percher 0.4.1 → 0.5.0

package/dist/bin/percher.js

@@ -8824,7 +8824,7 @@ var require_util = __commonJS((exports) => {
       }
       path = url2.path;
     }
-    var isAbsolute2 = exports.isAbsolute(path);
+    var isAbsolute3 = exports.isAbsolute(path);
     var parts = path.split(/\/+/);
     for (var part, up = 0, i = parts.length - 1;i >= 0; i--) {
       part = parts[i];
@@ -8844,7 +8844,7 @@ var require_util = __commonJS((exports) => {
     }
     path = parts.join("/");
     if (path === "") {
-      path = isAbsolute2 ? "/" : ".";
+      path = isAbsolute3 ? "/" : ".";
     }
     if (url2) {
       url2.path = path;
@@ -101395,7 +101395,7 @@ function finalize(ctx, schema) {
     result.$schema = "http://json-schema.org/draft-07/schema#";
   } else if (ctx.target === "draft-04") {
     result.$schema = "http://json-schema.org/draft-04/schema#";
-  } else if (ctx.target === "openapi-3.0") {} else {}
+  } else if (ctx.target === "openapi-3.0") {}
   if (ctx.external?.uri) {
     const id = ctx.external.registry.get(schema)?.id;
     if (!id)
@@ -101643,7 +101643,7 @@ var literalProcessor = (schema, ctx, json, _params) => {
     if (val === undefined) {
       if (ctx.unrepresentable === "throw") {
         throw new Error("Literal `undefined` cannot be represented in JSON Schema");
-      } else {}
+      }
     } else if (typeof val === "bigint") {
       if (ctx.unrepresentable === "throw") {
         throw new Error("BigInt literals cannot be represented in JSON Schema");
@@ -103988,8 +103988,46 @@ function date4(params) {
 
 // ../../node_modules/.bun/zod@4.3.6/node_modules/zod/v4/classic/external.js
 config(en_default());
-// ../toml/dist/schema.js
+// ../shared/dist/app-name.js
 var APP_NAME_RE = /^[a-z][a-z0-9-]{2,39}$/;
+// ../shared/dist/limits.js
+var MAX_TARBALL_BYTES = 500 * 1024 * 1024;
+// ../shared/dist/logs.js
+var MAX_LOG_SEARCH_LENGTH = 256;
+// ../shared/dist/platform-env.js
+var PERCHER_INJECTED_ENV_KEYS = new Set([
+  "NODE_ENV",
+  "PORT",
+  "DATABASE_URL",
+  "POCKETBASE_URL",
+  "POCKETBASE_ADMIN_EMAIL",
+  "POCKETBASE_ADMIN_PASSWORD",
+  "PERCHER_APP_NAME",
+  "PERCHER_APP_URL",
+  "HTTP_PROXY",
+  "HTTPS_PROXY",
+  "NO_PROXY",
+  "NODE_USE_ENV_PROXY"
+]);
+var PROXY_LOWERCASE_ALIASES = new Set([
+  "http_proxy",
+  "https_proxy",
+  "no_proxy"
+]);
+// ../shared/dist/runtime.js
+var DEFAULT_NODE_VERSION_MAJOR = "24";
+var DEFAULT_NODE_VERSION_LABEL = `${DEFAULT_NODE_VERSION_MAJOR} LTS`;
+// ../shared/dist/timeouts.js
+var TIMEOUTS = {
+  workerBuildSubprocess: 10 * 60000,
+  apiToWorkerBuildFetch: 11 * 60000,
+  clientPublishPoll: 12 * 60000,
+  workerHealthcheck: 5000,
+  watchdogList: 15000,
+  mcpWaitDeployDefault: 30000,
+  mcpWaitDeployMax: 12 * 60000
+};
+// ../toml/dist/schema.js
 var appSchema = exports_external.object({
   name: exports_external.string().regex(APP_NAME_RE, "must be 3–40 chars, lowercase, start with a letter, [a-z0-9-] only"),
   runtime: exports_external.enum(["node", "bun", "python", "static", "docker"]),
@@ -104030,6 +104068,7 @@ var buildSchema = exports_external.object({
 var webSchema = exports_external.object({
   port: exports_external.number().int().min(1024).max(65535),
   health: exports_external.string().optional(),
+  command: exports_external.string().min(1).max(1000).optional(),
   password: exports_external.boolean().optional(),
   spa: exports_external.boolean().optional()
 }).strict();
@@ -104202,8 +104241,18 @@ var devSchema = exports_external.object({
 var requiredEnvSchema = exports_external.record(exports_external.string(), exports_external.enum(["secret", "url", "string"]));
 var cronSchema = exports_external.object({
   schedule: exports_external.string().min(1),
-  command: exports_external.string().min(1)
+  command: exports_external.string().min(1),
+  description: exports_external.string().max(200).optional()
 }).strict();
+var cronsSchema = exports_external.record(exports_external.string(), cronSchema).superRefine((jobs, ctx) => {
+  if (Object.hasOwn(jobs, "")) {
+    ctx.addIssue({
+      code: exports_external.ZodIssueCode.custom,
+      path: [""],
+      message: "cron job name must not be empty"
+    });
+  }
+});
 var addonsSchema = exports_external.object({
   pocketbase: exports_external.object({ enabled: exports_external.boolean().optional() }).strict().optional(),
   cron: exports_external.object({ enabled: exports_external.boolean().optional() }).strict().optional(),
@@ -104228,7 +104277,7 @@ var percherConfigSchema = exports_external.object({
   resources: resourcesSchema.optional(),
   dev: devSchema.optional(),
   required_env: requiredEnvSchema.optional(),
-  crons: exports_external.record(exports_external.string(), cronSchema).optional(),
+  crons: cronsSchema.optional(),
   addons: addonsSchema.optional(),
   checks: exports_external.record(exports_external.string(), checkSchema).optional()
 }).strict();
@@ -104899,6 +104948,20 @@ var billingUpgradeInputSchema = exports_external.object({
   plan: exports_external.enum(["starter", "maker", "pro"])
 });
 var billingPortalInputSchema = exports_external.object({});
+// ../core/dist/commands/cache.js
+var cacheResetInputSchema = exports_external.object({
+  app: exports_external.string().optional()
+});
+async function cacheReset(ctx, input = {}) {
+  const name = input.app ?? readPercherTomlAppName(ctx.cwd);
+  if (!name) {
+    throw new PercherCoreError("No app specified and no percher.toml found", {
+      code: "env.no-app",
+      hint: "Pass an app name or run from a directory with percher.toml."
+    });
+  }
+  return ctx.client.apps.resetCache(name);
+}
 // ../core/dist/commands/create.js
 import { join as join6, resolve as resolve4 } from "node:path";
 
@@ -104958,9 +105021,8 @@ function scaffoldTemplate(input) {
 }
 
 // ../core/dist/commands/create.js
-var APP_NAME_RE2 = /^[a-z][a-z0-9-]{2,39}$/;
 var createInputSchema = exports_external.object({
-  name: exports_external.string().regex(APP_NAME_RE2, "must be 3-40 chars, lowercase, start with a letter, [a-z0-9-] only"),
+  name: exports_external.string().regex(APP_NAME_RE, "must be 3-40 chars, lowercase, start with a letter, [a-z0-9-] only"),
   template: exports_external.string().min(1, "Template is required"),
   directory: exports_external.string().optional(),
   force: exports_external.boolean().optional()
@@ -105015,6 +105077,7 @@ var dashboardInputSchema = exports_external.object({
 });
 var DEFAULT_BASE = "https://percher.app";
 var TAB_SHAPE = /^[a-z][a-z0-9-]{0,31}$/;
+var SETTINGS_ANCHOR_TABS = new Set(["github", "env", "domains", "crash-diagnosis"]);
 async function dashboard(ctx, input = {}) {
   const name = input.app ?? readPercherTomlAppName(ctx.cwd);
   if (!name) {
@@ -105031,7 +105094,8 @@ async function dashboard(ctx, input = {}) {
     });
   }
   const base = ctx.env.PERCHER_DASHBOARD_URL ?? DEFAULT_BASE;
-  const url2 = `${base}/apps/${encodeURIComponent(name)}?tab=${tab}`;
+  const appBase = `${base}/apps/${encodeURIComponent(name)}`;
+  const url2 = SETTINGS_ANCHOR_TABS.has(tab) ? `${appBase}/settings#${tab}` : `${appBase}?tab=${tab}`;
   await ctx.openUrl(url2);
   return url2;
 }
@@ -105123,6 +105187,28 @@ async function deleteApp(ctx, input) {
   }
   await ctx.client.apps.delete(name);
 }
+// ../client/dist/abortable-sleep.js
+function abortableSleep(ms, signal) {
+  return new Promise((resolve6) => {
+    if (!signal) {
+      setTimeout(resolve6, ms);
+      return;
+    }
+    if (signal.aborted) {
+      resolve6();
+      return;
+    }
+    const onAbort = () => {
+      clearTimeout(t);
+      resolve6();
+    };
+    const t = setTimeout(() => {
+      signal.removeEventListener("abort", onAbort);
+      resolve6();
+    }, ms);
+    signal.addEventListener("abort", onAbort, { once: true });
+  });
+}
 // ../client/dist/build-env-prefixes.js
 var AUTO_FORWARD_PREFIXES = [
   "NEXT_PUBLIC_",
@@ -105195,6 +105281,21 @@ class PercherApiError extends Error {
     this.extra = options.extra;
   }
 }
+
+class NetworkError extends Error {
+  constructor(message, options) {
+    super(`network error: ${message}`, options);
+    this.name = "NetworkError";
+  }
+}
+var TRANSIENT_NETWORK_MESSAGE = /network error|fetch failed|ECONNRESET|ENOTFOUND|ETIMEDOUT/i;
+function isTransientNetworkError(err) {
+  if (err instanceof NetworkError)
+    return true;
+  if (err instanceof PercherApiError)
+    return false;
+  return err instanceof Error && TRANSIENT_NETWORK_MESSAGE.test(err.message);
+}
 var RESTORE_JOB_STATUSES_FOR_ERROR = [
   "preparing",
   "quiescing",
@@ -105221,7 +105322,33 @@ function isRestoreJobStatus(v) {
   return typeof v === "string" && RESTORE_JOB_STATUSES_FOR_ERROR.includes(v);
 }
 
+class SunsetError extends PercherApiError {
+  gateCode;
+  sunsetDate;
+  finalDeletionDate;
+  dashboardUrl;
+  constructor(message, options) {
+    super(message, options);
+    this.name = "SunsetError";
+    this.gateCode = options.gateCode;
+    this.sunsetDate = options.sunsetDate;
+    this.finalDeletionDate = options.finalDeletionDate;
+    this.dashboardUrl = options.dashboardUrl;
+  }
+}
+function isSunsetGateBody(body) {
+  if (typeof body !== "object" || body === null)
+    return false;
+  const b = body;
+  return (b.error === "platform_read_only" || b.error === "platform_delete_gated") && typeof b.sunsetDate === "string" && typeof b.finalDeletionDate === "string" && typeof b.dashboardUrl === "string";
+}
+
 // ../client/dist/http.js
+var BODY_SNIPPET_MAX = 120;
+function bodySnippet(body) {
+  return body.length <= BODY_SNIPPET_MAX ? body : `${body.slice(0, BODY_SNIPPET_MAX)}…`;
+}
+
 class Http {
   apiUrl;
   token;
@@ -105235,8 +105362,8 @@ class Http {
     this.clientVersion = options.clientVersion;
     this.sessionId = options.sessionId;
   }
-  get(path) {
-    return this.request("GET", path);
+  get(path, opts) {
+    return this.request("GET", path, undefined, opts?.signal);
   }
   post(path, body) {
     return this.request("POST", path, body);
@@ -105274,7 +105401,7 @@ class Http {
     try {
       res = await this.fetchImpl(`${this.apiUrl}${path}`, { method: "GET", headers });
     } catch (err) {
-      throw new Error(`network error: ${err.message}`, { cause: err });
+      throw new NetworkError(err.message, { cause: err });
     }
     if (!res.ok)
       throw await this.parseError(res);
@@ -105300,15 +105427,15 @@ class Http {
     try {
       res = await this.fetchImpl(`${this.apiUrl}${path}`, init);
     } catch (err) {
-      throw new Error(`network error: ${err.message}`, { cause: err });
+      throw new NetworkError(err.message, { cause: err });
     }
     if (!res.ok)
       throw await this.parseError(res);
     return await res.json();
   }
-  async request(method, path, body) {
+  async request(method, path, body, signal) {
     const headers = this.buildHeaders();
-    const init = { method, headers };
+    const init = { method, headers, signal };
     if (body !== undefined) {
       headers["Content-Type"] = "application/json";
       init.body = JSON.stringify(body);
@@ -105317,7 +105444,7 @@ class Http {
     try {
       res = await this.fetchImpl(`${this.apiUrl}${path}`, init);
     } catch (err) {
-      throw new Error(`network error: ${err.message}`, { cause: err });
+      throw new NetworkError(err.message, { cause: err });
     }
     if (!res.ok)
       throw await this.parseError(res);
@@ -105328,7 +105455,10 @@ class Http {
       return await res.json();
     if (contentType.startsWith("text/"))
       return await res.text();
-    return;
+    const raw = await res.text();
+    if (raw.length === 0)
+      return;
+    throw new PercherApiError(`unexpected content-type "${contentType || "none"}" on ${method} ${path}: ${bodySnippet(raw)}`, { status: res.status, code: "UNEXPECTED_CONTENT_TYPE" });
   }
   buildHeaders() {
     const headers = {
@@ -105342,10 +105472,23 @@ class Http {
     return headers;
   }
   async parseError(res) {
-    let body = {};
+    let raw;
     try {
-      body = await res.json();
+      raw = await res.json();
     } catch {}
+    if (res.status === 503 && isSunsetGateBody(raw)) {
+      const requestIdHdr = res.headers.get("x-request-id") ?? undefined;
+      return new SunsetError(raw.message, {
+        status: res.status,
+        code: raw.error,
+        requestId: requestIdHdr,
+        gateCode: raw.error,
+        sunsetDate: raw.sunsetDate,
+        finalDeletionDate: raw.finalDeletionDate,
+        dashboardUrl: raw.dashboardUrl
+      });
+    }
+    const body = typeof raw === "object" && raw !== null ? raw : {};
     const code = body.error?.code ?? (res.status >= 500 ? "INTERNAL_ERROR" : "VALIDATION_ERROR");
     const message = body.error?.message ?? res.statusText ?? "request failed";
     const extra = {};
@@ -105385,6 +105528,12 @@ class AccountResource {
   getDiagnostics() {
     return this.http.get("/account/diagnostics");
   }
+  listTokens() {
+    return this.http.get("/account/tokens");
+  }
+  revokeToken(id) {
+    return this.http.delete(`/account/tokens/${encodeURIComponent(id)}`);
+  }
   exportData() {
     return this.http.get("/account/export");
   }
@@ -105410,11 +105559,12 @@ class AlertsResource {
   }
 }
 
-// ../client/dist/resources/apps.js
+// ../client/dist/resources/apps-types.js
 function isDeployAlreadyInProgress(res) {
   return res.status === "already_in_progress";
 }
 
+// ../client/dist/resources/apps.js
 class AppsResource {
   http;
   constructor(http) {
@@ -105426,8 +105576,11 @@ class AppsResource {
   list() {
     return this.http.get("/apps");
   }
-  get(id) {
-    return this.http.get(`/apps/${encodeURIComponent(id)}`);
+  listLight() {
+    return this.http.get("/apps?light=1");
+  }
+  get(id, opts) {
+    return this.http.get(`/apps/${encodeURIComponent(id)}`, opts);
   }
   async deploy(id, input) {
     const params = new URLSearchParams;
@@ -105461,6 +105614,43 @@ class AppsResource {
       crashAnalysisEnabled: enabled
     });
   }
+  setGalleryOptIn(appRef, enabled) {
+    return this.http.put(`/apps/${encodeURIComponent(appRef)}/gallery-opt-in`, {
+      enabled
+    });
+  }
+  setPreviewBranch(appRef, branch) {
+    return this.http.put(`/apps/${encodeURIComponent(appRef)}/preview-branch`, { branch });
+  }
+  unsetPreviewBranch(appRef) {
+    return this.http.deleteJson(`/apps/${encodeURIComponent(appRef)}/preview-branch`);
+  }
+  setDescription(appRef, description) {
+    return this.http.patch(`/apps/${encodeURIComponent(appRef)}/description`, {
+      description
+    });
+  }
+  setIconColour(appRef, colour) {
+    return this.http.patch(`/apps/${encodeURIComponent(appRef)}/icon`, {
+      colour
+    });
+  }
+  uploadIconImage(appRef, bytes, mime) {
+    const ab = new ArrayBuffer(bytes.byteLength);
+    new Uint8Array(ab).set(bytes);
+    return this.http.postBinary(`/apps/${encodeURIComponent(appRef)}/icon/image`, new Blob([ab]), { "Content-Type": mime });
+  }
+  deleteIconImage(appRef) {
+    return this.http.deleteJson(`/apps/${encodeURIComponent(appRef)}/icon/image`);
+  }
+  uploadPreviewImage(appRef, bytes, mime) {
+    const ab = new ArrayBuffer(bytes.byteLength);
+    new Uint8Array(ab).set(bytes);
+    return this.http.postBinary(`/apps/${encodeURIComponent(appRef)}/preview/image`, new Blob([ab]), { "Content-Type": mime });
+  }
+  deletePreviewImage(appRef) {
+    return this.http.deleteJson(`/apps/${encodeURIComponent(appRef)}/preview/image`);
+  }
   async downloadSource(appRef, deployId) {
     return this.http.getBinary(`/apps/${encodeURIComponent(appRef)}/deploys/${encodeURIComponent(deployId)}/source`);
   }
@@ -105473,8 +105663,8 @@ class AppsResource {
   discardPreview(appRef, deployId) {
     return this.http.post(`/apps/${encodeURIComponent(appRef)}/deploys/${encodeURIComponent(deployId)}/discard`, {});
   }
-  getDeployment(appRef, deployId) {
-    return this.http.get(`/apps/${encodeURIComponent(appRef)}/deploys/${encodeURIComponent(deployId)}`);
+  getDeployment(appRef, deployId, opts) {
+    return this.http.get(`/apps/${encodeURIComponent(appRef)}/deploys/${encodeURIComponent(deployId)}`, opts);
   }
   listDeploys(appRef, opts) {
     const params = new URLSearchParams;
@@ -105483,32 +105673,36 @@ class AppsResource {
     if (opts?.limit)
       params.set("limit", String(opts.limit));
     const qs = params.toString();
-    return this.http.get(`/apps/${encodeURIComponent(appRef)}/deploys${qs ? `?${qs}` : ""}`);
+    return this.http.get(`/apps/${encodeURIComponent(appRef)}/deploys${qs ? `?${qs}` : ""}`, opts?.signal ? { signal: opts.signal } : undefined);
   }
-  async getBuildLog(appRef, deployId) {
+  async getBuildLog(appRef, deployId, opts) {
     const path = `/apps/${encodeURIComponent(appRef)}/deploys/${encodeURIComponent(deployId)}/build-log`;
     let attempt = 0;
     const maxRetries = 5;
     while (true) {
       try {
-        const res = await this.http.get(path);
+        const res = await this.http.get(path, opts);
         if (typeof res === "string")
           return res;
         return res?.buildLog ?? "";
       } catch (err) {
         attempt++;
-        const msg = err.message ?? String(err);
-        const isNetwork = msg.startsWith("network error:");
-        if (!isNetwork || attempt >= maxRetries)
+        if (opts?.signal?.aborted || !isTransientNetworkError(err) || attempt >= maxRetries) {
           throw err;
+        }
         const backoffMs = 1000 * 2 ** (attempt - 1);
-        await new Promise((r) => setTimeout(r, backoffMs));
+        await abortableSleep(backoffMs, opts?.signal);
+        if (opts?.signal?.aborted)
+          throw err;
       }
     }
   }
   unsuspend(appRef) {
     return this.http.post(`/apps/${encodeURIComponent(appRef)}/unsuspend`, {});
   }
+  resetCache(appRef) {
+    return this.http.post(`/apps/${encodeURIComponent(appRef)}/cache/reset`, {});
+  }
   delete(id) {
     return this.http.delete(`/apps/${encodeURIComponent(id)}`);
   }
@@ -105545,12 +105739,18 @@ class AppsResource {
   listJobs(appRef, limit = 20) {
     return this.http.get(`/apps/${encodeURIComponent(appRef)}/jobs?limit=${limit}`);
   }
+  listCrons(appRef) {
+    return this.http.get(`/apps/${encodeURIComponent(appRef)}/crons`);
+  }
   getDiagnostics(appRef) {
     return this.http.get(`/apps/${encodeURIComponent(appRef)}/diagnostics`);
   }
   getTopology(appRef) {
     return this.http.get(`/apps/${encodeURIComponent(appRef)}/topology`);
   }
+  getPocketBaseVolume(appRef) {
+    return this.http.get(`/apps/${encodeURIComponent(appRef)}/pocketbase/volume`);
+  }
   getResources(appRef, opts = {}) {
     const params = new URLSearchParams;
     if (opts.window)
@@ -105712,6 +105912,40 @@ class EnvResource {
   }
 }
 
+// ../client/dist/resources/env-scan.js
+class EnvScanResource {
+  http;
+  constructor(http) {
+    this.http = http;
+  }
+  scan(appId) {
+    return this.http.post(`/apps/${encodeURIComponent(appId)}/env-scan`);
+  }
+}
+
+// ../client/dist/resources/export.js
+class ExportResource {
+  http;
+  constructor(http) {
+    this.http = http;
+  }
+  mint(appRef, options) {
+    return this.http.post(`/apps/${encodeURIComponent(appRef)}/export/mint`, {
+      deliveryKind: options?.deliveryKind
+    });
+  }
+  revoke(appRef, tokenId) {
+    return this.http.post(`/apps/${encodeURIComponent(appRef)}/export/tokens/${encodeURIComponent(tokenId)}/revoke`);
+  }
+  history(appRef) {
+    return this.http.get(`/apps/${encodeURIComponent(appRef)}/export/history`);
+  }
+  async download(downloadUrl) {
+    const path = downloadUrl.startsWith("http") ? new URL(downloadUrl).pathname + new URL(downloadUrl).search : downloadUrl;
+    return this.http.stream(path);
+  }
+}
+
 // ../client/dist/sse.js
 async function* parseSseStream(stream, signal) {
   const reader = stream.getReader();
@@ -105859,6 +106093,46 @@ class PlatformResource {
   }
 }
 
+// ../client/dist/resources/search.js
+class SearchResource {
+  http;
+  constructor(http) {
+    this.http = http;
+  }
+  query(q) {
+    return this.http.get(`/search?q=${encodeURIComponent(q)}`);
+  }
+}
+
+// ../client/dist/resources/security.js
+class SecurityResource {
+  http;
+  constructor(http) {
+    this.http = http;
+  }
+  forApp(appRef) {
+    return this.http.get(`/apps/${encodeURIComponent(appRef)}/security`);
+  }
+  forAppAsAdmin(appRef) {
+    return this.http.get(`/admin/security/apps/${encodeURIComponent(appRef)}`);
+  }
+  resendNotificationAsAdmin(appRef) {
+    return this.http.post(`/admin/security/apps/${encodeURIComponent(appRef)}/notify`, {});
+  }
+  overview() {
+    return this.http.get("/admin/security/overview");
+  }
+  platformBaseOverview() {
+    return this.http.get("/admin/security/platform-base");
+  }
+  rescanAllAsAdmin() {
+    return this.http.post("/admin/security/rescan", {});
+  }
+  rescanAppAsAdmin(appRef) {
+    return this.http.post(`/admin/security/apps/${encodeURIComponent(appRef)}/rescan`, {});
+  }
+}
+
 // ../client/dist/resources/sharing.js
 class SharingResource {
   http;
@@ -105929,12 +106203,16 @@ class PercherClient {
   apps;
   data;
   env;
+  envScan;
+  export;
   logs;
   auth;
   billing;
   account;
   alerts;
   platform;
+  security;
+  search;
   sharing;
   invites;
   transfers;
@@ -105953,12 +106231,16 @@ class PercherClient {
     this.apps = new AppsResource(http);
     this.data = new DataResource(http);
     this.env = new EnvResource(http);
+    this.envScan = new EnvScanResource(http);
+    this.export = new ExportResource(http);
     this.logs = new LogsResource(http);
     this.auth = new AuthResource(http);
     this.billing = new BillingResource(http);
     this.account = new AccountResource(http);
     this.alerts = new AlertsResource(http);
     this.platform = new PlatformResource(http);
+    this.security = new SecurityResource(http);
+    this.search = new SearchResource(http);
     this.sharing = new SharingResource(http);
     this.invites = new InvitesResource(http);
     this.transfers = new TransfersResource(http);
@@ -106032,17 +106314,6 @@ async function deploysInspect(ctx, input) {
 import { existsSync as existsSync7 } from "node:fs";
 import { join as join10 } from "node:path";
 
-// ../shared/dist/timeouts.js
-var TIMEOUTS = {
-  workerBuildSubprocess: 10 * 60000,
-  apiToWorkerBuildFetch: 11 * 60000,
-  clientPublishPoll: 12 * 60000,
-  workerHealthcheck: 5000,
-  watchdogList: 15000,
-  mcpWaitDeployDefault: 30000,
-  mcpWaitDeployMax: 12 * 60000
-};
-
 // ../core/dist/tarball.js
 var import_ignore = __toESM(require_ignore(), 1);
 import { createHash as createHash2 } from "node:crypto";
@@ -106418,6 +106689,19 @@ var patterns = [
       missingEnvVars: []
     }
   },
+  {
+    pattern: /Bad Gateway|HTTP 502|\b502\b/i,
+    result: {
+      title: "Gateway error (transient)",
+      explanation: "A gateway in front of your app returned 502 Bad Gateway while the platform was routing the deploy. This is a transient platform-side hiccup, not your app code.",
+      suggestion: "Wait 30 seconds and run percher publish again. A single retry almost always lands cleanly. If 502s persist across several spaced-out retries, check status.percher.app — that's a platform incident, not your app.",
+      errorClass: "infra_unavailable",
+      phase: "infra",
+      cause: "bad_gateway",
+      relevantFiles: [],
+      missingEnvVars: []
+    }
+  },
   {
     pattern: /start command could not be found|no start command/i,
     result: {
@@ -106536,7 +106820,20 @@ var patterns = [
     }
   },
   {
-    pattern: /POCKETBASE|pocketbase.*error|pocketbase.*fail/i,
+    pattern: /committed_budget|\bbox admission|platform (?:is )?at capacity/i,
+    result: {
+      title: "Platform at capacity",
+      explanation: "The platform couldn't fit this deploy right now — the box is full, so the box-admission gate refused to start the container. This is a platform-side limit, not a problem with your app code or configuration.",
+      suggestion: "Wait a few minutes and run percher publish again — capacity frees up as other deploys finish. This failure does not count against your app, and a retry usually lands once there's room. If it persists, contact the operator.",
+      errorClass: "platform_at_capacity",
+      phase: "infra",
+      cause: "box_admission_rejected",
+      relevantFiles: [],
+      missingEnvVars: []
+    }
+  },
+  {
+    pattern: /pocketbase[^\n]{0,40}(?:error|fail|crash|panic|exit|unhealthy|could ?not|cannot|connection refused|timed out|not (?:start|ready|reachable))|(?:failed to (?:start|connect|reach)|error (?:starting|connecting to)|unable to (?:start|reach|connect to))[^\n]{0,40}pocketbase/i,
     result: {
       title: "PocketBase error",
       explanation: "PocketBase could not start or connect properly.",
@@ -106819,6 +107116,12 @@ function recoveryFromErrorClass(errorClass, failure = {}) {
         args: failure.publishInput ?? {},
         reasonCode: "infra_unavailable"
       });
+    case "platform_at_capacity":
+      return recoveryRetry({
+        suggestedTool: "percher_publish",
+        args: failure.publishInput ?? {},
+        reasonCode: "infra_transient"
+      });
     case "config_invalid":
       return recoveryFixConfig({
         problems: [
@@ -106967,15 +107270,17 @@ function trimMessage(raw) {
 function tomlPathFor(cwd) {
   return join11(cwd, "percher.toml");
 }
-async function buildFailureError(ctx, app, deployment) {
+async function buildFailureError(ctx, app, deployment, signal) {
   let buildLogTail;
   let buildLogFetchFailed = false;
   let fullLog = "";
   try {
-    fullLog = await ctx.client.apps.getBuildLog(app.id, deployment.id);
-    if (!fullLog) {
-      await new Promise((r) => setTimeout(r, 1500));
-      fullLog = await ctx.client.apps.getBuildLog(app.id, deployment.id);
+    fullLog = await ctx.client.apps.getBuildLog(app.id, deployment.id, { signal });
+    if (!fullLog && !signal?.aborted) {
+      await abortableSleep(1500, signal);
+      if (!signal?.aborted) {
+        fullLog = await ctx.client.apps.getBuildLog(app.id, deployment.id, { signal });
+      }
     }
     if (fullLog) {
       const lines = fullLog.split(`
@@ -106987,7 +107292,7 @@ async function buildFailureError(ctx, app, deployment) {
     buildLogFetchFailed = true;
   }
   const errorMessage = deployment.errorMessage ?? "";
-  const classified = classifyByErrorCode(deployment.errorCode, errorMessage) ?? classifyError("Deployment failed", fullLog) ?? classifyError(errorMessage, "");
+  const classified = classifyByErrorCode(deployment.errorCode, errorMessage) ?? classifyError(errorMessage || "Deployment failed", fullLog);
   const rawErrorMessage = errorMessage && !buildLogTail && !classified?.explanation.includes(errorMessage) ? errorMessage : undefined;
   const problems = deployment.problems && deployment.problems.length > 0 ? deployment.problems : undefined;
   if (classified) {
@@ -107021,7 +107326,7 @@ async function buildFailureError(ctx, app, deployment) {
 }
 async function classifyDeploymentFailure(opts) {
   const { ctx, app, deployment, publishInput } = opts;
-  const error48 = await buildFailureError(ctx, app, deployment);
+  const error48 = await buildFailureError(ctx, app, deployment, opts.signal);
   const recovery = error48.errorClass ? recoveryFromErrorClass(error48.errorClass, {
     missingEnvVars: error48.missingEnvVars,
     deployId: deployment.id,
@@ -107067,6 +107372,100 @@ var waitForDeployInputSchema = exports_external.object({
   timeoutSeconds: exports_external.number().int().min(1).max(TIMEOUTS.mcpWaitDeployMax / 1000).optional().describe(`Maximum wall-clock seconds to wait before returning still_running (default ${TIMEOUTS.mcpWaitDeployDefault / 1000}, max ${TIMEOUTS.mcpWaitDeployMax / 1000}). Keeping this short is the point — the agent can resume in another short call without holding a long-lived connection.`),
   pollIntervalSeconds: exports_external.number().int().min(1).max(30).optional().describe("Seconds between polls (default 2).")
 });
+async function waitForDeploy(ctx, input, opts) {
+  const timeoutSeconds = input.timeoutSeconds ?? TIMEOUTS.mcpWaitDeployDefault / 1000;
+  const pollIntervalSeconds = input.pollIntervalSeconds ?? 2;
+  const startedAt = Date.now();
+  const deadlineMs = startedAt + timeoutSeconds * 1000;
+  const controller = new AbortController;
+  const abortTimer = setTimeout(() => controller.abort(), timeoutSeconds * 1000);
+  const onExternalAbort = () => controller.abort();
+  opts?.signal?.addEventListener("abort", onExternalAbort, { once: true });
+  if (opts?.signal?.aborted)
+    controller.abort();
+  try {
+    let app;
+    let initial;
+    try {
+      [app, initial] = await Promise.all([
+        ctx.client.apps.get(input.app, { signal: controller.signal }),
+        ctx.client.apps.getDeployment(input.app, input.deployId, { signal: controller.signal })
+      ]);
+    } catch (err) {
+      if (controller.signal.aborted) {
+        throw new PercherCoreError(`wait-for-deploy timed out after ${timeoutSeconds}s before the first status fetch completed`, {
+          code: "wait.timeout",
+          hint: "The API is slow or unreachable. Retry with a larger timeout, or run percher doctor."
+        });
+      }
+      throw err;
+    }
+    let deployment = initial;
+    while (!isTerminal(deployment.status)) {
+      if (controller.signal.aborted || Date.now() >= deadlineMs) {
+        return buildStillRunningResult(app, deployment, startedAt);
+      }
+      const sleepMs = Math.min(pollIntervalSeconds * 1000, deadlineMs - Date.now());
+      await abortableSleep(sleepMs, controller.signal);
+      if (controller.signal.aborted || Date.now() >= deadlineMs) {
+        return buildStillRunningResult(app, deployment, startedAt);
+      }
+      try {
+        deployment = await ctx.client.apps.getDeployment(input.app, input.deployId, {
+          signal: controller.signal
+        });
+      } catch (err) {
+        if (controller.signal.aborted) {
+          return buildStillRunningResult(app, deployment, startedAt, "status fetch exceeded the wait budget");
+        }
+        if (isTransientNetworkError(err)) {
+          const msg = err.message ?? String(err);
+          return buildStillRunningResult(app, deployment, startedAt, msg);
+        }
+        throw err;
+      }
+    }
+    if (deployment.status === "failed") {
+      const { error: error48, recovery, summary } = await classifyDeploymentFailure({
+        ctx,
+        app,
+        deployment,
+        signal: opts?.signal
+      });
+      return {
+        status: "failed",
+        app: { id: app.id, name: app.name, url: app.url },
+        deployment,
+        elapsedSeconds: Math.round((Date.now() - startedAt) / 1000),
+        totalElapsedSeconds: secondsSinceCreated(deployment),
+        error: error48,
+        recovery,
+        summary
+      };
+    }
+    if (deployment.status === "replaced") {
+      return await buildReplacedResult({ ctx, app, deployment, startedAt, signal: opts?.signal });
+    }
+    const url2 = deployment.previewUrl ?? deployment.url ?? app.url;
+    return {
+      status: "live",
+      app: { id: app.id, name: app.name, url: app.url },
+      deployment,
+      url: url2,
+      elapsedSeconds: Math.round((Date.now() - startedAt) / 1000),
+      totalElapsedSeconds: secondsSinceCreated(deployment),
+      recovery: RECOVERY_NONE,
+      summary: `${app.name} deploy ${deployment.id} is live → ${url2}`
+    };
+  } finally {
+    clearTimeout(abortTimer);
+    controller.abort();
+    opts?.signal?.removeEventListener("abort", onExternalAbort);
+  }
+}
+function isTerminal(status) {
+  return status === "live" || status === "failed" || status === "replaced";
+}
 async function resolveReplaced(opts) {
   const { ctx, app, replacedDeployment } = opts;
   const deployType = replacedDeployment.type ?? "live";
@@ -107074,7 +107473,8 @@ async function resolveReplaced(opts) {
   try {
     const deploys = await ctx.client.apps.listDeploys(app.name, {
       limit: 5,
-      type: deployType
+      type: deployType,
+      signal: opts.signal
     });
     latest = deploys.find((d) => d.id !== replacedDeployment.id);
   } catch {
@@ -107121,6 +107521,46 @@ async function resolveReplaced(opts) {
     summary: `${app.name} deploy ${replacedDeployment.id} was replaced; the latest deploy ${latest.id} is ${latest.status}. Surface to user.`
   };
 }
+async function buildReplacedResult(opts) {
+  const { ctx, app, deployment, startedAt } = opts;
+  const resolved = await resolveReplaced({
+    ctx,
+    app,
+    replacedDeployment: deployment,
+    signal: opts.signal
+  });
+  return {
+    status: "replaced",
+    app: { id: app.id, name: app.name, url: app.url },
+    deployment,
+    url: resolved.url,
+    elapsedSeconds: Math.round((Date.now() - startedAt) / 1000),
+    totalElapsedSeconds: secondsSinceCreated(deployment),
+    recovery: resolved.recovery,
+    summary: resolved.summary
+  };
+}
+function buildStillRunningResult(app, deployment, startedAt, networkHint) {
+  return {
+    status: "still_running",
+    app: { id: app.id, name: app.name, url: app.url },
+    deployment,
+    elapsedSeconds: Math.round((Date.now() - startedAt) / 1000),
+    totalElapsedSeconds: secondsSinceCreated(deployment),
+    recovery: recoveryWait({
+      app: app.name,
+      deployId: deployment.id,
+      reasonCode: deployment.status === "queued" ? "deploy_queued" : deployment.status === "building" ? "deploy_building" : deployment.status === "deploying" ? "deploy_deploying" : "deploy_timeout"
+    }),
+    summary: networkHint ? `${app.name} deploy ${deployment.id} still ${deployment.status} (transient: ${networkHint}) — call percher_wait_for_deploy again.` : `${app.name} deploy ${deployment.id} still ${deployment.status} — call percher_wait_for_deploy again.`
+  };
+}
+function secondsSinceCreated(deployment) {
+  const t = Date.parse(deployment.createdAt);
+  if (Number.isNaN(t))
+    return 0;
+  return Math.max(0, Math.round((Date.now() - t) / 1000));
+}
 
 // ../core/dist/commands/doctor.js
 var doctorInputSchema = exports_external.object({
@@ -107248,17 +107688,19 @@ async function doctor(ctx, input = {}) {
       message: diag.container.running ? "Running" : diag.container.state === "not-found" ? "No container found" : `State: ${diag.container.state}`
     });
     if (diag.containerHealth) {
+      const latency = diag.containerHealth.latencyMs != null ? ` (${diag.containerHealth.latencyMs}ms)` : "";
       checks3.push({
         name: "Container health",
         status: diag.containerHealth.healthy ? "pass" : "fail",
-        message: diag.containerHealth.healthy ? `${diag.containerHealth.path} OK (${diag.containerHealth.latencyMs}ms)` : `${diag.containerHealth.path} — not responding`
+        message: diag.containerHealth.healthy ? `${diag.containerHealth.path} OK${latency}` : `${diag.containerHealth.path} — not responding`
       });
     }
     if (diag.publicRoute) {
+      const latency = diag.publicRoute.latencyMs != null ? ` (${diag.publicRoute.latencyMs}ms)` : "";
       checks3.push({
         name: "Public route",
         status: diag.publicRoute.healthy ? "pass" : "fail",
-        message: diag.publicRoute.healthy ? `${diag.publicRoute.url} (${diag.publicRoute.latencyMs}ms)` : `${diag.publicRoute.url} — not responding`
+        message: diag.publicRoute.healthy ? `${diag.publicRoute.url}${latency}` : `${diag.publicRoute.url} — not responding`
       });
     }
     if (diag.pocketbase) {
@@ -107444,11 +107886,53 @@ function summarize(checks3, vctx = {}) {
     summary: verdict.summary
   };
 }
-function deriveVerdict(checks3, vctx) {
+function buildVerdictRuleContext(checks3, vctx) {
   const findCheck = (name) => checks3.find((c) => c.name === name);
-  const auth = findCheck("Auth token");
-  if (auth?.status === "fail") {
+  const toml = findCheck("percher.toml");
+  const verdictChecks = vctx.appProvided && toml?.status === "fail" ? checks3.filter((c) => c.name !== "percher.toml") : checks3;
+  const containerDown = vctx.containerRunning === false && vctx.containerState !== undefined && vctx.containerState !== "not-found" || vctx.containerHealthy === false;
+  return { checks: checks3, vctx, findCheck, verdictChecks, containerDown };
+}
+function runtimeCrashExplanation({ vctx, findCheck }) {
+  const containerCheck = findCheck("Container");
+  const healthCheck = findCheck("Container health");
+  const lastCrashCheck = findCheck("Last crash");
+  const explanationBits = [];
+  if (vctx.appStatus === "crashed")
+    explanationBits.push("App is in crashed state.");
+  if (containerCheck?.status === "fail")
+    explanationBits.push(containerCheck.message);
+  if (healthCheck?.status === "fail")
+    explanationBits.push(healthCheck.message);
+  if (lastCrashCheck)
+    explanationBits.push(lastCrashCheck.message);
+  return explanationBits.length > 0 ? explanationBits.join(" ") : "Runtime is not responding — container or health check is failing.";
+}
+var FALLBACK_RULE = {
+  id: "unknown-fallback",
+  when: () => true,
+  verdict: ({ verdictChecks }) => {
+    const firstFailed = verdictChecks.find((c) => c.status === "fail");
     return {
+      status: "needs_action",
+      diagnosis: firstFailed ? {
+        title: firstFailed.name,
+        explanation: firstFailed.message,
+        reasonCode: "unknown"
+      } : undefined,
+      recovery: recoveryAsk({
+        prompt: firstFailed ? `Doctor flagged a problem: ${firstFailed.name} — ${firstFailed.message}. Review the checks list and surface the failing item to the user.` : "Doctor reported one or more issues. Review the checks list and surface the failing items to the user.",
+        reasonCode: "unknown"
+      }),
+      summary: firstFailed ? `${firstFailed.name} failed: ${firstFailed.message}` : "Doctor reported issues — review the checks list."
+    };
+  }
+};
+var VERDICT_RULES = [
+  {
+    id: "auth-missing",
+    when: ({ findCheck }) => findCheck("Auth token")?.status === "fail",
+    verdict: () => ({
       status: "blocked",
       diagnosis: {
         title: "Authentication required",
@@ -107458,150 +107942,188 @@ function deriveVerdict(checks3, vctx) {
       },
       recovery: recoveryLogin({ reasonCode: "auth_required" }),
       summary: "Login required: run `percher login` (or set PERCHER_TOKEN)."
-    };
-  }
-  const api2 = findCheck("API reachability");
-  if (api2?.status === "fail") {
-    return {
-      status: "blocked",
-      diagnosis: {
-        title: "Percher API is unreachable",
-        explanation: api2.message,
-        reasonCode: "infra_unavailable",
-        phase: "infra"
-      },
-      recovery: recoveryAsk({
-        prompt: `Percher API is unreachable (${api2.message}). This is usually a transient network issue — wait a moment and try again, or check status.percher.app.`,
-        reasonCode: "infra_unavailable",
-        retryable: true
-      }),
-      summary: "Cannot reach the Percher API — try again in a moment."
-    };
-  }
-  const toml = findCheck("percher.toml");
-  if (toml?.status === "fail" && !vctx.appProvided) {
-    return {
-      status: "blocked",
-      diagnosis: {
-        title: "Invalid percher.toml",
-        explanation: toml.message,
-        reasonCode: "config_invalid",
-        phase: "config"
-      },
-      recovery: recoveryFixConfig({
-        problems: [
-          {
-            file: "percher.toml",
-            message: toml.message
-          }
-        ],
-        reasonCode: "config_invalid"
-      }),
-      summary: "percher.toml is invalid — fix the issues and re-run."
-    };
-  }
-  const app = findCheck("App");
-  if (app?.status === "skip") {
-    return {
-      status: "blocked",
-      diagnosis: {
-        title: "No app specified",
-        explanation: app.message,
-        reasonCode: "config_missing",
-        phase: "config"
-      },
-      recovery: recoveryAsk({
-        prompt: `${app.message} — pass \`--app <name>\` or run \`percher init\` in a project directory to generate a percher.toml.`,
-        reasonCode: "config_missing"
-      }),
-      summary: "No percher.toml found and no --app supplied — pass --app or run percher init."
-    };
-  }
-  const inTransitionalDeploy = !!vctx.lastDeployStatus && TRANSITIONAL_DEPLOY_STATUSES.has(vctx.lastDeployStatus);
-  const inTransitionalApp = !!vctx.appStatus && TRANSITIONAL_APP_STATUSES.has(vctx.appStatus);
-  if (inTransitionalDeploy || inTransitionalApp) {
-    const reasonCode = vctx.lastDeployStatus === "queued" ? "deploy_queued" : vctx.lastDeployStatus === "building" ? "deploy_building" : vctx.lastDeployStatus === "deploying" ? "deploy_deploying" : "deploy_queued";
-    const what = inTransitionalApp ? `App ${vctx.appName ?? ""} is provisioning` : `Last deploy is ${vctx.lastDeployStatus}`;
-    const recovery = vctx.lastDeployId && vctx.appName ? recoveryWait({
-      app: vctx.appName,
-      deployId: vctx.lastDeployId,
-      reasonCode
-    }) : recoveryAsk({
-      prompt: `${what.trim()} for ${vctx.appName ?? "this app"}. Wait for it to finish before retrying — there's no deployId to track yet.`,
-      reasonCode
-    });
-    return {
-      status: "in_progress",
-      diagnosis: {
-        title: what.trim(),
-        explanation: vctx.lastDeployId ? `${what.trim()} (deploy ${vctx.lastDeployId}). Wait for it to finish before retrying.` : `${what.trim()}. Wait for it to finish before retrying.`,
-        reasonCode,
-        phase: "deploy"
-      },
-      recovery,
-      summary: vctx.lastDeployId ? `${what.trim()} — wait for deploy ${vctx.lastDeployId}.` : `${what.trim()} — wait a moment and re-run.`
-    };
-  }
-  const verdictChecks = vctx.appProvided && toml?.status === "fail" ? checks3.filter((c) => c.name !== "percher.toml") : checks3;
-  if (vctx.replacedResolution) {
-    const r = vctx.replacedResolution;
-    const isResolvedLive = r.recovery.nextAction === "none" && !!r.url;
-    if (isResolvedLive) {
+    })
+  },
+  {
+    id: "api-unreachable",
+    when: ({ findCheck }) => findCheck("API reachability")?.status === "fail",
+    verdict: ({ findCheck }) => {
+      const message = findCheck("API reachability")?.message ?? "";
       return {
-        status: "ok",
-        recovery: { ...r.recovery, reasonCode: "replaced_by_newer" },
-        summary: r.summary
+        status: "blocked",
+        diagnosis: {
+          title: "Percher API is unreachable",
+          explanation: message,
+          reasonCode: "infra_unavailable",
+          phase: "infra"
+        },
+        recovery: recoveryAsk({
+          prompt: `Percher API is unreachable (${message}). This is usually a transient network issue — wait a moment and try again, or check status.percher.app.`,
+          reasonCode: "infra_unavailable",
+          retryable: true
+        }),
+        summary: "Cannot reach the Percher API — try again in a moment."
       };
     }
-    const status = r.recovery.nextAction === "wait_deploy" ? "in_progress" : "needs_action";
-    return {
-      status,
-      diagnosis: {
-        title: "Last deploy was replaced",
-        explanation: r.summary,
-        reasonCode: "replaced_by_newer",
-        phase: "deploy"
-      },
-      recovery: { ...r.recovery, reasonCode: "replaced_by_newer" },
-      summary: r.summary
-    };
-  }
-  if (vctx.lastDeployStatus === "failed") {
-    if (vctx.inputMode === "deploy") {
-      const cls = vctx.buildLogClassification;
-      if (cls && cls.errorClass === "missing_env" && cls.missingEnvVars.length > 0) {
+  },
+  {
+    id: "toml-invalid",
+    when: ({ vctx, findCheck }) => findCheck("percher.toml")?.status === "fail" && !vctx.appProvided,
+    verdict: ({ findCheck }) => {
+      const message = findCheck("percher.toml")?.message ?? "";
+      return {
+        status: "blocked",
+        diagnosis: {
+          title: "Invalid percher.toml",
+          explanation: message,
+          reasonCode: "config_invalid",
+          phase: "config"
+        },
+        recovery: recoveryFixConfig({
+          problems: [
+            {
+              file: "percher.toml",
+              message
+            }
+          ],
+          reasonCode: "config_invalid"
+        }),
+        summary: "percher.toml is invalid — fix the issues and re-run."
+      };
+    }
+  },
+  {
+    id: "app-unresolved",
+    when: ({ findCheck }) => findCheck("App")?.status === "skip",
+    verdict: ({ findCheck }) => {
+      const message = findCheck("App")?.message ?? "";
+      return {
+        status: "blocked",
+        diagnosis: {
+          title: "No app specified",
+          explanation: message,
+          reasonCode: "config_missing",
+          phase: "config"
+        },
+        recovery: recoveryAsk({
+          prompt: `${message} — pass \`--app <name>\` or run \`percher init\` in a project directory to generate a percher.toml.`,
+          reasonCode: "config_missing"
+        }),
+        summary: "No percher.toml found and no --app supplied — pass --app or run percher init."
+      };
+    }
+  },
+  {
+    id: "deploy-transitional",
+    when: ({ vctx }) => !!vctx.lastDeployStatus && TRANSITIONAL_DEPLOY_STATUSES.has(vctx.lastDeployStatus) || !!vctx.appStatus && TRANSITIONAL_APP_STATUSES.has(vctx.appStatus),
+    verdict: ({ vctx }) => {
+      const inTransitionalApp = !!vctx.appStatus && TRANSITIONAL_APP_STATUSES.has(vctx.appStatus);
+      const reasonCode = vctx.lastDeployStatus === "queued" ? "deploy_queued" : vctx.lastDeployStatus === "building" ? "deploy_building" : vctx.lastDeployStatus === "deploying" ? "deploy_deploying" : "deploy_queued";
+      const what = inTransitionalApp ? `App ${vctx.appName ?? ""} is provisioning` : `Last deploy is ${vctx.lastDeployStatus}`;
+      const recovery = vctx.lastDeployId && vctx.appName ? recoveryWait({
+        app: vctx.appName,
+        deployId: vctx.lastDeployId,
+        reasonCode
+      }) : recoveryAsk({
+        prompt: `${what.trim()} for ${vctx.appName ?? "this app"}. Wait for it to finish before retrying — there's no deployId to track yet.`,
+        reasonCode
+      });
+      return {
+        status: "in_progress",
+        diagnosis: {
+          title: what.trim(),
+          explanation: vctx.lastDeployId ? `${what.trim()} (deploy ${vctx.lastDeployId}). Wait for it to finish before retrying.` : `${what.trim()}. Wait for it to finish before retrying.`,
+          reasonCode,
+          phase: "deploy"
+        },
+        recovery,
+        summary: vctx.lastDeployId ? `${what.trim()} — wait for deploy ${vctx.lastDeployId}.` : `${what.trim()} — wait a moment and re-run.`
+      };
+    }
+  },
+  {
+    id: "deploy-replaced",
+    when: ({ vctx }) => !!vctx.replacedResolution,
+    verdict: (ctx) => {
+      const r = ctx.vctx.replacedResolution;
+      if (!r)
+        return FALLBACK_RULE.verdict(ctx);
+      const isResolvedLive = r.recovery.nextAction === "none" && !!r.url;
+      if (isResolvedLive) {
         return {
-          status: "needs_action",
-          diagnosis: {
-            title: cls.title,
-            explanation: cls.explanation,
-            reasonCode: "missing_env",
-            phase: "build"
-          },
-          recovery: recoveryEnv({
-            app: vctx.appName,
-            keys: cls.missingEnvVars
-          }),
-          summary: vctx.appName ? `Build failed — missing env vars on ${vctx.appName}: ${cls.missingEnvVars.join(", ")}.` : `Build failed — missing env vars: ${cls.missingEnvVars.join(", ")}.`
+          status: "ok",
+          recovery: { ...r.recovery, reasonCode: "replaced_by_newer" },
+          summary: r.summary
         };
       }
+      const status = r.recovery.nextAction === "wait_deploy" ? "in_progress" : "needs_action";
+      return {
+        status,
+        diagnosis: {
+          title: "Last deploy was replaced",
+          explanation: r.summary,
+          reasonCode: "replaced_by_newer",
+          phase: "deploy"
+        },
+        recovery: { ...r.recovery, reasonCode: "replaced_by_newer" },
+        summary: r.summary
+      };
+    }
+  },
+  {
+    id: "deploy-failed-missing-env",
+    when: ({ vctx }) => {
+      const cls = vctx.buildLogClassification;
+      return vctx.lastDeployStatus === "failed" && vctx.inputMode === "deploy" && !!cls && cls.errorClass === "missing_env" && cls.missingEnvVars.length > 0;
+    },
+    verdict: (ctx) => {
+      const { vctx } = ctx;
+      const cls = vctx.buildLogClassification;
+      if (!cls)
+        return FALLBACK_RULE.verdict(ctx);
+      return {
+        status: "needs_action",
+        diagnosis: {
+          title: cls.title,
+          explanation: cls.explanation,
+          reasonCode: "missing_env",
+          phase: "build"
+        },
+        recovery: recoveryEnv({
+          app: vctx.appName,
+          keys: cls.missingEnvVars
+        }),
+        summary: vctx.appName ? `Build failed — missing env vars on ${vctx.appName}: ${cls.missingEnvVars.join(", ")}.` : `Build failed — missing env vars: ${cls.missingEnvVars.join(", ")}.`
+      };
+    }
+  },
+  {
+    id: "deploy-failed-file-problems",
+    when: ({ vctx }) => vctx.lastDeployStatus === "failed" && vctx.inputMode === "deploy" && (vctx.buildProblems ?? []).filter((p) => p.file).length > 0,
+    verdict: ({ vctx }) => {
+      const cls = vctx.buildLogClassification;
       const fileProblems = (vctx.buildProblems ?? []).filter((p) => p.file).map(buildProblemToRecoveryProblem);
-      if (fileProblems.length > 0) {
-        return {
-          status: "needs_action",
-          diagnosis: {
-            title: cls?.title ?? "Build failed with file-located problems",
-            explanation: cls?.explanation ?? `Build extracted ${fileProblems.length} structured problem${fileProblems.length === 1 ? "" : "s"} with file locations. Patch the files directly.`,
-            reasonCode: "build_failed",
-            phase: "build"
-          },
-          recovery: recoveryFixProblems({
-            problems: fileProblems,
-            reasonCode: "build_failed"
-          }),
-          summary: vctx.lastDeployId ? `Deploy ${vctx.lastDeployId} failed — ${fileProblems.length} structured problem${fileProblems.length === 1 ? "" : "s"} to patch.` : `Build failed — ${fileProblems.length} structured problem${fileProblems.length === 1 ? "" : "s"} to patch.`
-        };
-      }
+      return {
+        status: "needs_action",
+        diagnosis: {
+          title: cls?.title ?? "Build failed with file-located problems",
+          explanation: cls?.explanation ?? `Build extracted ${fileProblems.length} structured problem${fileProblems.length === 1 ? "" : "s"} with file locations. Patch the files directly.`,
+          reasonCode: "build_failed",
+          phase: "build"
+        },
+        recovery: recoveryFixProblems({
+          problems: fileProblems,
+          reasonCode: "build_failed"
+        }),
+        summary: vctx.lastDeployId ? `Deploy ${vctx.lastDeployId} failed — ${fileProblems.length} structured problem${fileProblems.length === 1 ? "" : "s"} to patch.` : `Build failed — ${fileProblems.length} structured problem${fileProblems.length === 1 ? "" : "s"} to patch.`
+      };
+    }
+  },
+  {
+    id: "deploy-failed-inspect-log",
+    when: ({ vctx }) => vctx.lastDeployStatus === "failed" && vctx.inputMode === "deploy",
+    verdict: ({ vctx }) => {
+      const cls = vctx.buildLogClassification;
       return {
         status: "needs_action",
         diagnosis: {
@@ -107618,7 +108140,11 @@ function deriveVerdict(checks3, vctx) {
         summary: vctx.lastDeployId ? `Deploy ${vctx.lastDeployId} failed — inspect the build log.` : "Last deploy failed — inspect the latest failed deploy's build log."
       };
     }
-    return {
+  },
+  {
+    id: "deploy-failed-dispatch",
+    when: ({ vctx }) => vctx.lastDeployStatus === "failed",
+    verdict: ({ vctx }) => ({
       status: "needs_action",
       diagnosis: {
         title: "Last deploy failed",
@@ -107638,10 +108164,12 @@ function deriveVerdict(checks3, vctx) {
         reasonCode: "build_failed"
       },
       summary: vctx.lastDeployId ? `Deploy ${vctx.lastDeployId} failed — call percher_doctor with mode='deploy'.` : "Last deploy failed — call percher_doctor with mode='deploy'."
-    };
-  }
-  if (vctx.appStatus === "suspended") {
-    return {
+    })
+  },
+  {
+    id: "app-suspended",
+    when: ({ vctx }) => vctx.appStatus === "suspended",
+    verdict: ({ vctx }) => ({
       status: "needs_action",
       diagnosis: {
         title: "App is suspended",
@@ -107654,33 +108182,27 @@ function deriveVerdict(checks3, vctx) {
         prompt: vctx.appName ? `${vctx.appName} is suspended. Resume the app from the dashboard (or call the unsuspend API) before retrying.` : "This app is suspended. Resume it from the dashboard before retrying."
       }),
       summary: vctx.appName ? `${vctx.appName} is suspended — resume the app before retrying.` : "App is suspended — resume it before retrying."
-    };
-  }
-  if (verdictChecks.every((c) => c.status === "pass" || c.status === "skip" || c.status === "warn")) {
-    const passing = verdictChecks.filter((c) => c.status === "pass").length;
-    const noun = passing === 1 ? "check" : "checks";
-    return {
-      status: "ok",
-      recovery: recoveryNone({ reasonCode: "none" }),
-      summary: vctx.appName ? `All ${passing} ${noun} passed for ${vctx.appName}.` : `All ${passing} ${noun} passed.`
-    };
-  }
-  const containerDown = vctx.containerRunning === false && vctx.containerState !== undefined && vctx.containerState !== "not-found" || vctx.containerHealthy === false;
-  if (vctx.appStatus === "crashed" || containerDown) {
-    const containerCheck = findCheck("Container");
-    const healthCheck = findCheck("Container health");
-    const lastCrashCheck = findCheck("Last crash");
-    const explanationBits = [];
-    if (vctx.appStatus === "crashed")
-      explanationBits.push("App is in crashed state.");
-    if (containerCheck?.status === "fail")
-      explanationBits.push(containerCheck.message);
-    if (healthCheck?.status === "fail")
-      explanationBits.push(healthCheck.message);
-    if (lastCrashCheck)
-      explanationBits.push(lastCrashCheck.message);
-    const explanation = explanationBits.length > 0 ? explanationBits.join(" ") : "Runtime is not responding — container or health check is failing.";
-    if (vctx.inputMode === "runtime") {
+    })
+  },
+  {
+    id: "all-healthy",
+    when: ({ verdictChecks }) => verdictChecks.every((c) => c.status === "pass" || c.status === "skip" || c.status === "warn"),
+    verdict: ({ vctx, verdictChecks }) => {
+      const passing = verdictChecks.filter((c) => c.status === "pass").length;
+      const noun = passing === 1 ? "check" : "checks";
+      return {
+        status: "ok",
+        recovery: recoveryNone({ reasonCode: "none" }),
+        summary: vctx.appName ? `All ${passing} ${noun} passed for ${vctx.appName}.` : `All ${passing} ${noun} passed.`
+      };
+    }
+  },
+  {
+    id: "runtime-crashed-report",
+    when: ({ vctx, containerDown }) => (vctx.appStatus === "crashed" || containerDown) && vctx.inputMode === "runtime",
+    verdict: (ctx) => {
+      const { vctx } = ctx;
+      const explanation = runtimeCrashExplanation(ctx);
       const cr = vctx.crashReport;
       const hasAnalysis = cr && cr.analysisStatus === "completed";
       const promptParts = [];
@@ -107717,58 +108239,62 @@ ${cr.logs.join(`
         summary: vctx.appName ? hasAnalysis ? `${vctx.appName} crashed — ${cr.suggestion ?? cr.explanation ?? "surface the crash details to the user."}` : `${vctx.appName} runtime is unhealthy — surface the crash details to the user.` : "Runtime is unhealthy — surface the crash details to the user."
       };
     }
-    return {
-      status: "needs_action",
-      diagnosis: {
-        title: vctx.appStatus === "crashed" ? "App crashed" : "Runtime not responding",
-        explanation,
-        reasonCode: "runtime_crashed",
-        phase: "runtime"
-      },
-      recovery: {
-        retryable: false,
-        nextAction: "run_doctor",
-        suggestedTool: "percher_doctor",
-        args: { app: vctx.appName, mode: "runtime" },
-        reasonCode: "runtime_crashed"
-      },
-      summary: vctx.appName ? `${vctx.appName} runtime needs investigation — call percher_doctor with mode='runtime'.` : "Runtime needs investigation — call percher_doctor with mode='runtime'."
-    };
-  }
-  if (vctx.publicRouteHealthy === false) {
-    const routeCheck = findCheck("Public route");
-    return {
-      status: "needs_action",
-      diagnosis: {
-        title: "Public route is not responding",
-        explanation: routeCheck?.message ?? "Container looks healthy but the public URL isn't responding — route reconcile usually self-heals.",
-        reasonCode: "infra_transient",
-        phase: "infra"
-      },
-      recovery: {
-        retryable: true,
-        nextAction: "retry",
-        suggestedTool: "percher_doctor",
-        args: { app: vctx.appName },
-        reasonCode: "infra_transient"
-      },
-      summary: vctx.appName ? `${vctx.appName} public route is failing — likely transient, re-run doctor in a moment.` : "Public route is failing — likely transient, re-run doctor in a moment."
-    };
-  }
-  const firstFailed = verdictChecks.find((c) => c.status === "fail");
-  return {
-    status: "needs_action",
-    diagnosis: firstFailed ? {
-      title: firstFailed.name,
-      explanation: firstFailed.message,
-      reasonCode: "unknown"
-    } : undefined,
-    recovery: recoveryAsk({
-      prompt: firstFailed ? `Doctor flagged a problem: ${firstFailed.name} — ${firstFailed.message}. Review the checks list and surface the failing item to the user.` : "Doctor reported one or more issues. Review the checks list and surface the failing items to the user.",
-      reasonCode: "unknown"
-    }),
-    summary: firstFailed ? `${firstFailed.name} failed: ${firstFailed.message}` : "Doctor reported issues — review the checks list."
-  };
+  },
+  {
+    id: "runtime-crashed-dispatch",
+    when: ({ vctx, containerDown }) => vctx.appStatus === "crashed" || containerDown,
+    verdict: (ctx) => {
+      const { vctx } = ctx;
+      const explanation = runtimeCrashExplanation(ctx);
+      return {
+        status: "needs_action",
+        diagnosis: {
+          title: vctx.appStatus === "crashed" ? "App crashed" : "Runtime not responding",
+          explanation,
+          reasonCode: "runtime_crashed",
+          phase: "runtime"
+        },
+        recovery: {
+          retryable: false,
+          nextAction: "run_doctor",
+          suggestedTool: "percher_doctor",
+          args: { app: vctx.appName, mode: "runtime" },
+          reasonCode: "runtime_crashed"
+        },
+        summary: vctx.appName ? `${vctx.appName} runtime needs investigation — call percher_doctor with mode='runtime'.` : "Runtime needs investigation — call percher_doctor with mode='runtime'."
+      };
+    }
+  },
+  {
+    id: "public-route-unhealthy",
+    when: ({ vctx }) => vctx.publicRouteHealthy === false,
+    verdict: ({ vctx, findCheck }) => {
+      const routeCheck = findCheck("Public route");
+      return {
+        status: "needs_action",
+        diagnosis: {
+          title: "Public route is not responding",
+          explanation: routeCheck?.message ?? "Container looks healthy but the public URL isn't responding — route reconcile usually self-heals.",
+          reasonCode: "infra_transient",
+          phase: "infra"
+        },
+        recovery: {
+          retryable: true,
+          nextAction: "retry",
+          suggestedTool: "percher_doctor",
+          args: { app: vctx.appName },
+          reasonCode: "infra_transient"
+        },
+        summary: vctx.appName ? `${vctx.appName} public route is failing — likely transient, re-run doctor in a moment.` : "Public route is failing — likely transient, re-run doctor in a moment."
+      };
+    }
+  },
+  FALLBACK_RULE
+];
+function deriveVerdict(checks3, vctx) {
+  const ctx = buildVerdictRuleContext(checks3, vctx);
+  const rule = VERDICT_RULES.find((r) => r.when(ctx)) ?? FALLBACK_RULE;
+  return rule.verdict(ctx);
 }
 // ../core/dist/commands/domains.js
 var domainAddInputSchema = exports_external.object({
@@ -107858,6 +108384,82 @@ async function envList(ctx, input = {}) {
     masked[k] = mask(v);
   return masked;
 }
+// ../core/dist/commands/export.js
+import { isAbsolute, resolve as resolvePath } from "node:path";
+var exportInputSchema = exports_external.object({
+  app: exports_external.string().optional(),
+  out: exports_external.string().optional(),
+  deliveryKind: exports_external.enum(["cli", "mcp"]).default("cli")
+});
+function resolveAppName3(ctx, provided) {
+  const name = provided ?? readPercherTomlAppName(ctx.cwd);
+  if (!name) {
+    throw new PercherCoreError("No app specified and no percher.toml found", {
+      code: "export.no-app",
+      hint: "Pass --app <name> or run from a directory with percher.toml."
+    });
+  }
+  return name;
+}
+async function streamToFile(outPath, source) {
+  const file2 = Bun.file(outPath);
+  const writer = file2.writer();
+  let bytes = 0;
+  const reader = source.getReader();
+  try {
+    while (true) {
+      const { done, value } = await reader.read();
+      if (done)
+        break;
+      if (value && value.length > 0) {
+        writer.write(value);
+        bytes += value.length;
+      }
+    }
+    await writer.end();
+  } catch (err) {
+    try {
+      await writer.end();
+    } catch {}
+    try {
+      await Bun.write(outPath, "");
+      await Bun.file(outPath).delete?.();
+    } catch {}
+    throw err;
+  }
+  return { bytes };
+}
+function resolveOutPath(ctxCwd, filename) {
+  if (isAbsolute(filename))
+    return filename;
+  return resolvePath(ctxCwd, filename);
+}
+async function exportApp(ctx, input) {
+  const name = resolveAppName3(ctx, input.app);
+  const mint = await ctx.client.export.mint(name, { deliveryKind: input.deliveryKind });
+  const dl = await ctx.client.export.download(mint.downloadUrl);
+  if (!dl.body) {
+    throw new PercherCoreError("Export download returned an empty body", {
+      code: "export.empty-body",
+      hint: "Try again — the link is single-use, so a new mint is required."
+    });
+  }
+  const filenameFromHeader = (() => {
+    const cd = dl.headers.get("Content-Disposition") ?? "";
+    const m = cd.match(/filename="?([^";]+)"?/);
+    return m?.[1];
+  })();
+  const filename = input.out ?? filenameFromHeader ?? `${name}-export.tar.gz`;
+  const outPath = resolveOutPath(ctx.cwd, filename);
+  const { bytes } = await streamToFile(outPath, dl.body);
+  return {
+    appName: name,
+    outPath,
+    bytes,
+    expiresAt: mint.expiresAt,
+    includedSecrets: false
+  };
+}
 // ../core/dist/commands/forgejo.js
 var FORGEJO_URL_RE = /^https:\/\/[\w.-]+\/[\w.-]+\/[\w.-]+(\.git)?$/;
 var forgejoConnectInputSchema = exports_external.object({
@@ -108726,11 +109328,6 @@ async function login(ctx, input = {}) {
     code: "login.expired"
   });
 }
-// ../shared/dist/logs.js
-var MAX_LOG_SEARCH_LENGTH = 256;
-// ../shared/dist/runtime.js
-var DEFAULT_NODE_VERSION_MAJOR = "24";
-var DEFAULT_NODE_VERSION_LABEL = `${DEFAULT_NODE_VERSION_MAJOR} LTS`;
 // ../core/dist/commands/logs.js
 var logsInputSchema = exports_external.object({
   app: exports_external.string().optional(),
@@ -109641,7 +110238,7 @@ function collectWarnings2(collections, rlsPolicies, unsupported) {
 }
 // ../core/dist/commands/migrate-supabase-schema.js
 import { mkdir as mkdir2, writeFile as writeFile2 } from "node:fs/promises";
-import { isAbsolute, join as join17, relative as relative3, resolve as resolve6 } from "node:path";
+import { isAbsolute as isAbsolute2, join as join17, relative as relative3, resolve as resolve6 } from "node:path";
 
 // ../core/dist/commands/migrate-supabase-scripts.js
 function generateDataImportScripts(preview) {
@@ -110154,7 +110751,7 @@ async function migrateSupabaseSchema(ctx, input) {
 }
 function resolveOutputDir(cwd, requested) {
   const raw = requested ?? "./migration-preview";
-  return isAbsolute(raw) ? raw : resolve6(cwd, raw);
+  return isAbsolute2(raw) ? raw : resolve6(cwd, raw);
 }
 async function writePreviewFiles(ctx, outputDir, preview) {
   await mkdir2(outputDir, { recursive: true });
@@ -110373,6 +110970,45 @@ async function open(ctx, input = {}) {
   await ctx.openUrl(app.url);
   return app.url;
 }
+// ../core/dist/commands/preview-branch.js
+var previewBranchSetInputSchema = exports_external.object({
+  app: exports_external.string().optional(),
+  branch: exports_external.string().min(1, "Branch is required")
+});
+var previewBranchInputSchema = exports_external.object({
+  app: exports_external.string().optional()
+});
+function resolveApp3(ctx, app) {
+  const name = app ?? readPercherTomlAppName(ctx.cwd);
+  if (!name) {
+    throw new PercherCoreError("No app specified and no percher.toml found", {
+      code: "env.no-app",
+      hint: "Pass an app name or run from a directory with percher.toml."
+    });
+  }
+  return name;
+}
+async function previewBranchSet(ctx, input) {
+  const appRef = resolveApp3(ctx, input.app);
+  return ctx.client.apps.setPreviewBranch(appRef, input.branch);
+}
+async function previewBranchUnset(ctx, input = {}) {
+  const appRef = resolveApp3(ctx, input.app);
+  return ctx.client.apps.unsetPreviewBranch(appRef);
+}
+var setPreviewBranchToolInputSchema = exports_external.object({
+  app: exports_external.string().optional(),
+  branch: exports_external.string().nullable().describe("Branch to pin as the preview address; pass null to clear it.")
+});
+async function previewBranchShow(ctx, input = {}) {
+  const appRef = resolveApp3(ctx, input.app);
+  const app = await ctx.client.apps.get(appRef);
+  return {
+    previewBranch: app.previewBranch ?? null,
+    previewUrl: app.previewUrl ?? null,
+    status: app.previewStatus ?? "disabled"
+  };
+}
 // ../core/dist/commands/publish.js
 import { existsSync as existsSync14 } from "node:fs";
 import { join as join20 } from "node:path";
@@ -110508,10 +111144,10 @@ async function pollDeployment(opts) {
         polled = true;
       } catch (err) {
         attempt++;
-        const msg = err.message ?? String(err);
-        const isNetwork = msg.startsWith("network error:");
+        const isNetwork = isTransientNetworkError(err);
         if (!isNetwork || attempt >= maxRetries) {
           if (isNetwork) {
+            const msg = err.message ?? String(err);
             throw new Error(`${msg}
 
 The deploy may already be live — your network connection dropped mid-poll. Check with: percher deploys list ${opts.appName}`, { cause: err });
@@ -110673,7 +111309,7 @@ function classifyDeployRetry(err, attempt) {
       category: "non_retryable"
     };
   }
-  if (err instanceof Error && /network error|fetch failed|ECONNRESET|ENOTFOUND|ETIMEDOUT/i.test(err.message)) {
+  if (isTransientNetworkError(err)) {
     const delay = NETWORK_BACKOFF_MS[idx];
     if (delay === undefined) {
       return {
@@ -110808,6 +111444,12 @@ function* walkDir(dir, base) {
 }
 
 // ../core/dist/commands/publish-api-error.js
+var DEPLOY_GATE_CODES = new Set([
+  "RETRY_LIMIT_REACHED",
+  "REQUIRED_ENV_MISSING",
+  "ENV_KEY_UNDECLARED",
+  "DAILY_QUOTA_EXCEEDED"
+]);
 function classifyPublishApiError(err, input) {
   if (!(err instanceof PercherApiError))
     return null;
@@ -110832,6 +111474,18 @@ function classifyPublishApiError(err, input) {
   const auth = matchAuthError(err);
   if (auth)
     return buildResult(auth, input);
+  const retryLimit = matchRetryLimitReached(err, input);
+  if (retryLimit)
+    return buildResult(retryLimit, input);
+  const requiredEnv = matchRequiredEnvMissing(err, input);
+  if (requiredEnv)
+    return buildResult(requiredEnv, input);
+  const undeclaredEnv = matchEnvKeyUndeclared(err, input);
+  if (undeclaredEnv)
+    return buildResult(undeclaredEnv, input);
+  const dailyQuota = matchDailyQuotaExceeded(err, input);
+  if (dailyQuota)
+    return buildResult(dailyQuota, input);
   const clientError = matchGenericClientError(err);
   if (clientError)
     return buildResult(clientError, input);
@@ -110840,12 +111494,17 @@ function classifyPublishApiError(err, input) {
 function buildResult(c, input) {
   return {
     status: "failed",
+    ...input.app !== undefined ? { app: input.app } : {},
     fileCount: input.bundle.fileCount,
     bytes: input.bundle.bytes,
     error: {
       title: c.title,
       explanation: c.explanation,
-      suggestion: c.suggestion
+      suggestion: c.suggestion,
+      ...c.errorClass !== undefined ? { errorClass: c.errorClass } : {},
+      ...c.phase !== undefined ? { phase: c.phase } : {},
+      ...c.missingEnvVars !== undefined ? { missingEnvVars: c.missingEnvVars } : {},
+      ...c.relevantFiles !== undefined ? { relevantFiles: c.relevantFiles } : {}
     },
     recovery: c.recovery,
     summary: c.summary,
@@ -110864,9 +111523,9 @@ function matchPlanLimit(err) {
   return {
     title: "Plan limit reached",
     explanation: err.message,
-    suggestion: "Upgrade your plan at https://percher.app/settings, or delete unused apps with `percher delete <name>`.",
+    suggestion: "Upgrade your plan at https://percher.app/account/billing, or delete unused apps with `percher delete <name>`.",
     recovery: recoveryAsk({
-      prompt: `${err.message}. Upgrade at https://percher.app/settings, or delete an unused app with \`percher delete <name>\`.`,
+      prompt: `${err.message}. Upgrade at https://percher.app/account/billing, or delete an unused app with \`percher delete <name>\`.`,
       options: ["upgrade", "delete unused app", "cancel"],
       reasonCode: "quota_exceeded"
     }),
@@ -110884,7 +111543,7 @@ function matchRateLimit(err) {
   return {
     title: "Rate limit hit",
     explanation: err.message,
-    suggestion: "Wait a few minutes and try again. If you need a higher cap, upgrade at https://percher.app/settings.",
+    suggestion: "Wait a few minutes and try again. If you need a higher cap, upgrade at https://percher.app/account/billing.",
     recovery: recoveryAsk({
       prompt: `Rate limit: ${err.message}. Wait a few minutes then retry, or upgrade your plan.`,
       options: ["wait and retry", "upgrade", "cancel"],
@@ -110902,7 +111561,7 @@ function matchConcurrentLimit(err) {
     explanation: err.message,
     suggestion: "Wait for one of your in-flight deploys to finish, or upgrade your plan to raise the concurrency cap.",
     recovery: recoveryAsk({
-      prompt: `${err.message} Wait for one to finish, or upgrade at https://percher.app/settings.`,
+      prompt: `${err.message} Wait for one to finish, or upgrade at https://percher.app/account/billing.`,
       options: ["wait", "upgrade", "cancel"],
       reasonCode: "deploy_already_in_progress"
     }),
@@ -110927,14 +111586,46 @@ function matchSuspended(err) {
 function matchAppSuspended(err) {
   if (err.code !== "APP_SUSPENDED" || err.status !== 403)
     return null;
+  const liftAfterRaw = typeof err.extra?.liftAfter === "string" ? err.extra.liftAfter : null;
+  const liftableNow = err.extra?.liftableNow === true;
+  const canLiftViaPublish = err.extra?.canLiftViaPublish === true;
+  const fixInstructions = typeof err.extra?.fixInstructions === "string" && err.extra.fixInstructions.length > 0 ? err.extra.fixInstructions : null;
+  let suggestion;
+  let prompt;
+  let options;
+  if (canLiftViaPublish && liftableNow) {
+    suggestion = fixInstructions ? `Fix the underlying cause (${fixInstructions}) and run \`percher publish\` — a successful deploy will lift the suspension automatically.` : "Fix the underlying cause and run `percher publish` — a successful deploy will lift the suspension automatically.";
+    prompt = fixInstructions ? `${err.message}
+
+The suspension window has passed. Fix the underlying cause per the admin's instructions (${fixInstructions}), then run \`percher publish\` — a successful deploy will lift the suspension.` : `${err.message}
+
+The suspension window has passed. Fix the underlying cause, then run \`percher publish\` — a successful deploy will lift the suspension.`;
+    options = ["fix and republish", "open dashboard", "contact support"];
+  } else if (canLiftViaPublish && liftAfterRaw) {
+    suggestion = fixInstructions ? `Wait until ${liftAfterRaw}, then fix the underlying cause (${fixInstructions}) and run \`percher publish\`. A successful deploy after the window passes will lift the suspension.` : `Wait until ${liftAfterRaw}, then run \`percher publish\`. A successful deploy after the window passes will lift the suspension.`;
+    prompt = `${err.message}
+
+You can try again after ${liftAfterRaw}. Until then, retrying will fail.`;
+    options = ["wait and republish", "open dashboard", "contact support"];
+  } else if (liftAfterRaw) {
+    suggestion = `A Percher admin will review the suspension after ${liftAfterRaw}. Contact support if you need it lifted sooner.`;
+    prompt = `${err.message}
+
+Admin will review after ${liftAfterRaw}. Contact support at https://percher.app if you need it lifted sooner.`;
+    options = ["wait", "contact support"];
+  } else {
+    suggestion = "Contact support at https://percher.app or check the dashboard for unsuspend options. Re-publishing won't unsuspend the app.";
+    prompt = `${err.message} Open https://percher.app or contact support — re-publish won't help until the app is unsuspended.`;
+    options = ["contact support", "open dashboard"];
+  }
   return {
     title: "App suspended",
     explanation: err.message,
-    suggestion: "Contact support at https://percher.app or check the dashboard for unsuspend options. Re-publishing won't unsuspend the app.",
+    suggestion,
     recovery: recoveryAsk({
-      prompt: `${err.message} Open https://percher.app or contact support — re-publish won't help until the app is unsuspended.`,
-      options: ["contact support", "open dashboard"],
-      reasonCode: "unknown"
+      prompt,
+      options,
+      reasonCode: "app_suspended"
     }),
     summary: `App suspended: ${err.message}`
   };
@@ -110945,7 +111636,7 @@ function matchEmailNotVerified(err) {
   return {
     title: "Email not verified",
     explanation: err.message,
-    suggestion: "Open the verification link in your inbox, or visit https://percher.app/settings to resend the email. Re-publish after verifying.",
+    suggestion: "Open the verification link in your inbox, or visit https://percher.app/account to resend the email. Re-publish after verifying.",
     recovery: recoveryAsk({
       prompt: `${err.message} Verify the email, then retry publish.`,
       options: ["check inbox", "open settings"],
@@ -110979,6 +111670,94 @@ function matchAuthError(err) {
     summary: `Permission denied (${err.status} ${err.code || "—"}): ${err.message}`
   };
 }
+function matchRetryLimitReached(err, input) {
+  if (err.code !== "RETRY_LIMIT_REACHED" || input.app === undefined)
+    return null;
+  const appName = input.app.name;
+  const extra = err.extra ?? {};
+  const resetAtStr = extra.resetAt ?? "";
+  const resetAtForPrompt = resetAtStr || "the cooldown window expires";
+  return {
+    title: "Retry limit reached",
+    explanation: "Percher already auto-retried once after an `infra_unavailable` failure for this app within the last 10 minutes. We won't auto-retry again — the next attempt should be a deliberate user decision.",
+    suggestion: `Wait until ${resetAtForPrompt}, then re-run \`percher publish\`. If the failure persists past that, the underlying issue is probably not transient — run \`percher doctor\` to diagnose.`,
+    recovery: recoveryAsk({
+      prompt: `Percher already retried once after an infrastructure failure for ${appName}. Wait until ${resetAtForPrompt} or surface to the user.`,
+      options: ["wait before retrying", "inspect status"],
+      reasonCode: "retry_limit_reached",
+      retryable: false
+    }),
+    summary: `Retry limit reached for ${appName}${resetAtStr ? ` — wait until ${resetAtStr}` : ""}.`
+  };
+}
+function matchRequiredEnvMissing(err, input) {
+  if (err.code !== "REQUIRED_ENV_MISSING" || input.app === undefined)
+    return null;
+  const extra = err.extra ?? {};
+  const keys = extra.keys ?? [];
+  const source = extra.source ?? "contract";
+  const sourceText = source === "contract" ? "declared in your [env].required" : source === "discovered" ? "learned from a previous build failure" : "both declared and learned from a previous build failure";
+  return {
+    title: "Required env keys not set",
+    explanation: `${keys.length} env ${keys.length === 1 ? "key is" : "keys are"} ${sourceText} but missing from the env store: ${keys.join(", ")}.`,
+    suggestion: `Run \`bunx percher env set ${keys[0] ?? "KEY"}=value\` (and similarly for the rest) and re-publish.`,
+    errorClass: "missing_env",
+    phase: "config",
+    missingEnvVars: keys,
+    recovery: recoveryEnv({
+      app: input.app.name,
+      keys,
+      reasonCode: "missing_env"
+    }),
+    summary: `Missing required env ${keys.length === 1 ? "key" : "keys"}: ${keys.join(", ")}.`
+  };
+}
+function matchEnvKeyUndeclared(err, input) {
+  if (err.code !== "ENV_KEY_UNDECLARED" || input.app === undefined)
+    return null;
+  const extra = err.extra ?? {};
+  const apiProblems = extra.problems ?? [];
+  const problems = apiProblems.map((p) => ({
+    file: p.file,
+    line: p.line,
+    message: `Source references env key '${p.key}' which is not declared in [env]. Add it to [env].required, [env].optional, or [env].ignore in percher.toml. Context: ${p.context ?? "(unavailable)"}`
+  }));
+  const uniqueKeys = [...new Set(apiProblems.map((p) => p.key))];
+  return {
+    title: "Undeclared env key",
+    explanation: `Source references ${uniqueKeys.length} env ${uniqueKeys.length === 1 ? "key" : "keys"} that aren't classified in percher.toml's [env] table: ${uniqueKeys.join(", ")}.`,
+    suggestion: "Add each key to [env].required (must exist before deploy), [env].optional (may be referenced), or [env].ignore (intentionally unset). See https://percher.app/docs/env for the contract.",
+    errorClass: "config_invalid",
+    phase: "config",
+    relevantFiles: ["percher.toml"],
+    recovery: recoveryFixConfig({
+      problems,
+      reasonCode: "env_key_undeclared"
+    }),
+    summary: `${uniqueKeys.length} undeclared env ${uniqueKeys.length === 1 ? "key" : "keys"} in source: ${uniqueKeys.join(", ")}.`
+  };
+}
+function matchDailyQuotaExceeded(err, input) {
+  if (err.code !== "DAILY_QUOTA_EXCEEDED" || input.app === undefined)
+    return null;
+  const extra = err.extra ?? {};
+  const kind = extra.kind ?? "live";
+  const used = extra.used ?? 0;
+  const limit = extra.limit ?? 0;
+  const resetAt = extra.resetAt ?? "";
+  const otherKind = kind === "live" ? "preview" : "live";
+  return {
+    title: "Daily deploy quota reached",
+    explanation: `You've used ${used} of ${limit} ${kind} deploys today on this account. Counter resets at ${resetAt}.`,
+    suggestion: `Wait until the counter resets, deploy a ${otherKind} instead, or upgrade your plan at https://percher.app/account/billing to raise this cap.`,
+    recovery: recoveryAsk({
+      prompt: `Daily ${kind}-deploy quota reached (${used}/${limit}). Counter resets at ${resetAt}. Wait until then, deploy a ${otherKind} instead, or upgrade at https://percher.app/account/billing.`,
+      options: ["wait", `deploy ${otherKind}`, "upgrade"],
+      reasonCode: "quota_exceeded"
+    }),
+    summary: `Daily ${kind}-deploy quota reached (${used}/${limit}). Resets ${resetAt}.`
+  };
+}
 function matchGenericClientError(err) {
   if (err.status < 400 || err.status >= 500)
     return null;
@@ -111042,13 +111821,12 @@ var publishInputSchema = exports_external.object({
   noCache: exports_external.boolean().optional().describe("Skip the image-cache lookup and force a fresh build. Use this when you suspect the cached image doesn't reflect your latest source — the new build's resulting image still gets cached, so future deploys benefit."),
   waitForLive: exports_external.boolean().optional().describe("If true (default), publish blocks until the deploy is live or failed. If false, publish returns as soon as the deploy is queued and the agent can resume with percher_wait_for_deploy. Recommended for AI agents — gives back control quickly with a deployId so they can decide between waiting, asking the user, or working on something else.")
 });
-var MAX_BYTES = 500 * 1024 * 1024;
 var SUSPICIOUS_BYTES = 50 * 1024 * 1024;
 var SUSPICIOUS_FILES = 1e4;
 function tomlPathFor2(cwd) {
   return join20(cwd, "percher.toml");
 }
-async function buildReplacedResult(opts) {
+async function buildReplacedResult2(opts) {
   const { ctx, app, deployment, tarball, cwd } = opts;
   const resolved = await resolveReplaced({
     ctx,
@@ -111086,33 +111864,6 @@ function buildAlreadyInProgressResult(opts) {
     bundle: { fileCount: tarball.fileCount, bytes: tarball.bytes }
   };
 }
-function buildRetryLimitReachedResult(opts) {
-  const { err, app, tarball, cwd } = opts;
-  const extra = err.extra ?? {};
-  const resetAtStr = extra.resetAt ?? "";
-  const resetAtForPrompt = resetAtStr || "the cooldown window expires";
-  const prompt = `Percher already retried once after an infrastructure failure for ${app.name}. Wait until ${resetAtForPrompt} or surface to the user.`;
-  return {
-    status: "failed",
-    app,
-    fileCount: tarball.fileCount,
-    bytes: tarball.bytes,
-    error: {
-      title: "Retry limit reached",
-      explanation: "Percher already auto-retried once after an `infra_unavailable` failure for this app within the last 10 minutes. We won't auto-retry again — the next attempt should be a deliberate user decision.",
-      suggestion: `Wait until ${resetAtForPrompt}, then re-run \`percher publish\`. If the failure persists past that, the underlying issue is probably not transient — run \`percher doctor\` to diagnose.`
-    },
-    recovery: recoveryAsk({
-      prompt,
-      options: ["wait before retrying", "inspect status"],
-      reasonCode: "retry_limit_reached",
-      retryable: false
-    }),
-    summary: `Retry limit reached for ${app.name}${resetAtStr ? ` — wait until ${resetAtStr}` : ""}.`,
-    configPath: tomlPathFor2(cwd),
-    bundle: { fileCount: tarball.fileCount, bytes: tarball.bytes }
-  };
-}
 function buildLiveSummary(opts) {
   const cacheTag = opts.cacheHit ? "cached, " : "";
   const fwSuffix = opts.framework ? ` (${opts.framework}, ${cacheTag}${opts.totalSeconds}s)` : ` (${cacheTag}${opts.totalSeconds}s)`;
@@ -111235,7 +111986,7 @@ ${bullets}`,
   ctx.status("[2/4] Packaging files...");
   const tarball = await createTarball({ cwd: ctx.cwd, config: config2 });
   const packageMs = Date.now() - t0;
-  if (tarball.bytes > MAX_BYTES) {
+  if (tarball.bytes > MAX_TARBALL_BYTES) {
     return {
       status: "failed",
       fileCount: tarball.fileCount,
@@ -111330,12 +112081,26 @@ ${keyList}
       ctx.status(`Build queue wait: ~${preflight.queueWaitEstimateSec}s — your build is queued behind ${preflight.queueDepth} other(s).`);
     }
   } catch {}
+  return executeDeploy({
+    ctx,
+    config: config2,
+    input,
+    app,
+    firstDeploy,
+    tarball,
+    t0,
+    packageMs,
+    missingBuildEnvKeys
+  });
+}
+async function executeDeploy(opts) {
+  const { ctx, config: config2, input, app, firstDeploy, tarball, t0, packageMs, missingBuildEnvKeys } = opts;
   const uploadStart = Date.now();
   ctx.status("[3/4] Uploading...");
   const tarballBytes = new Uint8Array(await new Response(tarball.stream).arrayBuffer());
   let cacheReusedDeployment = null;
   const contentHash = tarball.contentHash;
-  if (!input.noCache) {
+  if (!input.noCache && !input.preview) {
     try {
       const probe = await ctx.client.platform.cacheProbe({
         appId: app.id,
@@ -111381,99 +112146,14 @@ ${keyList}
       }
       deployment = deployResponse;
     } catch (err) {
-      if (err instanceof PercherApiError && err.code === "RETRY_LIMIT_REACHED") {
-        return buildRetryLimitReachedResult({
-          err,
-          app,
-          tarball: { fileCount: tarball.fileCount, bytes: tarball.bytes },
-          cwd: ctx.cwd
-        });
-      }
-      if (err instanceof PercherApiError && err.code === "REQUIRED_ENV_MISSING") {
-        const extra = err.extra ?? {};
-        const keys = extra.keys ?? [];
-        const source = extra.source ?? "contract";
-        const sourceText = source === "contract" ? "declared in your [env].required" : source === "discovered" ? "learned from a previous build failure" : "both declared and learned from a previous build failure";
-        return {
-          status: "failed",
-          app,
-          fileCount: tarball.fileCount,
-          bytes: tarball.bytes,
-          error: {
-            title: "Required env keys not set",
-            explanation: `${keys.length} env ${keys.length === 1 ? "key is" : "keys are"} ${sourceText} but missing from the env store: ${keys.join(", ")}.`,
-            suggestion: `Run \`bunx percher env set ${keys[0] ?? "KEY"}=value\` (and similarly for the rest) and re-publish.`,
-            errorClass: "missing_env",
-            phase: "config",
-            missingEnvVars: keys
-          },
-          recovery: recoveryEnv({
-            app: app.name,
-            keys,
-            reasonCode: "missing_env"
-          }),
-          summary: `Missing required env ${keys.length === 1 ? "key" : "keys"}: ${keys.join(", ")}.`,
-          configPath: tomlPathFor2(ctx.cwd),
-          bundle: { fileCount: tarball.fileCount, bytes: tarball.bytes }
-        };
-      }
-      if (err instanceof PercherApiError && err.code === "ENV_KEY_UNDECLARED") {
-        const extra = err.extra ?? {};
-        const apiProblems = extra.problems ?? [];
-        const problems = apiProblems.map((p) => ({
-          file: p.file,
-          line: p.line,
-          message: `Source references env key '${p.key}' which is not declared in [env]. Add it to [env].required, [env].optional, or [env].ignore in percher.toml. Context: ${p.context ?? "(unavailable)"}`
-        }));
-        const uniqueKeys = [...new Set(apiProblems.map((p) => p.key))];
-        return {
-          status: "failed",
-          app,
-          fileCount: tarball.fileCount,
-          bytes: tarball.bytes,
-          error: {
-            title: "Undeclared env key",
-            explanation: `Source references ${uniqueKeys.length} env ${uniqueKeys.length === 1 ? "key" : "keys"} that aren't classified in percher.toml's [env] table: ${uniqueKeys.join(", ")}.`,
-            suggestion: "Add each key to [env].required (must exist before deploy), [env].optional (may be referenced), or [env].ignore (intentionally unset). See https://percher.app/docs/env for the contract.",
-            errorClass: "config_invalid",
-            phase: "config",
-            relevantFiles: ["percher.toml"]
-          },
-          recovery: recoveryFixConfig({
-            problems,
-            reasonCode: "env_key_undeclared"
-          }),
-          summary: `${uniqueKeys.length} undeclared env ${uniqueKeys.length === 1 ? "key" : "keys"} in source: ${uniqueKeys.join(", ")}.`,
-          configPath: tomlPathFor2(ctx.cwd),
-          bundle: { fileCount: tarball.fileCount, bytes: tarball.bytes }
-        };
-      }
-      if (err instanceof PercherApiError && err.code === "DAILY_QUOTA_EXCEEDED") {
-        const extra = err.extra ?? {};
-        const kind = extra.kind ?? "live";
-        const used = extra.used ?? 0;
-        const limit = extra.limit ?? 0;
-        const resetAt = extra.resetAt ?? "";
-        const otherKind = kind === "live" ? "preview" : "live";
-        return {
-          status: "failed",
-          app,
-          fileCount: tarball.fileCount,
-          bytes: tarball.bytes,
-          error: {
-            title: "Daily deploy quota reached",
-            explanation: `You've used ${used} of ${limit} ${kind} deploys today on this account. Counter resets at ${resetAt}.`,
-            suggestion: `Wait until the counter resets, deploy a ${otherKind} instead, or upgrade your plan at https://percher.app/settings to raise this cap.`
-          },
-          recovery: recoveryAsk({
-            prompt: `Daily ${kind}-deploy quota reached (${used}/${limit}). Counter resets at ${resetAt}. Wait until then, deploy a ${otherKind} instead, or upgrade at https://percher.app/settings.`,
-            options: ["wait", `deploy ${otherKind}`, "upgrade"],
-            reasonCode: "quota_exceeded"
-          }),
-          summary: `Daily ${kind}-deploy quota reached (${used}/${limit}). Resets ${resetAt}.`,
+      if (err instanceof PercherApiError && DEPLOY_GATE_CODES.has(err.code)) {
+        const classified = classifyPublishApiError(err, {
           configPath: tomlPathFor2(ctx.cwd),
-          bundle: { fileCount: tarball.fileCount, bytes: tarball.bytes }
-        };
+          bundle: { fileCount: tarball.fileCount, bytes: tarball.bytes },
+          app
+        });
+        if (classified)
+          return classified;
       }
       throw err;
     }
@@ -111571,7 +112251,7 @@ ${keyList}
   }
   const buildMs = Date.now() - buildStart;
   if (deployment.status === "replaced") {
-    return await buildReplacedResult({
+    return await buildReplacedResult2({
       ctx,
       app,
       deployment,
@@ -111683,150 +112363,21 @@ async function handleUnauthorized(ctx, config2, tarball, input) {
     token: newToken,
     sessionId: ctx.client.sessionId
   });
+  const t0 = Date.now();
   const freshTarball = await createTarball({ cwd: ctx.cwd, config: config2 });
-  let firstDeployRetry = false;
-  let app;
-  ({ app, firstDeploy: firstDeployRetry } = await ensureApp2(ctx, config2));
-  ctx.status("Uploading...");
-  const freshTarballBytes = new Uint8Array(await new Response(freshTarball.stream).arrayBuffer());
-  const freshIdempotencyKey = crypto.randomUUID();
-  let deployment;
-  try {
-    const { result: deployResponse } = await runDeployWithRetry({
-      call: (attempt) => ctx.client.apps.deploy(app.id, {
-        tarball: freshTarballBytes,
-        type: input.preview ? "preview" : undefined,
-        note: input.message,
-        noCache: input.noCache,
-        idempotencyKey: freshIdempotencyKey,
-        retriedAttempts: attempt - 1
-      }),
-      onRetry: ({ attempt, decision }) => {
-        ctx.status(`Retrying after ${Math.round(decision.delayMs / 1000)}s — ${decision.reason} (attempt ${attempt + 1}/4)…`);
-      }
-    });
-    if (isDeployAlreadyInProgress(deployResponse)) {
-      return buildAlreadyInProgressResult({
-        active: deployResponse,
-        app,
-        tarball: { fileCount: freshTarball.fileCount, bytes: freshTarball.bytes },
-        cwd: ctx.cwd
-      });
-    }
-    deployment = deployResponse;
-  } catch (err) {
-    if (err instanceof PercherApiError && err.code === "RETRY_LIMIT_REACHED") {
-      return buildRetryLimitReachedResult({
-        err,
-        app,
-        tarball: { fileCount: freshTarball.fileCount, bytes: freshTarball.bytes },
-        cwd: ctx.cwd
-      });
-    }
-    throw err;
-  }
-  const replacedPreview = deployment.replacedPreview === true;
-  if (input.waitForLive === false) {
-    ctx.status(`Queued (${deployment.id}) — resume with percher_wait_for_deploy.`);
-    return {
-      status: "queued",
-      app,
-      deployment,
-      fileCount: freshTarball.fileCount,
-      bytes: freshTarball.bytes,
-      replacedPreview: replacedPreview || undefined,
-      firstDeploy: firstDeployRetry || undefined,
-      recovery: recoveryWait({
-        app: app.name,
-        deployId: deployment.id,
-        reasonCode: "deploy_queued"
-      }),
-      summary: `${app.name} deploy ${deployment.id} queued — resume with percher_wait_for_deploy.`,
-      configPath: tomlPathFor2(ctx.cwd),
-      bundle: { fileCount: freshTarball.fileCount, bytes: freshTarball.bytes }
-    };
-  }
-  const timeoutMs = TIMEOUTS.clientPublishPoll;
-  const start = Date.now();
-  while (deployment.status !== "live" && deployment.status !== "failed" && deployment.status !== "replaced") {
-    if (Date.now() - start > timeoutMs) {
-      return {
-        status: "failed",
-        app,
-        deployment,
-        fileCount: freshTarball.fileCount,
-        bytes: freshTarball.bytes,
-        error: {
-          title: "Deploy timed out",
-          explanation: "The deployment did not complete within 5 minutes.",
-          suggestion: `Run \`percher doctor --app ${app.name}\` (CLI) or the percher_doctor tool (MCP) to diagnose the stall. Doctor will read deploy state + build log and return a concrete next step.`
-        },
-        recovery: recoveryDoctor({
-          app: app.name,
-          deployId: deployment.id,
-          mode: "deploy",
-          reasonCode: "deploy_stalled"
-        }),
-        summary: `Deploy timed out after 5 minutes (${deployment.id}).`,
-        configPath: tomlPathFor2(ctx.cwd),
-        bundle: { fileCount: freshTarball.fileCount, bytes: freshTarball.bytes }
-      };
-    }
-    ctx.status(`${deployment.status}...`);
-    await new Promise((r) => setTimeout(r, 2000));
-    deployment = await ctx.client.apps.getDeployment(app.id, deployment.id);
-  }
-  if (deployment.status === "replaced") {
-    return await buildReplacedResult({
-      ctx,
-      app,
-      deployment,
-      tarball: { fileCount: freshTarball.fileCount, bytes: freshTarball.bytes },
-      cwd: ctx.cwd
-    });
-  }
-  if (deployment.status === "failed") {
-    return buildFailureResult({
-      ctx,
-      app,
-      deployment,
-      tarball: { fileCount: freshTarball.fileCount, bytes: freshTarball.bytes },
-      input
-    });
-  }
-  const totalSeconds = (Date.now() - start) / 1000;
-  const url2 = deployment.previewUrl ?? deployment.url ?? app.url;
-  ctx.status(`Live at ${url2} (${totalSeconds.toFixed(0)}s)`);
-  return {
-    status: "live",
-    url: url2,
+  const packageMs = Date.now() - t0;
+  const { app, firstDeploy } = await ensureApp2(ctx, config2);
+  return executeDeploy({
+    ctx,
+    config: config2,
+    input,
     app,
-    deployment,
-    timing: {
-      totalSeconds: Math.round(totalSeconds),
-      packageMs: 0,
-      uploadMs: 0,
-      buildMs: 0
-    },
-    fileCount: freshTarball.fileCount,
-    bytes: freshTarball.bytes,
-    replacedPreview,
-    firstDeploy: firstDeployRetry || undefined,
-    recovery: RECOVERY_NONE,
-    cacheHit: deployment.cacheHit,
-    traceId: deployment.id,
-    summary: buildLiveSummary({
-      appName: app.name,
-      url: url2 ?? app.url,
-      totalSeconds: Math.round(totalSeconds),
-      framework: config2.app.framework,
-      preview: input.preview === true,
-      replacedPreview,
-      cacheHit: deployment.cacheHit ?? false
-    }),
-    configPath: tomlPathFor2(ctx.cwd),
-    bundle: { fileCount: freshTarball.fileCount, bytes: freshTarball.bytes }
-  };
+    firstDeploy,
+    tarball: freshTarball,
+    t0,
+    packageMs,
+    missingBuildEnvKeys: []
+  });
 }
 async function loadOrGenerate(ctx) {
   const tomlPath = join20(ctx.cwd, "percher.toml");
@@ -111887,7 +112438,6 @@ var pushInputSchema = exports_external.object({
   preview: exports_external.boolean().optional(),
   noCache: exports_external.boolean().optional().describe("Skip the image-cache lookup and force a fresh build.")
 });
-var MAX_BYTES2 = 500 * 1024 * 1024;
 var SUSPICIOUS_BYTES2 = 50 * 1024 * 1024;
 var SUSPICIOUS_FILES2 = 1e4;
 var PLACEHOLDER_PREFIXES = ["add-your-", "your-key-here"];
@@ -111961,7 +112511,7 @@ async function push(ctx, input = {}, internals = {}) {
   await checkPlaceholders(ctx, config2);
   await checkByoSecrets(ctx, config2);
   const tarball = await createTarball({ cwd: ctx.cwd, config: config2 });
-  if (tarball.bytes > MAX_BYTES2) {
+  if (tarball.bytes > MAX_TARBALL_BYTES) {
     throw new PercherCoreError(`Repository is larger than 500 MB (current: ${(tarball.bytes / 1024 / 1024).toFixed(1)} MB)`, {
       code: "push.too-large",
       hint: `Biggest files: ${tarball.topFiles.map((f) => f.path).join(", ")}`,
@@ -112116,10 +112666,10 @@ async function push(ctx, input = {}, internals = {}) {
       const resetAt = extra.resetAt ?? "";
       throw new PercherCoreError(`Daily ${kind}-deploy quota reached (${used}/${limit}). Resets at ${resetAt}.`, {
         code: "push.quota-exceeded",
-        hint: `Wait until ${resetAt} or upgrade your plan at https://percher.app/settings.`,
+        hint: `Wait until ${resetAt} or upgrade your plan at https://percher.app/account/billing.`,
         recovery: {
           ...recoveryAsk({
-            prompt: `Daily ${kind}-deploy quota reached (${used}/${limit}). Counter resets at ${resetAt}. Wait until then or upgrade at https://percher.app/settings.`,
+            prompt: `Daily ${kind}-deploy quota reached (${used}/${limit}). Counter resets at ${resetAt}. Wait until then or upgrade at https://percher.app/account/billing.`,
             reasonCode: "quota_exceeded"
           })
         }
@@ -112273,10 +112823,10 @@ async function redeploy(ctx, input = {}) {
             error: {
               title: "Daily deploy quota reached",
               explanation: `You've used ${used} of ${limit} ${kind} deploys today on this account. Counter resets at ${resetAt}.`,
-              suggestion: `Wait until the counter resets, deploy a ${otherKind} instead, or upgrade your plan at https://percher.app/settings to raise this cap.`
+              suggestion: `Wait until the counter resets, deploy a ${otherKind} instead, or upgrade your plan at https://percher.app/account/billing to raise this cap.`
             },
             recovery: recoveryAsk({
-              prompt: `Daily ${kind}-deploy quota reached (${used}/${limit}). Counter resets at ${resetAt}. Wait until then, deploy a ${otherKind} instead, or upgrade at https://percher.app/settings.`,
+              prompt: `Daily ${kind}-deploy quota reached (${used}/${limit}). Counter resets at ${resetAt}. Wait until then, deploy a ${otherKind} instead, or upgrade at https://percher.app/account/billing.`,
               options: ["wait", `deploy ${otherKind}`, "upgrade"],
               reasonCode: "quota_exceeded"
             }),
@@ -112289,7 +112839,7 @@ async function redeploy(ctx, input = {}) {
           return failureResult({
             title: "Deploy rate limit reached",
             explanation: err.message,
-            suggestion: "Wait a minute or two and try again. Hourly limits scale with your plan; upgrade at https://percher.app/settings to raise it."
+            suggestion: "Wait a minute or two and try again. Hourly limits scale with your plan; upgrade at https://percher.app/account/billing to raise it."
           });
         case "DEPLOY_RATE_LIMITED": {
           const extra = err.extra ?? {};
@@ -112516,6 +113066,8 @@ function failureResult(error48) {
   };
 }
 // ../core/dist/commands/rename.js
+import { existsSync as existsSync16, readFileSync as readFileSync12, writeFileSync as writeFileSync8 } from "node:fs";
+import { join as join22 } from "node:path";
 var renameInputSchema = exports_external.object({
   app: exports_external.string().optional(),
   name: exports_external.string().min(3).max(40)
@@ -112528,12 +113080,33 @@ async function rename(ctx, input) {
       hint: "Pass an app name or run from a directory with percher.toml."
     });
   }
-  return ctx.client.apps.rename(appRef, input.name);
+  const result = await ctx.client.apps.rename(appRef, input.name);
+  return {
+    ...result,
+    tomlUpdated: updateLocalTomlName(ctx.cwd, result.previousName, result.name)
+  };
+}
+function updateLocalTomlName(cwd, oldName, newName) {
+  const p = join22(cwd, "percher.toml");
+  if (!existsSync16(p))
+    return false;
+  try {
+    const src = readFileSync12(p, "utf8");
+    if (parse5(src).app.name !== oldName)
+      return false;
+    const next = src.replace(new RegExp(`(name\\s*=\\s*")${oldName}(")`), `$1${newName}$2`);
+    if (next === src || parse5(next).app.name !== newName)
+      return false;
+    writeFileSync8(p, next);
+    return true;
+  } catch {
+    return false;
+  }
 }
 // ../core/dist/commands/reproduce.js
-import { mkdtempSync, writeFileSync as writeFileSync8 } from "node:fs";
+import { mkdtempSync, writeFileSync as writeFileSync9 } from "node:fs";
 import { tmpdir } from "node:os";
-import { join as join22 } from "node:path";
+import { join as join23 } from "node:path";
 var reproduceInputSchema = exports_external.object({
   app: exports_external.string().optional().describe("App name. Defaults to the [app].name in the current directory's percher.toml."),
   deployId: exports_external.string().describe("Deploy id (e.g. dep_abc123) to reproduce. Required — usually the failed deploy you want to debug.")
@@ -112617,9 +113190,9 @@ async function reproduce(ctx, input) {
     const envMap = await ctx.client.env.list(app.id);
     currentAppEnvKeys = Object.keys(envMap).sort();
   } catch {}
-  const tmpDir = mkdtempSync(join22(tmpdir(), `percher-reproduce-${input.deployId}-`));
-  const tarballPath = join22(tmpDir, "source.tar.gz");
-  writeFileSync8(tarballPath, bytes);
+  const tmpDir = mkdtempSync(join23(tmpdir(), `percher-reproduce-${input.deployId}-`));
+  const tarballPath = join23(tmpDir, "source.tar.gz");
+  writeFileSync9(tarballPath, bytes);
   let extracted = false;
   try {
     const proc = Bun.spawn(["tar", "-xzf", tarballPath, "-C", tmpDir], {
@@ -112857,7 +113430,7 @@ async function rollback(ctx, input, internals = {}) {
 }
 // ../core/dist/commands/sharing.js
 var ShareRoleSchema = exports_external.enum(["viewer", "admin"]);
-function resolveApp3(ctx, app) {
+function resolveApp4(ctx, app) {
   const name = app ?? readPercherTomlAppName(ctx.cwd);
   if (!name) {
     throw new PercherCoreError("No app specified and no percher.toml found", {
@@ -112885,19 +113458,19 @@ var shareRevokeInputSchema = exports_external.object({
   shareId: exports_external.string().min(1, "shareId is required")
 });
 async function shareList(ctx, input = {}) {
-  const appRef = resolveApp3(ctx, input.app);
+  const appRef = resolveApp4(ctx, input.app);
   return ctx.client.sharing.list(appRef);
 }
 async function shareInvite(ctx, input) {
-  const appRef = resolveApp3(ctx, input.app);
+  const appRef = resolveApp4(ctx, input.app);
   return ctx.client.sharing.create(appRef, { email: input.email, role: input.role });
 }
 async function shareSetRole(ctx, input) {
-  const appRef = resolveApp3(ctx, input.app);
+  const appRef = resolveApp4(ctx, input.app);
   return ctx.client.sharing.setRole(appRef, input.shareId, input.role);
 }
 async function shareRevoke(ctx, input) {
-  const appRef = resolveApp3(ctx, input.app);
+  const appRef = resolveApp4(ctx, input.app);
   await ctx.client.sharing.revoke(appRef, input.shareId);
 }
 var invitesListInputSchema = exports_external.object({});
@@ -112963,7 +113536,7 @@ function summarize2(verdict, health) {
   return "API responded but reported a non-ok status";
 }
 // ../core/dist/commands/transfers.js
-function resolveApp4(ctx, app) {
+function resolveApp5(ctx, app) {
   const name = app ?? readPercherTomlAppName(ctx.cwd);
   if (!name) {
     throw new PercherCoreError("No app specified and no percher.toml found", {
@@ -112985,15 +113558,15 @@ var transferListForAppInputSchema = exports_external.object({
   app: exports_external.string().optional()
 });
 async function transferInitiate(ctx, input) {
-  const appRef = resolveApp4(ctx, input.app);
+  const appRef = resolveApp5(ctx, input.app);
   return ctx.client.transfers.initiate(appRef, { email: input.email });
 }
 async function transferCancel(ctx, input) {
-  const appRef = resolveApp4(ctx, input.app);
+  const appRef = resolveApp5(ctx, input.app);
   await ctx.client.transfers.cancel(appRef, input.transferId);
 }
 async function transferListForApp(ctx, input = {}) {
-  const appRef = resolveApp4(ctx, input.app);
+  const appRef = resolveApp5(ctx, input.app);
   return ctx.client.transfers.listForApp(appRef);
 }
 var transfersIncomingInputSchema = exports_external.object({});
@@ -113059,6 +113632,7 @@ var SOURCE_EXTS2 = new Set([
 ]);
 var DEFAULT_MAX_FILE_BYTES = 1024 * 1024;
 // ../core/dist/plans.js
+var PB_INITIAL_FOOTPRINT_MB = 256;
 var PLAN_CATALOG = {
   free: {
     label: "Free",
@@ -113080,7 +113654,7 @@ var PLAN_CATALOG = {
       logRetentionDays: 1,
       buildLogRetentionDays: 3,
       cronJobs: 1,
-      storageMb: 500,
+      storageMb: PB_INITIAL_FOOTPRINT_MB,
       instances: 1,
       kvStorageMb: 10,
       uptimeIntervalSec: 0,
@@ -113112,7 +113686,7 @@ var PLAN_CATALOG = {
       logRetentionDays: 7,
       buildLogRetentionDays: 14,
       cronJobs: 3,
-      storageMb: 5000,
+      storageMb: PB_INITIAL_FOOTPRINT_MB,
       instances: 1,
       kvStorageMb: 50,
       uptimeIntervalSec: 300,
@@ -113144,7 +113718,7 @@ var PLAN_CATALOG = {
       logRetentionDays: 30,
       buildLogRetentionDays: 30,
       cronJobs: 10,
-      storageMb: 25000,
+      storageMb: PB_INITIAL_FOOTPRINT_MB,
       instances: 2,
       kvStorageMb: 200,
       uptimeIntervalSec: 60,
@@ -113176,7 +113750,7 @@ var PLAN_CATALOG = {
       logRetentionDays: 90,
       buildLogRetentionDays: 90,
       cronJobs: 25,
-      storageMb: 75000,
+      storageMb: PB_INITIAL_FOOTPRINT_MB,
       instances: 4,
       kvStorageMb: 1000,
       uptimeIntervalSec: 30,
@@ -113290,6 +113864,18 @@ function formatStatus(status2) {
     return import_picocolors.default.red(status2);
   return import_picocolors.default.yellow(status2);
 }
+function formatBytes(bytes) {
+  if (!Number.isFinite(bytes) || bytes < 0)
+    return "—";
+  const units = ["B", "KB", "MB", "GB", "TB"];
+  let n = bytes;
+  let i = 0;
+  while (n >= 1024 && i < units.length - 1) {
+    n /= 1024;
+    i += 1;
+  }
+  return `${i === 0 ? n : n.toFixed(1)} ${units[i]}`;
+}
 function firstNonFlagAfter(argv, from, valueFlags = new Set) {
   let i = from + 1;
   while (i < argv.length) {
@@ -113329,6 +113915,9 @@ async function runDeploysInspect(ctx, input) {
     await writeLine(ctx, `${import_picocolors.default.bold("Type:")}      ${deploy.type}`);
   }
   await writeLine(ctx, `${import_picocolors.default.bold("Created:")}   ${formatDeployTimestamp(deploy.createdAt)}`);
+  if (typeof deploy.imageSizeBytes === "number") {
+    await writeLine(ctx, `${import_picocolors.default.bold("Image:")}     ${formatBytes(deploy.imageSizeBytes)}`);
+  }
   if (deploy.url) {
     await writeLine(ctx, `${import_picocolors.default.bold("URL:")}       ${deploy.url}`);
   }
@@ -113789,6 +114378,9 @@ async function handlePublishResult(ctx, result, options = {}) {
           await writeLine(ctx, import_picocolors4.default.dim("  Build cache: miss (fresh build)"));
         }
       }
+      if (typeof result.deployment?.imageSizeBytes === "number") {
+        await writeLine(ctx, import_picocolors4.default.dim(`  Image size: ${formatBytes(result.deployment.imageSizeBytes)}`));
+      }
       if (result.replacedPreview) {
         await writeLine(ctx, import_picocolors4.default.dim("  (replaced previous preview — free plan keeps 1 preview slot per app)"));
       }
@@ -113876,6 +114468,67 @@ function registerAppsCommands(cli, ctx) {
     const timing = result.timing ? ` (${result.timing.totalSeconds.toFixed(0)}s)` : "";
     await writeLine(ctx, `${import_picocolors4.default.green("✓")} Redeployed to ${result.url}${timing}`);
   });
+  cli.command("wait-for-deploy <deployId>", "Wait for an in-flight deploy to finish").option("--app <name>", "App name (defaults to percher.toml app.name)").option("--timeout <seconds>", "Max seconds to wait (default: 600)").action(async (deployId, options) => {
+    const appName = options.app ?? readPercherTomlAppName(ctx.cwd);
+    if (!appName) {
+      await writeLine(ctx, `${import_picocolors4.default.red("✗")} No app specified — pass --app <name> or run from a directory with percher.toml.`);
+      throw new SilentExitError(1);
+    }
+    const timeoutSec = Number.parseInt(options.timeout ?? "600", 10);
+    if (!Number.isFinite(timeoutSec) || timeoutSec <= 0) {
+      await writeLine(ctx, `${import_picocolors4.default.red("✗")} --timeout must be a positive number of seconds.`);
+      throw new SilentExitError(1);
+    }
+    const deadline = Date.now() + timeoutSec * 1000;
+    let lastStatus = "";
+    for (;; ) {
+      const remainingMs = deadline - Date.now();
+      if (remainingMs <= 0) {
+        await writeLine(ctx, `${import_picocolors4.default.yellow("!")} Still running after the timeout — re-run: percher wait-for-deploy ${deployId} --app ${appName}`);
+        throw new SilentExitError(1);
+      }
+      let raceTimer;
+      let result = null;
+      const callController = new AbortController;
+      try {
+        result = await Promise.race([
+          waitForDeploy(ctx, {
+            app: appName,
+            deployId,
+            timeoutSeconds: Math.min(Math.ceil(remainingMs / 1000), 30)
+          }, { signal: callController.signal }),
+          new Promise((resolve7) => {
+            raceTimer = setTimeout(() => resolve7(null), remainingMs);
+          })
+        ]);
+      } finally {
+        clearTimeout(raceTimer);
+      }
+      if (result === null) {
+        callController.abort();
+        await writeLine(ctx, `${import_picocolors4.default.yellow("!")} Still running after the timeout — re-run: percher wait-for-deploy ${deployId} --app ${appName}`);
+        throw new SilentExitError(1);
+      }
+      if (result.deployment.status !== lastStatus) {
+        lastStatus = result.deployment.status;
+        await writeLine(ctx, import_picocolors4.default.dim(`${lastStatus}...`));
+      }
+      if (result.status === "live") {
+        await writeLine(ctx, `${import_picocolors4.default.green("✓")} ${result.summary}`);
+        return;
+      }
+      if (result.status === "failed" || result.status === "replaced") {
+        const mark = result.status === "failed" ? import_picocolors4.default.red("✗") : import_picocolors4.default.yellow("!");
+        await writeLine(ctx, `${mark} ${result.summary}`);
+        if (result.error?.suggestion) {
+          await writeLine(ctx, `  ${import_picocolors4.default.dim(result.error.suggestion)}`);
+        }
+        if (result.status === "failed")
+          throw new SilentExitError(1);
+        return;
+      }
+    }
+  });
   cli.command("push", "Package and deploy this project").option("--dry-run", "Show what would be deployed, don't upload").option("--force", "Skip size warnings").option("--preview", "Deploy as preview (does not replace the live version)").option("--no-cache", "Skip image-cache lookup and force a fresh build (use when you suspect cached image is stale)").action(async (options) => {
     const result = await push(ctx, {
       dryRun: options.dryRun,
@@ -113897,12 +114550,20 @@ function registerAppsCommands(cli, ctx) {
       } else if (status2 === "fresh") {
         await writeLine(ctx, import_picocolors4.default.dim("  Build cache: miss (fresh build)"));
       }
+      if (typeof result.deployment?.imageSizeBytes === "number") {
+        await writeLine(ctx, import_picocolors4.default.dim(`  Image size: ${formatBytes(result.deployment.imageSizeBytes)}`));
+      }
     }
   });
   cli.command("rename <name> [app]", "Rename an app (changes its subdomain)").action(async (name, app) => {
     const result = await rename(ctx, { app, name });
     await writeLine(ctx, `${import_picocolors4.default.green("✓")} Renamed to ${result.name} — now live at ${result.url}`);
     await writeLine(ctx, `  Previous name: ${result.previousName} (reserved for 60 days)`);
+    if (result.tomlUpdated) {
+      await writeLine(ctx, `  percher.toml updated: name = "${result.name}"`);
+    } else {
+      await writeLine(ctx, `  ${import_picocolors4.default.yellow("!")} Update percher.toml before the next publish: name = "${result.name}"`);
+    }
     await writeLine(ctx, `  ${import_picocolors4.default.dim(`Next rename available in ${result.cooldownDays} days`)}`);
   });
   cli.command("open [app]", "Open the app URL in your browser").action(async (app) => {
@@ -113964,6 +114625,17 @@ function registerAppsCommands(cli, ctx) {
     const result = await resume(ctx, { app });
     await writeLine(ctx, `${import_picocolors4.default.green("✓")} ${result.message}`);
   });
+  cli.command("cache <action> [app]", "Manage the app's build cache (reset)").action(async (action, app) => {
+    if (action !== "reset") {
+      throw new Error(`Unknown cache action "${action}". Use: percher cache reset [app]`);
+    }
+    const result = await cacheReset(ctx, { app });
+    await writeLine(ctx, `${import_picocolors4.default.green("✓")} ${result.message}`);
+  });
+  cli.command("cache reset [app]", "Reset the app's build cache (next deploy runs cold)").action(async (app) => {
+    const result = await cacheReset(ctx, { app });
+    await writeLine(ctx, `${import_picocolors4.default.green("✓")} ${result.message}`);
+  });
   cli.command("doctor [app]", "Check app health and connectivity").option("--json", "Output as JSON").action(async (app, options) => {
     const result = await doctor(ctx, { app, json: options.json });
     if (options.json) {
@@ -114244,24 +114916,60 @@ function registerDeploysCommands(cli, ctx, argv) {
       await writeLine(ctx, `${v.sha}  ${v.timestamp}  ${message}`);
     }
   });
-  cli.command("preview <action> [deployId]", "Manage preview deploys (promote | discard)").option("--app <name>", "App name (overrides percher.toml)").action(async (action, deployId, options) => {
+  cli.command("preview <action> [arg] [arg2]", "Preview deploys: promote <id> | discard <id> | branch set <branch> | branch unset | branch show").option("--app <name>", "App name (overrides percher.toml)").action(async (action, arg, arg2, options) => {
+    if (action === "branch") {
+      await runPreviewBranch(arg, arg2, options.app);
+      return;
+    }
     const appRef = options.app ?? readPercherTomlAppName(ctx.cwd);
-    if (!appRef)
+    if (!appRef) {
       throw new Error("App name required. Use --app or run from a project directory.");
+    }
     if (action === "promote") {
-      if (!deployId)
+      if (!arg)
         throw new Error("Deploy ID required. Usage: percher preview promote <id>");
-      const result = await ctx.client.apps.promotePreview(appRef, deployId);
+      const result = await ctx.client.apps.promotePreview(appRef, arg);
       await writeLine(ctx, `${import_picocolors7.default.green("✓")} Preview promoted to live. Status: ${result.status}`);
     } else if (action === "discard") {
-      if (!deployId)
+      if (!arg)
         throw new Error("Deploy ID required. Usage: percher preview discard <id>");
-      await ctx.client.apps.discardPreview(appRef, deployId);
+      await ctx.client.apps.discardPreview(appRef, arg);
       await writeLine(ctx, `${import_picocolors7.default.green("✓")} Preview discarded.`);
     } else {
-      throw new Error(`Unknown preview action "${action}". Use promote | discard.`);
+      throw new Error(`Unknown preview action "${action}". Use promote | discard | branch.`);
     }
   });
+  async function runPreviewBranch(sub, branch, app) {
+    if (sub === "set") {
+      if (!branch)
+        throw new Error("Branch required. Usage: percher preview branch set <branch>");
+      const r = await previewBranchSet(ctx, { app, branch });
+      await writeLine(ctx, `${import_picocolors7.default.green("✓")} Preview branch set to "${branch}".`);
+      if (r.previewUrl)
+        await writeLine(ctx, `  Your preview address: ${import_picocolors7.default.bold(r.previewUrl)}`);
+      await writeLine(ctx, r.status === "error" ? import_picocolors7.default.yellow("  ⚠  The initial deploy failed — push to the branch to retry.") : import_picocolors7.default.dim("  Building now — live within ~90s."));
+      return;
+    }
+    if (sub === "unset") {
+      await previewBranchUnset(ctx, { app });
+      await writeLine(ctx, `${import_picocolors7.default.green("✓")} Preview branch cleared.`);
+      return;
+    }
+    if (sub === "show" || sub === undefined) {
+      const s = await previewBranchShow(ctx, { app });
+      if (!s.previewBranch) {
+        await writeLine(ctx, "No preview branch set.");
+        await writeLine(ctx, import_picocolors7.default.dim("  Set one: percher preview branch set <branch>"));
+        return;
+      }
+      await writeLine(ctx, `Preview branch: ${import_picocolors7.default.bold(s.previewBranch)}`);
+      if (s.previewUrl)
+        await writeLine(ctx, `  Address: ${s.previewUrl}`);
+      await writeLine(ctx, `  Status:  ${s.status}`);
+      return;
+    }
+    throw new Error(`Unknown preview branch action "${sub}". Use set <branch> | unset | show.`);
+  }
 }
 
 // src/commands/env.ts
@@ -114318,10 +115026,24 @@ function registerEnvCommands(cli, ctx) {
   });
 }
 
-// src/commands/github.ts
+// src/commands/export.ts
 var import_picocolors9 = __toESM(require_picocolors(), 1);
+function registerExportCommands(cli, ctx) {
+  cli.command("export [app]", "Download an export bundle for an app (no secrets)").option("--out <path>", "Where to write the .tar.gz (defaults to ./{name}-{date}.tar.gz)").action(async (app, options) => {
+    const result = await exportApp(ctx, {
+      app,
+      out: options.out,
+      deliveryKind: "cli"
+    });
+    await writeLine(ctx, `${import_picocolors9.default.green("✓")} exported ${result.appName} → ${result.outPath} (${(result.bytes / 1024).toFixed(1)} KB)`);
+    await writeLine(ctx, import_picocolors9.default.dim("Env values are not included. To export encrypted env values, use the dashboard's Settings → Export and confirm your password."));
+  });
+}
+
+// src/commands/github.ts
+var import_picocolors10 = __toESM(require_picocolors(), 1);
 async function printWebhookInstructions(ctx, instructions, branch) {
-  await writeLine(ctx, import_picocolors9.default.bold("Add this webhook in GitHub to enable auto-deploy on push:"));
+  await writeLine(ctx, import_picocolors10.default.bold("Add this webhook in GitHub to enable auto-deploy on push:"));
   await writeLine(ctx, `  URL:   ${instructions.settingsUrl}`);
   await writeLine(ctx, "");
   await writeLine(ctx, "  Field            Value");
@@ -114331,9 +115053,9 @@ async function printWebhookInstructions(ctx, instructions, branch) {
   await writeLine(ctx, `  Secret           ${instructions.secret}`);
   await writeLine(ctx, "  Which events?    Just the push event");
   await writeLine(ctx, "");
-  await writeLine(ctx, import_picocolors9.default.yellow("  ⚠  Treat this secret like a password — save it now, it won't be shown again."));
+  await writeLine(ctx, import_picocolors10.default.yellow("  ⚠  Treat this secret like a password — save it now, it won't be shown again."));
   await writeLine(ctx, "");
-  await writeLine(ctx, import_picocolors9.default.dim(`After adding the webhook, every push to ${branch} will auto-deploy.`));
+  await writeLine(ctx, import_picocolors10.default.dim(`After adding the webhook, every push to ${branch} will auto-deploy.`));
 }
 function registerGithubCommands(cli, ctx) {
   cli.command("github [action] [repoUrl] [...rest]", "GitHub integration: connect | setup-webhook").option("--app <name>", "App name (overrides percher.toml)").option("--branch <branch>", "(connect only) Branch to track (default: main)").action(async (action, repoUrl, _rest, options) => {
@@ -114346,24 +115068,24 @@ function registerGithubCommands(cli, ctx) {
         repoUrl,
         branch: options.branch
       });
-      await writeLine(ctx, `${import_picocolors9.default.green("✓")} Connected to ${result.repoUrl} (branch: ${result.branch})`);
-      await writeLine(ctx, `${import_picocolors9.default.green("✓")} Deploy started: ${result.deployId}`);
+      await writeLine(ctx, `${import_picocolors10.default.green("✓")} Connected to ${result.repoUrl} (branch: ${result.branch})`);
+      await writeLine(ctx, `${import_picocolors10.default.green("✓")} Deploy started: ${result.deployId}`);
       await writeLine(ctx, "");
       if (result.webhookSetupFailed) {
-        await writeLine(ctx, import_picocolors9.default.yellow(`⚠  Webhook setup failed: ${result.webhookSetupError ?? "unknown error"}`));
-        await writeLine(ctx, import_picocolors9.default.yellow("   Auto-deploy will NOT work until you re-run webhook setup:"));
-        await writeLine(ctx, `   ${import_picocolors9.default.bold(`percher github setup-webhook${options.app ? ` --app ${options.app}` : ""}`)}`);
+        await writeLine(ctx, import_picocolors10.default.yellow(`⚠  Webhook setup failed: ${result.webhookSetupError ?? "unknown error"}`));
+        await writeLine(ctx, import_picocolors10.default.yellow("   Auto-deploy will NOT work until you re-run webhook setup:"));
+        await writeLine(ctx, `   ${import_picocolors10.default.bold(`percher github setup-webhook${options.app ? ` --app ${options.app}` : ""}`)}`);
         return;
       }
       if (result.webhookInstructions) {
         await printWebhookInstructions(ctx, result.webhookInstructions, result.branch);
       }
-      await writeLine(ctx, import_picocolors9.default.dim(`Track the initial deploy: percher deploys inspect ${result.deployId}`));
+      await writeLine(ctx, import_picocolors10.default.dim(`Track the initial deploy: percher deploys inspect ${result.deployId}`));
       return;
     }
     if (action === "setup-webhook") {
       const result = await githubSetupWebhook(ctx, { app: options.app });
-      await writeLine(ctx, `${import_picocolors9.default.green("✓")} Webhook regenerated for ${result.app}`);
+      await writeLine(ctx, `${import_picocolors10.default.green("✓")} Webhook regenerated for ${result.app}`);
       await writeLine(ctx, "");
       await printWebhookInstructions(ctx, result.webhookInstructions, result.branch);
       return;
@@ -114375,17 +115097,17 @@ function registerGithubCommands(cli, ctx) {
 }
 
 // src/commands/migrate.ts
-var import_picocolors10 = __toESM(require_picocolors(), 1);
+var import_picocolors11 = __toESM(require_picocolors(), 1);
 function registerMigrateCommands(cli, ctx) {
   cli.command("migrate-from-supabase", "Migrate a Supabase project to PocketBase (FUTURE9 Phase A read-only + Phase B preview writes)").option("--project <ref>", "Supabase project reference (the 20-char id from the project URL)").option("--token <token>", "Supabase personal access token (sbp_...). Read from SUPABASE_ACCESS_TOKEN if omitted.").option("--inspect-only", "Run schema introspection only (Phase A — read-only, no file writes)").option("--output-dir <dir>", "Where to write the Phase B preview files (default: ./migration-preview/)").option("--json", "Output the structured result as JSON").action(async (options) => {
     const projectRef = options.project;
     const token = options.token ?? ctx.env.SUPABASE_ACCESS_TOKEN;
     if (!projectRef) {
-      await writeLine(ctx, `${import_picocolors10.default.red("✗")} Missing --project. Pass your Supabase project ref (e.g. --project abcdefghijklmnopqrst).`);
+      await writeLine(ctx, `${import_picocolors11.default.red("✗")} Missing --project. Pass your Supabase project ref (e.g. --project abcdefghijklmnopqrst).`);
       throw new SilentExitError(1);
     }
     if (!token) {
-      await writeLine(ctx, `${import_picocolors10.default.red("✗")} Missing --token. Pass --token sbp_... or set SUPABASE_ACCESS_TOKEN. Generate one at https://supabase.com/dashboard/account/tokens`);
+      await writeLine(ctx, `${import_picocolors11.default.red("✗")} Missing --token. Pass --token sbp_... or set SUPABASE_ACCESS_TOKEN. Generate one at https://supabase.com/dashboard/account/tokens`);
       throw new SilentExitError(1);
     }
     if (options.inspectOnly) {
@@ -114420,103 +115142,103 @@ function registerMigrateCommands(cli, ctx) {
 async function renderInspectHuman(ctx, result) {
   if (result.status === "failed") {
     const err = result.error;
-    await writeLine(ctx, `${import_picocolors10.default.red("✗")} ${err?.title ?? "Inspection failed"}`);
+    await writeLine(ctx, `${import_picocolors11.default.red("✗")} ${err?.title ?? "Inspection failed"}`);
     if (err?.explanation)
       await writeLine(ctx, `  ${err.explanation}`);
     if (err?.suggestion)
-      await writeLine(ctx, import_picocolors10.default.dim(`  ${err.suggestion}`));
+      await writeLine(ctx, import_picocolors11.default.dim(`  ${err.suggestion}`));
     return;
   }
-  await writeLine(ctx, `${import_picocolors10.default.green("✓")} ${result.summary}`);
+  await writeLine(ctx, `${import_picocolors11.default.green("✓")} ${result.summary}`);
   await writeLine(ctx, "");
-  await writeLine(ctx, import_picocolors10.default.bold("Tables"));
+  await writeLine(ctx, import_picocolors11.default.bold("Tables"));
   if (result.tables.length === 0) {
-    await writeLine(ctx, import_picocolors10.default.dim("  (none in user schemas)"));
+    await writeLine(ctx, import_picocolors11.default.dim("  (none in user schemas)"));
   }
   for (const table of result.tables) {
     const pkCount = table.columns.filter((c) => c.isPrimaryKey).length;
     const fkCount = table.columns.filter((c) => c.foreignKey !== null).length;
     const policyCount = table.rlsPolicies.length;
     const rowEstimate = table.estimatedRowCount.toLocaleString();
-    await writeLine(ctx, `  ${import_picocolors10.default.cyan(`${table.schema}.${table.name}`)}  ${import_picocolors10.default.dim(`cols=${table.columns.length} pk=${pkCount} fk=${fkCount} rls=${policyCount} rows≈${rowEstimate}`)}`);
+    await writeLine(ctx, `  ${import_picocolors11.default.cyan(`${table.schema}.${table.name}`)}  ${import_picocolors11.default.dim(`cols=${table.columns.length} pk=${pkCount} fk=${fkCount} rls=${policyCount} rows≈${rowEstimate}`)}`);
   }
   if (result.storageBuckets.length > 0) {
     await writeLine(ctx, "");
-    await writeLine(ctx, import_picocolors10.default.bold("Storage buckets"));
+    await writeLine(ctx, import_picocolors11.default.bold("Storage buckets"));
     for (const bucket of result.storageBuckets) {
       const visibility = bucket.public ? "public" : "private";
-      await writeLine(ctx, `  ${import_picocolors10.default.cyan(bucket.name)} ${import_picocolors10.default.dim(`(${visibility})`)}`);
+      await writeLine(ctx, `  ${import_picocolors11.default.cyan(bucket.name)} ${import_picocolors11.default.dim(`(${visibility})`)}`);
     }
   }
   if (result.authUsersCount !== null) {
     await writeLine(ctx, "");
-    await writeLine(ctx, `${import_picocolors10.default.bold("Auth users")}: ${result.authUsersCount}`);
+    await writeLine(ctx, `${import_picocolors11.default.bold("Auth users")}: ${result.authUsersCount}`);
   }
   if (result.warnings.length > 0) {
     await writeLine(ctx, "");
-    await writeLine(ctx, import_picocolors10.default.bold(`Warnings (${result.warnings.length})`));
+    await writeLine(ctx, import_picocolors11.default.bold(`Warnings (${result.warnings.length})`));
     for (const warning of result.warnings) {
-      await writeLine(ctx, `  ${import_picocolors10.default.yellow("⚠")} ${warning}`);
+      await writeLine(ctx, `  ${import_picocolors11.default.yellow("⚠")} ${warning}`);
     }
   }
   await writeLine(ctx, "");
-  await writeLine(ctx, import_picocolors10.default.dim("--inspect-only is read-only. Drop the flag to also write the Phase B PocketBase-schema preview."));
+  await writeLine(ctx, import_picocolors11.default.dim("--inspect-only is read-only. Drop the flag to also write the Phase B PocketBase-schema preview."));
 }
 async function renderSchemaHuman(ctx, result) {
   if (result.status === "failed") {
     const err = result.error;
-    await writeLine(ctx, `${import_picocolors10.default.red("✗")} ${err?.title ?? "Migration preview failed"}`);
+    await writeLine(ctx, `${import_picocolors11.default.red("✗")} ${err?.title ?? "Migration preview failed"}`);
     if (err?.explanation)
       await writeLine(ctx, `  ${err.explanation}`);
     if (err?.suggestion)
-      await writeLine(ctx, import_picocolors10.default.dim(`  ${err.suggestion}`));
+      await writeLine(ctx, import_picocolors11.default.dim(`  ${err.suggestion}`));
     return;
   }
-  await writeLine(ctx, `${import_picocolors10.default.green("✓")} ${result.summary}`);
+  await writeLine(ctx, `${import_picocolors11.default.green("✓")} ${result.summary}`);
   await writeLine(ctx, "");
-  await writeLine(ctx, import_picocolors10.default.bold("Files written"));
+  await writeLine(ctx, import_picocolors11.default.bold("Files written"));
   for (const path of result.filesWritten) {
-    await writeLine(ctx, `  ${import_picocolors10.default.cyan(path)}`);
+    await writeLine(ctx, `  ${import_picocolors11.default.cyan(path)}`);
   }
   const preview = result.preview;
   if (!preview)
     return;
   if (preview.collections.length > 0) {
     await writeLine(ctx, "");
-    await writeLine(ctx, import_picocolors10.default.bold("Collections"));
+    await writeLine(ctx, import_picocolors11.default.bold("Collections"));
     for (const collection of preview.collections) {
       const fields = collection.schema.length;
       const relations = collection.schema.filter((f) => f.type === "relation").length;
-      await writeLine(ctx, `  ${import_picocolors10.default.cyan(collection.name)} ${import_picocolors10.default.dim(`← ${collection.sourceTable}  fields=${fields} relations=${relations}`)}`);
+      await writeLine(ctx, `  ${import_picocolors11.default.cyan(collection.name)} ${import_picocolors11.default.dim(`← ${collection.sourceTable}  fields=${fields} relations=${relations}`)}`);
     }
   }
   if (preview.warnings.length > 0) {
     await writeLine(ctx, "");
-    await writeLine(ctx, import_picocolors10.default.bold(`Warnings (${preview.warnings.length})`));
+    await writeLine(ctx, import_picocolors11.default.bold(`Warnings (${preview.warnings.length})`));
     for (const warning of preview.warnings.slice(0, 10)) {
-      await writeLine(ctx, `  ${import_picocolors10.default.yellow("⚠")} ${warning}`);
+      await writeLine(ctx, `  ${import_picocolors11.default.yellow("⚠")} ${warning}`);
     }
     if (preview.warnings.length > 10) {
-      await writeLine(ctx, import_picocolors10.default.dim(`  …and ${preview.warnings.length - 10} more — see MIGRATION_NOTES.md`));
+      await writeLine(ctx, import_picocolors11.default.dim(`  …and ${preview.warnings.length - 10} more — see MIGRATION_NOTES.md`));
     }
   }
   await writeLine(ctx, "");
-  await writeLine(ctx, import_picocolors10.default.dim("Phase B is a preview. Phase C (data import) and Phase D (client rewrite) ship in later releases. Review MIGRATION_NOTES.md before any import."));
+  await writeLine(ctx, import_picocolors11.default.dim("Phase B is a preview. Phase C (data import) and Phase D (client rewrite) ship in later releases. Review MIGRATION_NOTES.md before any import."));
 }
 
 // src/commands/sharing.ts
-var import_picocolors11 = __toESM(require_picocolors(), 1);
+var import_picocolors12 = __toESM(require_picocolors(), 1);
 function registerSharingCommands(cli, ctx) {
   cli.command("share [action] [arg] [valueOrRole]", "Per-app collaborator invites: list | invite <email> | role <shareId> <role> | revoke <shareId>").option("--app <name>", "App name (overrides percher.toml)").option("--role <role>", "(invite only) viewer | admin — viewer is read-only, admin can deploy + change config").action(async (action, arg, valueOrRole, options) => {
     if (action === "list" || action === undefined) {
       const rows = await shareList(ctx, { app: options.app });
       if (rows.length === 0) {
-        await writeLine(ctx, import_picocolors11.default.dim("No collaborators."));
+        await writeLine(ctx, import_picocolors12.default.dim("No collaborators."));
         return;
       }
       for (const r of rows) {
-        const state = r.accepted ? import_picocolors11.default.green("accepted") : import_picocolors11.default.yellow("pending");
-        const roleStr = r.role === "admin" ? import_picocolors11.default.cyan("admin") : import_picocolors11.default.dim("viewer");
+        const state = r.accepted ? import_picocolors12.default.green("accepted") : import_picocolors12.default.yellow("pending");
+        const roleStr = r.role === "admin" ? import_picocolors12.default.cyan("admin") : import_picocolors12.default.dim("viewer");
         await writeLine(ctx, `${r.id}  ${roleStr.padEnd(15)}  ${state.padEnd(15)}  ${r.email}`);
       }
       return;
@@ -114534,8 +115256,8 @@ function registerSharingCommands(cli, ctx) {
         email: arg,
         role: roleRaw
       });
-      await writeLine(ctx, `${import_picocolors11.default.green("✓")} Invited ${created.email} as ${created.role} (id ${created.id})`);
-      await writeLine(ctx, import_picocolors11.default.dim(`Pending until accepted — invite expires ${new Date(created.expiresAt).toLocaleDateString()}.`));
+      await writeLine(ctx, `${import_picocolors12.default.green("✓")} Invited ${created.email} as ${created.role} (id ${created.id})`);
+      await writeLine(ctx, import_picocolors12.default.dim(`Pending until accepted — invite expires ${new Date(created.expiresAt).toLocaleDateString()}.`));
       return;
     }
     if (action === "role") {
@@ -114550,7 +115272,7 @@ function registerSharingCommands(cli, ctx) {
         shareId: arg,
         role: valueOrRole
       });
-      await writeLine(ctx, `${import_picocolors11.default.green("✓")} ${updated.email} is now ${import_picocolors11.default.cyan(updated.role)}`);
+      await writeLine(ctx, `${import_picocolors12.default.green("✓")} ${updated.email} is now ${import_picocolors12.default.cyan(updated.role)}`);
       return;
     }
     if (action === "revoke") {
@@ -114558,7 +115280,7 @@ function registerSharingCommands(cli, ctx) {
         throw new Error("Usage: percher share revoke <shareId> [--app <name>]");
       }
       await shareRevoke(ctx, { app: options.app, shareId: arg });
-      await writeLine(ctx, `${import_picocolors11.default.green("✓")} Revoked share ${arg}`);
+      await writeLine(ctx, `${import_picocolors12.default.green("✓")} Revoked share ${arg}`);
       return;
     }
     throw new Error(`Unknown share action "${action}". Use list | invite <email> | role <shareId> <role> | revoke <shareId>.`);
@@ -114571,11 +115293,11 @@ function registerSharingCommands(cli, ctx) {
     if (action === undefined || action === "list") {
       const pending = await invitesList(ctx, {});
       if (pending.length === 0) {
-        await writeLine(ctx, import_picocolors11.default.dim("No pending invites."));
+        await writeLine(ctx, import_picocolors12.default.dim("No pending invites."));
         return;
       }
       for (const inv of pending) {
-        const roleStr = inv.role === "admin" ? import_picocolors11.default.cyan("admin") : import_picocolors11.default.dim("viewer");
+        const roleStr = inv.role === "admin" ? import_picocolors12.default.cyan("admin") : import_picocolors12.default.dim("viewer");
         await writeLine(ctx, `${inv.id}  ${roleStr.padEnd(15)}  ${inv.appName.padEnd(24)}  from ${inv.invitedBy}`);
       }
       return;
@@ -114586,10 +115308,10 @@ function registerSharingCommands(cli, ctx) {
       }
       const accepted = await invitesAccept(ctx, { shareId });
       if (accepted.alreadyAccepted) {
-        await writeLine(ctx, import_picocolors11.default.dim(`Invite ${shareId} was already accepted.`));
+        await writeLine(ctx, import_picocolors12.default.dim(`Invite ${shareId} was already accepted.`));
         return;
       }
-      await writeLine(ctx, `${import_picocolors11.default.green("✓")} Accepted — you now have ${import_picocolors11.default.cyan(accepted.role)} access to the shared app.`);
+      await writeLine(ctx, `${import_picocolors12.default.green("✓")} Accepted — you now have ${import_picocolors12.default.cyan(accepted.role)} access to the shared app.`);
       return;
     }
     if (action === "decline") {
@@ -114597,7 +115319,7 @@ function registerSharingCommands(cli, ctx) {
         throw new Error("Usage: percher invites decline <shareId>");
       }
       await invitesDecline(ctx, { shareId });
-      await writeLine(ctx, `${import_picocolors11.default.green("✓")} Declined invite ${shareId}.`);
+      await writeLine(ctx, `${import_picocolors12.default.green("✓")} Declined invite ${shareId}.`);
       return;
     }
     throw new Error(`Unknown invites action "${action}". Use list | accept <shareId> | decline <shareId>.`);
@@ -114608,7 +115330,7 @@ function registerSharingCommands(cli, ctx) {
 }
 
 // src/commands/status.ts
-var import_picocolors12 = __toESM(require_picocolors(), 1);
+var import_picocolors13 = __toESM(require_picocolors(), 1);
 function registerStatusCommands(cli, ctx) {
   cli.command("status", "Show Percher platform status (API + worker health)").option("--json", "Output JSON instead of formatted text").action(async (options) => {
     const result = await status(ctx, { json: Boolean(options.json) });
@@ -114624,44 +115346,44 @@ function registerStatusCommands(cli, ctx) {
   });
 }
 async function renderHumanStatus(ctx, result) {
-  const symbol2 = result.verdict === "operational" ? import_picocolors12.default.green("✓") : result.verdict === "worker-degraded" ? import_picocolors12.default.yellow("⚠") : import_picocolors12.default.red("✗");
+  const symbol2 = result.verdict === "operational" ? import_picocolors13.default.green("✓") : result.verdict === "worker-degraded" ? import_picocolors13.default.yellow("⚠") : import_picocolors13.default.red("✗");
   await writeLine(ctx, `${symbol2} ${result.summary}`);
   if (!result.health)
     return;
   const worker = result.health.worker;
   if (!worker) {
-    await writeLine(ctx, import_picocolors12.default.dim("  worker: not configured (local Docker socket)"));
+    await writeLine(ctx, import_picocolors13.default.dim("  worker: not configured (local Docker socket)"));
     return;
   }
   if (worker.health) {
     const ok = worker.health.ok;
-    const symbol3 = ok ? import_picocolors12.default.green("✓") : import_picocolors12.default.red("✗");
+    const symbol3 = ok ? import_picocolors13.default.green("✓") : import_picocolors13.default.red("✗");
     const lastOk = worker.health.lastOkAt ?? "never";
-    await writeLine(ctx, `  ${symbol3} worker health: ${ok ? "ok" : `failing (${worker.health.consecutiveErrs} consecutive)`}  last-ok=${import_picocolors12.default.dim(lastOk)}`);
+    await writeLine(ctx, `  ${symbol3} worker health: ${ok ? "ok" : `failing (${worker.health.consecutiveErrs} consecutive)`}  last-ok=${import_picocolors13.default.dim(lastOk)}`);
   }
   if (worker.circuitBreaker) {
     const breaker = worker.circuitBreaker;
-    const symbol3 = breaker.open ? import_picocolors12.default.red("✗") : import_picocolors12.default.green("✓");
+    const symbol3 = breaker.open ? import_picocolors13.default.red("✗") : import_picocolors13.default.green("✓");
     const state = breaker.open ? "open (deploys fail fast)" : "closed";
     await writeLine(ctx, `  ${symbol3} circuit breaker: ${state}  ${breaker.failuresInWindow}/${breaker.threshold} failures in last ${Math.round(breaker.windowMs / 1000)}s`);
   }
   if (result.health.version) {
-    await writeLine(ctx, import_picocolors12.default.dim(`  api version: ${result.health.version}`));
+    await writeLine(ctx, import_picocolors13.default.dim(`  api version: ${result.health.version}`));
   }
 }
 
 // src/commands/transfers.ts
-var import_picocolors13 = __toESM(require_picocolors(), 1);
+var import_picocolors14 = __toESM(require_picocolors(), 1);
 function registerTransfersCommands(cli, ctx) {
   cli.command("transfer [emailOrTransferId]", "Transfer ownership of an app: `transfer <email>` initiates; `transfer --cancel <id>` cancels; `transfer --list` shows history").option("--app <name>", "App name (overrides percher.toml)").option("--cancel", "Cancel a pending transfer by id (positional arg is the transferId)").option("--list", "List the transfer history for this app").action(async (emailOrTransferId, options) => {
     if (options.list) {
       const rows = await transferListForApp(ctx, { app: options.app });
       if (rows.length === 0) {
-        await writeLine(ctx, import_picocolors13.default.dim("No transfers for this app."));
+        await writeLine(ctx, import_picocolors14.default.dim("No transfers for this app."));
         return;
       }
       for (const r of rows) {
-        const status2 = r.status === "pending" ? import_picocolors13.default.yellow("pending") : r.status === "accepted" ? import_picocolors13.default.green("accepted") : import_picocolors13.default.dim(r.status);
+        const status2 = r.status === "pending" ? import_picocolors14.default.yellow("pending") : r.status === "accepted" ? import_picocolors14.default.green("accepted") : import_picocolors14.default.dim(r.status);
         await writeLine(ctx, `${r.id}  ${status2.padEnd(20)}  → ${r.toEmail}  (${r.createdAt})`);
       }
       return;
@@ -114674,7 +115396,7 @@ function registerTransfersCommands(cli, ctx) {
         app: options.app,
         transferId: emailOrTransferId
       });
-      await writeLine(ctx, `${import_picocolors13.default.green("✓")} Cancelled transfer ${emailOrTransferId}`);
+      await writeLine(ctx, `${import_picocolors14.default.green("✓")} Cancelled transfer ${emailOrTransferId}`);
       return;
     }
     if (!emailOrTransferId) {
@@ -114684,17 +115406,17 @@ function registerTransfersCommands(cli, ctx) {
       app: options.app,
       email: emailOrTransferId
     });
-    await writeLine(ctx, `${import_picocolors13.default.green("✓")} Transfer initiated to ${initiated.toEmail} (id ${initiated.id})`);
-    await writeLine(ctx, import_picocolors13.default.dim(`Expires ${new Date(initiated.expiresAt).toLocaleDateString()}. The recipient must accept via 'percher transfers accept ${initiated.id}'.`));
+    await writeLine(ctx, `${import_picocolors14.default.green("✓")} Transfer initiated to ${initiated.toEmail} (id ${initiated.id})`);
+    await writeLine(ctx, import_picocolors14.default.dim(`Expires ${new Date(initiated.expiresAt).toLocaleDateString()}. The recipient must accept via 'percher transfers accept ${initiated.id}'.`));
     if (initiated.notes) {
-      await writeLine(ctx, import_picocolors13.default.yellow(`  ⚠  ${initiated.notes}`));
+      await writeLine(ctx, import_picocolors14.default.yellow(`  ⚠  ${initiated.notes}`));
     }
   });
   cli.command("transfers [action] [transferId]", "Incoming ownership transfers: list (default) | accept <transferId> | decline <transferId>").action(async (action, transferId) => {
     if (action === undefined || action === "list") {
       const rows = await transfersIncoming(ctx, {});
       if (rows.length === 0) {
-        await writeLine(ctx, import_picocolors13.default.dim("No pending incoming transfers."));
+        await writeLine(ctx, import_picocolors14.default.dim("No pending incoming transfers."));
         return;
       }
       for (const r of rows) {
@@ -114707,7 +115429,7 @@ function registerTransfersCommands(cli, ctx) {
         throw new Error("Usage: percher transfers accept <transferId>");
       }
       const accepted = await transfersAccept(ctx, { transferId });
-      await writeLine(ctx, `${import_picocolors13.default.green("✓")} You now own ${import_picocolors13.default.cyan(accepted.appName)}. Run 'percher open --app ${accepted.appName}' to see it.`);
+      await writeLine(ctx, `${import_picocolors14.default.green("✓")} You now own ${import_picocolors14.default.cyan(accepted.appName)}. Run 'percher open --app ${accepted.appName}' to see it.`);
       return;
     }
     if (action === "decline") {
@@ -114715,7 +115437,7 @@ function registerTransfersCommands(cli, ctx) {
         throw new Error("Usage: percher transfers decline <transferId>");
       }
       await transfersDecline(ctx, { transferId });
-      await writeLine(ctx, `${import_picocolors13.default.green("✓")} Declined transfer ${transferId}.`);
+      await writeLine(ctx, `${import_picocolors14.default.green("✓")} Declined transfer ${transferId}.`);
       return;
     }
     throw new Error(`Unknown transfers action "${action}". Use list | accept <id> | decline <id>.`);
@@ -114784,40 +115506,52 @@ async function createCliContext() {
 }
 
 // src/output.ts
-var import_picocolors14 = __toESM(require_picocolors(), 1);
+var import_picocolors15 = __toESM(require_picocolors(), 1);
 async function renderError(stderr, error48) {
   const writer = stderr.getWriter();
   const encoder = new TextEncoder;
   const lines = [];
   if (error48 instanceof PercherTomlError) {
-    lines.push(`${import_picocolors14.default.red(`error (${error48.code}):`)} ${error48.message}`);
+    lines.push(`${import_picocolors15.default.red(`error (${error48.code}):`)} ${error48.message}`);
     if (error48.tomlLine !== undefined) {
-      lines.push(import_picocolors14.default.dim(`  at percher.toml line ${error48.tomlLine}`));
+      lines.push(import_picocolors15.default.dim(`  at percher.toml line ${error48.tomlLine}`));
     }
     for (const issue2 of error48.issues ?? []) {
-      lines.push(`${import_picocolors14.default.dim("  · ") + import_picocolors14.default.yellow(issue2.path.join("."))}: ${issue2.message}`);
+      lines.push(`${import_picocolors15.default.dim("  · ") + import_picocolors15.default.yellow(issue2.path.join("."))}: ${issue2.message}`);
+    }
+  } else if (error48 instanceof SunsetError) {
+    if (error48.gateCode === "platform_delete_gated") {
+      lines.push(`${import_picocolors15.default.yellow("Percher is shutting down — deletes are paused.")}`);
+      lines.push(error48.message);
+      lines.push(import_picocolors15.default.dim(`  To delete and permanently forfeit your export window, confirm with your password in the dashboard: ${error48.dashboardUrl}`));
+      lines.push(import_picocolors15.default.dim("  The CLI cannot perform this delete during sunset — it must go through the dashboard."));
+    } else {
+      lines.push(`${import_picocolors15.default.yellow("Percher is in read-only mode ahead of shutdown.")}`);
+      lines.push(error48.message);
+      lines.push(import_picocolors15.default.dim(`  Your apps keep running. Export them any time from the dashboard: ${error48.dashboardUrl}`));
     }
+    lines.push(import_picocolors15.default.dim(`  Final data deletion: ${error48.finalDeletionDate}`));
   } else if (error48 instanceof PercherApiError) {
     if (error48.status === 502 || error48.status === 503) {
-      lines.push(`${import_picocolors14.default.red("error:")} Percher API is temporarily unavailable (HTTP ${error48.status}). Try again in a few seconds.`);
+      lines.push(`${import_picocolors15.default.red("error:")} Percher API is temporarily unavailable (HTTP ${error48.status}). Try again in a few seconds.`);
     } else {
-      lines.push(`${import_picocolors14.default.red("error:")} ${error48.message}`);
-      lines.push(import_picocolors14.default.dim(`  ${error48.code} (HTTP ${error48.status})`));
+      lines.push(`${import_picocolors15.default.red("error:")} ${error48.message}`);
+      lines.push(import_picocolors15.default.dim(`  ${error48.code} (HTTP ${error48.status})`));
     }
     if (error48.requestId)
-      lines.push(import_picocolors14.default.dim(`  request: ${error48.requestId}`));
+      lines.push(import_picocolors15.default.dim(`  request: ${error48.requestId}`));
   } else if (error48 instanceof PercherCoreError) {
-    lines.push(`${import_picocolors14.default.red(`error (${error48.code}):`)} ${error48.message}`);
+    lines.push(`${import_picocolors15.default.red(`error (${error48.code}):`)} ${error48.message}`);
     if (error48.hint)
-      lines.push(import_picocolors14.default.dim(`  ${error48.hint}`));
+      lines.push(import_picocolors15.default.dim(`  ${error48.hint}`));
   } else if (error48 instanceof Error) {
-    lines.push(`${import_picocolors14.default.red("unexpected error:")} ${error48.message}`);
+    lines.push(`${import_picocolors15.default.red("unexpected error:")} ${error48.message}`);
     if (error48.stack)
-      lines.push(import_picocolors14.default.dim(error48.stack.split(`
+      lines.push(import_picocolors15.default.dim(error48.stack.split(`
 `).slice(1, 4).join(`
 `)));
   } else {
-    lines.push(`${import_picocolors14.default.red("unexpected error:")} ${String(error48)}`);
+    lines.push(`${import_picocolors15.default.red("unexpected error:")} ${String(error48)}`);
   }
   try {
     await writer.write(encoder.encode(`${lines.join(`
@@ -114830,7 +115564,7 @@ async function renderError(stderr, error48) {
 // package.json
 var package_default = {
   name: "percher",
-  version: "0.4.1",
+  version: "0.5.0",
   description: "CLI for the Percher hosting platform — publish apps with one command",
   type: "module",
   bin: {
@@ -114911,23 +115645,23 @@ async function showTelemetryNotice() {
   if (isDisabled())
     return;
   const { homedir: homedir2 } = await import("node:os");
-  const { existsSync: existsSync16, mkdirSync: mkdirSync6, writeFileSync: writeFileSync9 } = await import("node:fs");
-  const { join: join23 } = await import("node:path");
-  const configDir = join23(homedir2(), ".percher");
-  const markerFile = join23(configDir, ".telemetry-notice-shown");
-  if (existsSync16(markerFile))
+  const { existsSync: existsSync17, mkdirSync: mkdirSync6, writeFileSync: writeFileSync10 } = await import("node:fs");
+  const { join: join24 } = await import("node:path");
+  const configDir = join24(homedir2(), ".percher");
+  const markerFile = join24(configDir, ".telemetry-notice-shown");
+  if (existsSync17(markerFile))
     return;
   console.log("Percher sends non-account-linked usage stats (command, result, error type, OS, Bun version).");
   console.log(`Disable with PERCHER_NO_TELEMETRY=1
 `);
   try {
     mkdirSync6(configDir, { recursive: true });
-    writeFileSync9(markerFile, new Date().toISOString());
+    writeFileSync10(markerFile, new Date().toISOString());
   } catch {}
 }
 
 // src/version-check.ts
-var import_picocolors15 = __toESM(require_picocolors(), 1);
+var import_picocolors16 = __toESM(require_picocolors(), 1);
 async function checkForUpdates() {
   try {
     const res = await fetch("https://registry.npmjs.org/percher/latest", {
@@ -114938,9 +115672,9 @@ async function checkForUpdates() {
     const data2 = await res.json();
     const latest = data2.version;
     if (latest && latest !== VERSION) {
-      console.error(import_picocolors15.default.yellow(`
+      console.error(import_picocolors16.default.yellow(`
 Update available: ${VERSION} → ${latest}`));
-      console.error(import_picocolors15.default.dim(`Run: bunx percher@latest
+      console.error(import_picocolors16.default.dim(`Run: bunx percher@latest
 `));
     }
   } catch {}
@@ -114953,6 +115687,7 @@ async function run(argv, ctxOverride) {
   registerAppsCommands(cli, ctx);
   registerDeploysCommands(cli, ctx, argv);
   registerEnvCommands(cli, ctx);
+  registerExportCommands(cli, ctx);
   registerDataCommands(cli, ctx, argv);
   registerAuthCommands(cli, ctx);
   registerAccountCommands(cli, ctx);