10.default.dim("  (none in user schemas)"));
+    await writeLine(ctx, import_picocolors11.default.dim("  (none in user schemas)"));
   }
   for (const table of result.tables) {
     const pkCount = table.columns.filter((c) => c.isPrimaryKey).length;
     const fkCount = table.columns.filter((c) => c.foreignKey !== null).length;
     const policyCount = table.rlsPolicies.length;
     const rowEstimate = table.estimatedRowCount.toLocaleString();
-    await writeLine(ctx, `  ${import_picocolors10.default.cyan(`${table.schema}.${table.name}`)}  ${import_picocolors10.default.dim(`cols=${table.columns.length} pk=${pkCount} fk=${fkCount} rls=${policyCount} rows≈${rowEstimate}`)}`);
+    await writeLine(ctx, `  ${import_picocolors11.default.cyan(`${table.schema}.${table.name}`)}  ${import_picocolors11.default.dim(`cols=${table.columns.length} pk=${pkCount} fk=${fkCount} rls=${policyCount} rows≈${rowEstimate}`)}`);
   }
   if (result.storageBuckets.length > 0) {
     await writeLine(ctx, "");
-    await writeLine(ctx, import_picocolors10.default.bold("Storage buckets"));
+    await writeLine(ctx, import_picocolors11.default.bold("Storage buckets"));
     for (const bucket of result.storageBuckets) {
       const visibility = bucket.public ? "public" : "private";
-      await writeLine(ctx, `  ${import_picocolors10.default.cyan(bucket.name)} ${import_picocolors10.default.dim(`(${visibility})`)}`);
+      await writeLine(ctx, `  ${import_picocolors11.default.cyan(bucket.name)} ${import_picocolors11.default.dim(`(${visibility})`)}`);
     }
   }
   if (result.authUsersCount !== null) {
     await writeLine(ctx, "");
-    await writeLine(ctx, `${import_picocolors10.default.bold("Auth users")}: ${result.authUsersCount}`);
+    await writeLine(ctx, `${import_picocolors11.default.bold("Auth users")}: ${result.authUsersCount}`);
   }
   if (result.warnings.length > 0) {
     await writeLine(ctx, "");
-    await writeLine(ctx, import_picocolors10.default.bold(`Warnings (${result.warnings.length})`));
+    await writeLine(ctx, import_picocolors11.default.bold(`Warnings (${result.warnings.length})`));
     for (const warning of result.warnings) {
-      await writeLine(ctx, `  ${import_picocolors10.default.yellow("⚠")} ${warning}`);
+      await writeLine(ctx, `  ${import_picocolors11.default.yellow("⚠")} ${warning}`);
     }
   }
   await writeLine(ctx, "");
-  await writeLine(ctx, import_picocolors10.default.dim("--inspect-only is read-only. Drop the flag to also write the Phase B PocketBase-schema preview."));
+  await writeLine(ctx, import_picocolors11.default.dim("--inspect-only is read-only. Drop the flag to also write the Phase B PocketBase-schema preview."));
 }
 async function renderSchemaHuman(ctx, result) {
   if (result.status === "failed") {
     const err = result.error;
-    await writeLine(ctx, `${import_picocolors10.default.red("✗")} ${err?.title ?? "Migration preview failed"}`);
+    await writeLine(ctx, `${import_picocolors11.default.red("✗")} ${err?.title ?? "Migration preview failed"}`);
     if (err?.explanation)
       await writeLine(ctx, `  ${err.explanation}`);
     if (err?.suggestion)
-      await writeLine(ctx, import_picocolors10.default.dim(`  ${err.suggestion}`));
+      await writeLine(ctx, import_picocolors11.default.dim(`  ${err.suggestion}`));
     return;
   }
-  await writeLine(ctx, `${import_picocolors10.default.green("✓")} ${result.summary}`);
+  await writeLine(ctx, `${import_picocolors11.default.green("✓")} ${result.summary}`);
   await writeLine(ctx, "");
-  await writeLine(ctx, import_picocolors10.default.bold("Files written"));
+  await writeLine(ctx, import_picocolors11.default.bold("Files written"));
   for (const path of result.filesWritten) {
-    await writeLine(ctx, `  ${import_picocolors10.default.cyan(path)}`);
+    await writeLine(ctx, `  ${import_picocolors11.default.cyan(path)}`);
   }
   const preview = result.preview;
   if (!preview)
     return;
   if (preview.collections.length > 0) {
     await writeLine(ctx, "");
-    await writeLine(ctx, import_picocolors10.default.bold("Collections"));
+    await writeLine(ctx, import_picocolors11.default.bold("Collections"));
     for (const collection of preview.collections) {
       const fields = collection.schema.length;
       const relations = collection.schema.filter((f) => f.type === "relation").length;
-      await writeLine(ctx, `  ${import_picocolors10.default.cyan(collection.name)} ${import_picocolors10.default.dim(`← ${collection.sourceTable}  fields=${fields} relations=${relations}`)}`);
+      await writeLine(ctx, `  ${import_picocolors11.default.cyan(collection.name)} ${import_picocolors11.default.dim(`← ${collection.sourceTable}  fields=${fields} relations=${relations}`)}`);
     }
   }
   if (preview.warnings.length > 0) {
     await writeLine(ctx, "");
-    await writeLine(ctx, import_picocolors10.default.bold(`Warnings (${preview.warnings.length})`));
+    await writeLine(ctx, import_picocolors11.default.bold(`Warnings (${preview.warnings.length})`));
     for (const warning of preview.warnings.slice(0, 10)) {
-      await writeLine(ctx, `  ${import_picocolors10.default.yellow("⚠")} ${warning}`);
+      await writeLine(ctx, `  ${import_picocolors11.default.yellow("⚠")} ${warning}`);
     }
     if (preview.warnings.length > 10) {
-      await writeLine(ctx, import_picocolors10.default.dim(`  …and ${preview.warnings.length - 10} more — see MIGRATION_NOTES.md`));
+      await writeLine(ctx, import_picocolors11.default.dim(`  …and ${preview.warnings.length - 10} more — see MIGRATION_NOTES.md`));
     }
   }
   await writeLine(ctx, "");
-  await writeLine(ctx, import_picocolors10.default.dim("Phase B is a preview. Phase C (data import) and Phase D (client rewrite) ship in later releases. Review MIGRATION_NOTES.md before any import."));
+  await writeLine(ctx, import_picocolors11.default.dim("Phase B is a preview. Phase C (data import) and Phase D (client rewrite) ship in later releases. Review MIGRATION_NOTES.md before any import."));
 }
 
 // src/commands/sharing.ts
-var import_picocolors11 = __toESM(require_picocolors(), 1);
+var import_picocolors12 = __toESM(require_picocolors(), 1);
 function registerSharingCommands(cli, ctx) {
   cli.command("share [action] [arg] [valueOrRole]", "Per-app collaborator invites: list | invite <email> | role <shareId> <role> | revoke <shareId>").option("--app <name>", "App name (overrides percher.toml)").option("--role <role>", "(invite only) viewer | admin — viewer is read-only, admin can deploy + change config").action(async (action, arg, valueOrRole, options) => {
     if (action === "list" || action === undefined) {
       const rows = await shareList(ctx, { app: options.app });
       if (rows.length === 0) {
-        await writeLine(ctx, import_picocolors11.default.dim("No collaborators."));
+        await writeLine(ctx, import_picocolors12.default.dim("No collaborators."));
         return;
       }
       for (const r of rows) {
-        const state = r.accepted ? import_picocolors11.default.green("accepted") : import_picocolors11.default.yellow("pending");
-        const roleStr = r.role === "admin" ? import_picocolors11.default.cyan("admin") : import_picocolors11.default.dim("viewer");
+        const state = r.accepted ? import_picocolors12.default.green("accepted") : import_picocolors12.default.yellow("pending");
+        const roleStr = r.role === "admin" ? import_picocolors12.default.cyan("admin") : import_picocolors12.default.dim("viewer");
         await writeLine(ctx, `${r.id}  ${roleStr.padEnd(15)}  ${state.padEnd(15)}  ${r.email}`);
       }
       return;
@@ -114534,8 +114890,8 @@ function registerSharingCommands(cli, ctx) {
         email: arg,
         role: roleRaw
       });
-      await writeLine(ctx, `${import_picocolors11.default.green("✓")} Invited ${created.email} as ${created.role} (id ${created.id})`);
-      await writeLine(ctx, import_picocolors11.default.dim(`Pending until accepted — invite expires ${new Date(created.expiresAt).toLocaleDateString()}.`));
+      await writeLine(ctx, `${import_picocolors12.default.green("✓")} Invited ${created.email} as ${created.role} (id ${created.id})`);
+      await writeLine(ctx, import_picocolors12.default.dim(`Pending until accepted — invite expires ${new Date(created.expiresAt).toLocaleDateString()}.`));
       return;
     }
     if (action === "role") {
@@ -114550,7 +114906,7 @@ function registerSharingCommands(cli, ctx) {
         shareId: arg,
         role: valueOrRole
       });
-      await writeLine(ctx, `${import_picocolors11.default.green("✓")} ${updated.email} is now ${import_picocolors11.default.cyan(updated.role)}`);
+      await writeLine(ctx, `${import_picocolors12.default.green("✓")} ${updated.email} is now ${import_picocolors12.default.cyan(updated.role)}`);
       return;
     }
     if (action === "revoke") {
@@ -114558,7 +114914,7 @@ function registerSharingCommands(cli, ctx) {
         throw new Error("Usage: percher share revoke <shareId> [--app <name>]");
       }
       await shareRevoke(ctx, { app: options.app, shareId: arg });
-      await writeLine(ctx, `${import_picocolors11.default.green("✓")} Revoked share ${arg}`);
+      await writeLine(ctx, `${import_picocolors12.default.green("✓")} Revoked share ${arg}`);
       return;
     }
     throw new Error(`Unknown share action "${action}". Use list | invite <email> | role <shareId> <role> | revoke <shareId>.`);
@@ -114571,11 +114927,11 @@ function registerSharingCommands(cli, ctx) {
     if (action === undefined || action === "list") {
       const pending = await invitesList(ctx, {});
       if (pending.length === 0) {
-        await writeLine(ctx, import_picocolors11.default.dim("No pending invites."));
+        await writeLine(ctx, import_picocolors12.default.dim("No pending invites."));
         return;
       }
       for (const inv of pending) {
-        const roleStr = inv.role === "admin" ? import_picocolors11.default.cyan("admin") : import_picocolors11.default.dim("viewer");
+        const roleStr = inv.role === "admin" ? import_picocolors12.default.cyan("admin") : import_picocolors12.default.dim("viewer");
         await writeLine(ctx, `${inv.id}  ${roleStr.padEnd(15)}  ${inv.appName.padEnd(24)}  from ${inv.invitedBy}`);
       }
       return;
@@ -114586,10 +114942,10 @@ function registerSharingCommands(cli, ctx) {
       }
       const accepted = await invitesAccept(ctx, { shareId });
       if (accepted.alreadyAccepted) {
-        await writeLine(ctx, import_picocolors11.default.dim(`Invite ${shareId} was already accepted.`));
+        await writeLine(ctx, import_picocolors12.default.dim(`Invite ${shareId} was already accepted.`));
         return;
       }
-      await writeLine(ctx, `${import_picocolors11.default.green("✓")} Accepted — you now have ${import_picocolors11.default.cyan(accepted.role)} access to the shared app.`);
+      await writeLine(ctx, `${import_picocolors12.default.green("✓")} Accepted — you now have ${import_picocolors12.default.cyan(accepted.role)} access to the shared app.`);
       return;
     }
     if (action === "decline") {
@@ -114597,7 +114953,7 @@ function registerSharingCommands(cli, ctx) {
         throw new Error("Usage: percher invites decline <shareId>");
       }
       await invitesDecline(ctx, { shareId });
-      await writeLine(ctx, `${import_picocolors11.default.green("✓")} Declined invite ${shareId}.`);
+      await writeLine(ctx, `${import_picocolors12.default.green("✓")} Declined invite ${shareId}.`);
       return;
     }
     throw new Error(`Unknown invites action "${action}". Use list | accept <shareId> | decline <shareId>.`);
@@ -114608,7 +114964,7 @@ function registerSharingCommands(cli, ctx) {
 }
 
 // src/commands/status.ts
-var import_picocolors12 = __toESM(require_picocolors(), 1);
+var import_picocolors13 = __toESM(require_picocolors(), 1);
 function registerStatusCommands(cli, ctx) {
   cli.command("status", "Show Percher platform status (API + worker health)").option("--json", "Output JSON instead of formatted text").action(async (options) => {
     const result = await status(ctx, { json: Boolean(options.json) });
@@ -114624,44 +114980,44 @@ function registerStatusCommands(cli, ctx) {
   });
 }
 async function renderHumanStatus(ctx, result) {
-  const symbol2 = result.verdict === "operational" ? import_picocolors12.default.green("✓") : result.verdict === "worker-degraded" ? import_picocolors12.default.yellow("⚠") : import_picocolors12.default.red("✗");
+  const symbol2 = result.verdict === "operational" ? import_picocolors13.default.green("✓") : result.verdict === "worker-degraded" ? import_picocolors13.default.yellow("⚠") : import_picocolors13.default.red("✗");
   await writeLine(ctx, `${symbol2} ${result.summary}`);
   if (!result.health)
     return;
   const worker = result.health.worker;
   if (!worker) {
-    await writeLine(ctx, import_picocolors12.default.dim("  worker: not configured (local Docker socket)"));
+    await writeLine(ctx, import_picocolors13.default.dim("  worker: not configured (local Docker socket)"));
     return;
   }
   if (worker.health) {
     const ok = worker.health.ok;
-    const symbol3 = ok ? import_picocolors12.default.green("✓") : import_picocolors12.default.red("✗");
+    const symbol3 = ok ? import_picocolors13.default.green("✓") : import_picocolors13.default.red("✗");
     const lastOk = worker.health.lastOkAt ?? "never";
-    await writeLine(ctx, `  ${symbol3} worker health: ${ok ? "ok" : `failing (${worker.health.consecutiveErrs} consecutive)`}  last-ok=${import_picocolors12.default.dim(lastOk)}`);
+    await writeLine(ctx, `  ${symbol3} worker health: ${ok ? "ok" : `failing (${worker.health.consecutiveErrs} consecutive)`}  last-ok=${import_picocolors13.default.dim(lastOk)}`);
   }
   if (worker.circuitBreaker) {
     const breaker = worker.circuitBreaker;
-    const symbol3 = breaker.open ? import_picocolors12.default.red("✗") : import_picocolors12.default.green("✓");
+    const symbol3 = breaker.open ? import_picocolors13.default.red("✗") : import_picocolors13.default.green("✓");
     const state = breaker.open ? "open (deploys fail fast)" : "closed";
     await writeLine(ctx, `  ${symbol3} circuit breaker: ${state}  ${breaker.failuresInWindow}/${breaker.threshold} failures in last ${Math.round(breaker.windowMs / 1000)}s`);
   }
   if (result.health.version) {
-    await writeLine(ctx, import_picocolors12.default.dim(`  api version: ${result.health.version}`));
+    await writeLine(ctx, import_picocolors13.default.dim(`  api version: ${result.health.version}`));
   }
 }
 
 // src/commands/transfers.ts
-var import_picocolors13 = __toESM(require_picocolors(), 1);
+var import_picocolors14 = __toESM(require_picocolors(), 1);
 function registerTransfersCommands(cli, ctx) {
   cli.command("transfer [emailOrTransferId]", "Transfer ownership of an app: `transfer <email>` initiates; `transfer --cancel <id>` cancels; `transfer --list` shows history").option("--app <name>", "App name (overrides percher.toml)").option("--cancel", "Cancel a pending transfer by id (positional arg is the transferId)").option("--list", "List the transfer history for this app").action(async (emailOrTransferId, options) => {
     if (options.list) {
       const rows = await transferListForApp(ctx, { app: options.app });
       if (rows.length === 0) {
-        await writeLine(ctx, import_picocolors13.default.dim("No transfers for this app."));
+        await writeLine(ctx, import_picocolors14.default.dim("No transfers for this app."));
         return;
       }
       for (const r of rows) {
-        const status2 = r.status === "pending" ? import_picocolors13.default.yellow("pending") : r.status === "accepted" ? import_picocolors13.default.green("accepted") : import_picocolors13.default.dim(r.status);
+        const status2 = r.status === "pending" ? import_picocolors14.default.yellow("pending") : r.status === "accepted" ? import_picocolors14.default.green("accepted") : import_picocolors14.default.dim(r.status);
         await writeLine(ctx, `${r.id}  ${status2.padEnd(20)}  → ${r.toEmail}  (${r.createdAt})`);
       }
       return;
@@ -114674,7 +115030,7 @@ function registerTransfersCommands(cli, ctx) {
         app: options.app,
         transferId: emailOrTransferId
       });
-      await writeLine(ctx, `${import_picocolors13.default.green("✓")} Cancelled transfer ${emailOrTransferId}`);
+      await writeLine(ctx, `${import_picocolors14.default.green("✓")} Cancelled transfer ${emailOrTransferId}`);
       return;
     }
     if (!emailOrTransferId) {
@@ -114684,17 +115040,17 @@ function registerTransfersCommands(cli, ctx) {
       app: options.app,
       email: emailOrTransferId
     });
-    await writeLine(ctx, `${import_picocolors13.default.green("✓")} Transfer initiated to ${initiated.toEmail} (id ${initiated.id})`);
-    await writeLine(ctx, import_picocolors13.default.dim(`Expires ${new Date(initiated.expiresAt).toLocaleDateString()}. The recipient must accept via 'percher transfers accept ${initiated.id}'.`));
+    await writeLine(ctx, `${import_picocolors14.default.green("✓")} Transfer initiated to ${initiated.toEmail} (id ${initiated.id})`);
+    await writeLine(ctx, import_picocolors14.default.dim(`Expires ${new Date(initiated.expiresAt).toLocaleDateString()}. The recipient must accept via 'percher transfers accept ${initiated.id}'.`));
     if (initiated.notes) {
-      await writeLine(ctx, import_picocolors13.default.yellow(`  ⚠  ${initiated.notes}`));
+      await writeLine(ctx, import_picocolors14.default.yellow(`  ⚠  ${initiated.notes}`));
     }
   });
   cli.command("transfers [action] [transferId]", "Incoming ownership transfers: list (default) | accept <transferId> | decline <transferId>").action(async (action, transferId) => {
     if (action === undefined || action === "list") {
       const rows = await transfersIncoming(ctx, {});
       if (rows.length === 0) {
-        await writeLine(ctx, import_picocolors13.default.dim("No pending incoming transfers."));
+        await writeLine(ctx, import_picocolors14.default.dim("No pending incoming transfers."));
         return;
       }
       for (const r of rows) {
@@ -114707,7 +115063,7 @@ function registerTransfersCommands(cli, ctx) {
         throw new Error("Usage: percher transfers accept <transferId>");
       }
       const accepted = await transfersAccept(ctx, { transferId });
-      await writeLine(ctx, `${import_picocolors13.default.green("✓")} You now own ${import_picocolors13.default.cyan(accepted.appName)}. Run 'percher open --app ${accepted.appName}' to see it.`);
+      await writeLine(ctx, `${import_picocolors14.default.green("✓")} You now own ${import_picocolors14.default.cyan(accepted.appName)}. Run 'percher open --app ${accepted.appName}' to see it.`);
       return;
     }
     if (action === "decline") {
@@ -114715,7 +115071,7 @@ function registerTransfersCommands(cli, ctx) {
         throw new Error("Usage: percher transfers decline <transferId>");
       }
       await transfersDecline(ctx, { transferId });
-      await writeLine(ctx, `${import_picocolors13.default.green("✓")} Declined transfer ${transferId}.`);
+      await writeLine(ctx, `${import_picocolors14.default.green("✓")} Declined transfer ${transferId}.`);
       return;
     }
     throw new Error(`Unknown transfers action "${action}". Use list | accept <id> | decline <id>.`);
@@ -114784,40 +115140,52 @@ async function createCliContext() {
 }
 
 // src/output.ts
-var import_picocolors14 = __toESM(require_picocolors(), 1);
+var import_picocolors15 = __toESM(require_picocolors(), 1);
 async function renderError(stderr, error48) {
   const writer = stderr.getWriter();
   const encoder = new TextEncoder;
   const lines = [];
   if (error48 instanceof PercherTomlError) {
-    lines.push(`${import_picocolors14.default.red(`error (${error48.code}):`)} ${error48.message}`);
+    lines.push(`${import_picocolors15.default.red(`error (${error48.code}):`)} ${error48.message}`);
     if (error48.tomlLine !== undefined) {
-      lines.push(import_picocolors14.default.dim(`  at percher.toml line ${error48.tomlLine}`));
+      lines.push(import_picocolors15.default.dim(`  at percher.toml line ${error48.tomlLine}`));
     }
     for (const issue2 of error48.issues ?? []) {
-      lines.push(`${import_picocolors14.default.dim("  · ") + import_picocolors14.default.yellow(issue2.path.join("."))}: ${issue2.message}`);
+      lines.push(`${import_picocolors15.default.dim("  · ") + import_picocolors15.default.yellow(issue2.path.join("."))}: ${issue2.message}`);
+    }
+  } else if (error48 instanceof SunsetError) {
+    if (error48.gateCode === "platform_delete_gated") {
+      lines.push(`${import_picocolors15.default.yellow("Percher is shutting down — deletes are paused.")}`);
+      lines.push(error48.message);
+      lines.push(import_picocolors15.default.dim(`  To delete and permanently forfeit your export window, confirm with your password in the dashboard: ${error48.dashboardUrl}`));
+      lines.push(import_picocolors15.default.dim("  The CLI cannot perform this delete during sunset — it must go through the dashboard."));
+    } else {
+      lines.push(`${import_picocolors15.default.yellow("Percher is in read-only mode ahead of shutdown.")}`);
+      lines.push(error48.message);
+      lines.push(import_picocolors15.default.dim(`  Your apps keep running. Export them any time from the dashboard: ${error48.dashboardUrl}`));
     }
+    lines.push(import_picocolors15.default.dim(`  Final data deletion: ${error48.finalDeletionDate}`));
   } else if (error48 instanceof PercherApiError) {
     if (error48.status === 502 || error48.status === 503) {
-      lines.push(`${import_picocolors14.default.red("error:")} Percher API is temporarily unavailable (HTTP ${error48.status}). Try again in a few seconds.`);
+      lines.push(`${import_picocolors15.default.red("error:")} Percher API is temporarily unavailable (HTTP ${error48.status}). Try again in a few seconds.`);
     } else {
-      lines.push(`${import_picocolors14.default.red("error:")} ${error48.message}`);
-      lines.push(import_picocolors14.default.dim(`  ${error48.code} (HTTP ${error48.status})`));
+      lines.push(`${import_picocolors15.default.red("error:")} ${error48.message}`);
+      lines.push(import_picocolors15.default.dim(`  ${error48.code} (HTTP ${error48.status})`));
     }
     if (error48.requestId)
-      lines.push(import_picocolors14.default.dim(`  request: ${error48.requestId}`));
+      lines.push(import_picocolors15.default.dim(`  request: ${error48.requestId}`));
   } else if (error48 instanceof PercherCoreError) {
-    lines.push(`${import_picocolors14.default.red(`error (${error48.code}):`)} ${error48.message}`);
+    lines.push(`${import_picocolors15.default.red(`error (${error48.code}):`)} ${error48.message}`);
     if (error48.hint)
-      lines.push(import_picocolors14.default.dim(`  ${error48.hint}`));
+      lines.push(import_picocolors15.default.dim(`  ${error48.hint}`));
   } else if (error48 instanceof Error) {
-    lines.push(`${import_picocolors14.default.red("unexpected error:")} ${error48.message}`);
+    lines.push(`${import_picocolors15.default.red("unexpected error:")} ${error48.message}`);
     if (error48.stack)
-      lines.push(import_picocolors14.default.dim(error48.stack.split(`
+      lines.push(import_picocolors15.default.dim(error48.stack.split(`
 `).slice(1, 4).join(`
 `)));
   } else {
-    lines.push(`${import_picocolors14.default.red("unexpected error:")} ${String(error48)}`);
+    lines.push(`${import_picocolors15.default.red("unexpected error:")} ${String(error48)}`);
   }
   try {
     await writer.write(encoder.encode(`${lines.join(`
@@ -114830,7 +115198,7 @@ async function renderError(stderr, error48) {
 // package.json
 var package_default = {
   name: "percher",
-  version: "0.4.1",
+  version: "0.4.2",
   description: "CLI for the Percher hosting platform — publish apps with one command",
   type: "module",
   bin: {
@@ -114927,7 +115295,7 @@ async function showTelemetryNotice() {
 }
 
 // src/version-check.ts
-var import_picocolors15 = __toESM(require_picocolors(), 1);
+var import_picocolors16 = __toESM(require_picocolors(), 1);
 async function checkForUpdates() {
   try {
     const res = await fetch("https://registry.npmjs.org/percher/latest", {
@@ -114938,9 +115306,9 @@ async function checkForUpdates() {
     const data2 = await res.json();
     const latest = data2.version;
     if (latest && latest !== VERSION) {
-      console.error(import_picocolors15.default.yellow(`
+      console.error(import_picocolors16.default.yellow(`
 Update available: ${VERSION} → ${latest}`));
-      console.error(import_picocolors15.default.dim(`Run: bunx percher@latest
+      console.error(import_picocolors16.default.dim(`Run: bunx percher@latest
 `));
     }
   } catch {}
@@ -114953,6 +115321,7 @@ async function run(argv, ctxOverride) {
   registerAppsCommands(cli, ctx);
   registerDeploysCommands(cli, ctx, argv);
   registerEnvCommands(cli, ctx);
+  registerExportCommands(cli, ctx);
   registerDataCommands(cli, ctx, argv);
   registerAuthCommands(cli, ctx);
   registerAccountCommands(cli, ctx);