percher 0.5.10 → 0.5.11

package/dist/bin/percher.js

@@ -90873,6 +90873,46 @@ var CAC = class extends EventTarget {
 };
 var cac = (name = "") => new CAC(name);
 
+// ../shared/dist/app-name.js
+var APP_NAME_RE = /^[a-z][a-z0-9-]{2,39}$/;
+// ../shared/dist/limits.js
+var MAX_TARBALL_BYTES = 500 * 1024 * 1024;
+var MAX_INLINE_PUBLISH_BYTES = 25 * 1024 * 1024;
+// ../shared/dist/logs.js
+var MAX_LOG_SEARCH_LENGTH = 256;
+// ../shared/dist/platform-env.js
+var PERCHER_INJECTED_ENV_KEYS = new Set([
+  "NODE_ENV",
+  "PORT",
+  "DATABASE_URL",
+  "POCKETBASE_URL",
+  "POCKETBASE_ADMIN_EMAIL",
+  "POCKETBASE_ADMIN_PASSWORD",
+  "PERCHER_APP_NAME",
+  "PERCHER_APP_URL",
+  "HTTP_PROXY",
+  "HTTPS_PROXY",
+  "NO_PROXY",
+  "NODE_USE_ENV_PROXY"
+]);
+var PROXY_LOWERCASE_ALIASES = new Set([
+  "http_proxy",
+  "https_proxy",
+  "no_proxy"
+]);
+// ../shared/dist/runtime.js
+var DEFAULT_NODE_VERSION_MAJOR = "24";
+var DEFAULT_NODE_VERSION_LABEL = `${DEFAULT_NODE_VERSION_MAJOR} LTS`;
+// ../shared/dist/timeouts.js
+var TIMEOUTS = {
+  workerBuildSubprocess: 10 * 60000,
+  apiToWorkerBuildFetch: 11 * 60000,
+  clientPublishPoll: 12 * 60000,
+  workerHealthcheck: 5000,
+  watchdogList: 15000,
+  mcpWaitDeployDefault: 30000,
+  mcpWaitDeployMax: 12 * 60000
+};
 // ../toml/dist/errors.js
 class PercherTomlError extends Error {
   code;
@@ -104440,45 +104480,6 @@ function date4(params) {
 
 // ../../node_modules/.bun/zod@4.3.6/node_modules/zod/v4/classic/external.js
 config(en_default());
-// ../shared/dist/app-name.js
-var APP_NAME_RE = /^[a-z][a-z0-9-]{2,39}$/;
-// ../shared/dist/limits.js
-var MAX_TARBALL_BYTES = 500 * 1024 * 1024;
-// ../shared/dist/logs.js
-var MAX_LOG_SEARCH_LENGTH = 256;
-// ../shared/dist/platform-env.js
-var PERCHER_INJECTED_ENV_KEYS = new Set([
-  "NODE_ENV",
-  "PORT",
-  "DATABASE_URL",
-  "POCKETBASE_URL",
-  "POCKETBASE_ADMIN_EMAIL",
-  "POCKETBASE_ADMIN_PASSWORD",
-  "PERCHER_APP_NAME",
-  "PERCHER_APP_URL",
-  "HTTP_PROXY",
-  "HTTPS_PROXY",
-  "NO_PROXY",
-  "NODE_USE_ENV_PROXY"
-]);
-var PROXY_LOWERCASE_ALIASES = new Set([
-  "http_proxy",
-  "https_proxy",
-  "no_proxy"
-]);
-// ../shared/dist/runtime.js
-var DEFAULT_NODE_VERSION_MAJOR = "24";
-var DEFAULT_NODE_VERSION_LABEL = `${DEFAULT_NODE_VERSION_MAJOR} LTS`;
-// ../shared/dist/timeouts.js
-var TIMEOUTS = {
-  workerBuildSubprocess: 10 * 60000,
-  apiToWorkerBuildFetch: 11 * 60000,
-  clientPublishPoll: 12 * 60000,
-  workerHealthcheck: 5000,
-  watchdogList: 15000,
-  mcpWaitDeployDefault: 30000,
-  mcpWaitDeployMax: 12 * 60000
-};
 // ../toml/dist/schema.js
 var appSchema = exports_external.object({
   name: exports_external.string().regex(APP_NAME_RE, "must be 3–40 chars, lowercase, start with a letter, [a-z0-9-] only"),
@@ -105963,6 +105964,12 @@ class AccountResource {
   revokeToken(id) {
     return this.http.delete(`/account/tokens/${encodeURIComponent(id)}`);
   }
+  listOAuthGrants() {
+    return this.http.get("/account/oauth-grants");
+  }
+  revokeOAuthGrant(grantId) {
+    return this.http.delete(`/account/oauth-grants/${encodeURIComponent(grantId)}`);
+  }
   exportData() {
     return this.http.get("/account/export");
   }
@@ -106058,12 +106065,32 @@ class AppsResource {
     }
     return this.http.postBinary(`/apps/${encodeURIComponent(id)}/deploys${qs ? `?${qs}` : ""}`, input.tarball, headers);
   }
+  publishInline(input) {
+    const params = new URLSearchParams;
+    params.set("name", input.name);
+    params.set("runtime", input.runtime);
+    if (input.framework)
+      params.set("framework", input.framework);
+    if (input.type === "preview")
+      params.set("type", "preview");
+    if (input.note)
+      params.set("note", input.note);
+    if (input.noCache)
+      params.set("noCache", "1");
+    const headers = {};
+    if (input.tarballHash)
+      headers["X-Tarball-Hash"] = input.tarballHash;
+    return this.http.postBinary(`/apps/publish?${params.toString()}`, input.tarball, headers);
+  }
   promotePreview(appRef, deployId) {
     return this.http.post(`/apps/${encodeURIComponent(appRef)}/deploys/${encodeURIComponent(deployId)}/promote`, {});
   }
   rerunDeploy(appRef, deployId) {
     return this.http.post(`/apps/${encodeURIComponent(appRef)}/deploys/${encodeURIComponent(deployId)}/rerun`, {});
   }
+  deployLatestCommit(appRef, input) {
+    return this.http.post(`/apps/${encodeURIComponent(appRef)}/deploys/from-latest-commit`, input ?? {});
+  }
   setCrashAnalysisEnabled(appRef, enabled) {
     return this.http.put(`/apps/${encodeURIComponent(appRef)}/crash-analysis`, {
       crashAnalysisEnabled: enabled
@@ -106702,9 +106729,10 @@ class PercherClient {
   invites;
   transfers;
   constructor(options = {}) {
-    const defaults = loadConfig();
-    this.apiUrl = options.apiUrl ?? defaults.apiUrl;
-    this.token = options.token !== undefined ? options.token : defaults.token;
+    const bothExplicit = options.apiUrl !== undefined && options.token !== undefined;
+    const defaults = bothExplicit ? undefined : loadConfig();
+    this.apiUrl = options.apiUrl ?? defaults?.apiUrl ?? "";
+    this.token = options.token !== undefined ? options.token : defaults?.token ?? null;
     this.sessionId = options.sessionId;
     const http = new Http({
       apiUrl: this.apiUrl,
@@ -106988,427 +107016,278 @@ async function deleteApp(ctx, input) {
   }
   await ctx.client.apps.delete(name);
 }
-// ../core/dist/commands/deploys.js
-var deploysListInputSchema = exports_external.object({
-  app: exports_external.string().optional(),
-  limit: exports_external.number().int().positive().max(100).optional()
-});
-var deploysInspectInputSchema = exports_external.object({
-  app: exports_external.string().optional(),
-  id: exports_external.string().optional(),
-  latestFailed: exports_external.boolean().optional()
-}).superRefine((val, ctx) => {
-  if (!val.id && !val.latestFailed) {
-    ctx.addIssue({
-      code: exports_external.ZodIssueCode.custom,
-      message: "either `id` or `latestFailed: true` must be provided"
-    });
-  }
-});
-function resolveAppName(ctx, app) {
-  const name = app ?? readPercherTomlAppName(ctx.cwd);
-  if (!name) {
-    throw new PercherCoreError("No app specified and no percher.toml found", {
-      code: "deploys.no-app",
-      hint: "Pass --app <name> or run from a directory with percher.toml."
-    });
+// ../core/dist/poll-deployment.js
+async function pollDeployment(opts) {
+  const terminal = opts.terminal ?? ["live", "failed"];
+  const intervalMs = opts.intervalMs ?? 2000;
+  const timeoutMs = opts.timeoutMs ?? TIMEOUTS.clientPublishPoll;
+  const maxRetries = opts.maxRetries ?? 5;
+  let deployment = opts.initial;
+  const startedAt = Date.now();
+  const seenEventIds = new Set;
+  if (opts.onEvent) {
+    await drainNewEvents(opts, deployment.id, seenEventIds);
   }
-  return name;
-}
-async function deploysList(ctx, input = {}) {
-  const name = resolveAppName(ctx, input.app);
-  return ctx.client.apps.listDeploys(name, { limit: input.limit ?? 10 });
-}
-async function deploysInspect(ctx, input) {
-  const name = resolveAppName(ctx, input.app);
-  let deployId = input.id;
-  if (!deployId && input.latestFailed) {
-    const recent = await ctx.client.apps.listDeploys(name, { limit: 25 });
-    const failed = recent.find((d) => d.status === "failed");
-    if (!failed) {
-      throw new PercherCoreError(`No failed deploys found for "${name}"`, {
-        code: "deploys.no-failed",
-        hint: "Try `percher deploys` to list recent deploys, or omit --latest-failed."
-      });
+  while (!terminal.includes(deployment.status)) {
+    if (Date.now() - startedAt > timeoutMs) {
+      opts.onTimeout(deployment);
     }
-    deployId = failed.id;
-  }
-  if (!deployId) {
-    throw new PercherCoreError("Deploy ID is required", {
-      code: "deploys.no-id"
-    });
-  }
-  const deploy = await ctx.client.apps.getDeployment(name, deployId);
-  let buildLog = null;
-  try {
-    const log = await ctx.client.apps.getBuildLog(name, deployId);
-    buildLog = log.length > 0 ? log : null;
-  } catch (err) {
-    if (err instanceof PercherApiError && err.status === 404) {
-      buildLog = null;
-    } else {
-      throw err;
+    opts.onTick?.(deployment);
+    await new Promise((r) => setTimeout(r, intervalMs));
+    let attempt = 0;
+    let polled = false;
+    while (!polled) {
+      try {
+        deployment = await opts.ctx.client.apps.getDeployment(opts.appId, deployment.id);
+        polled = true;
+      } catch (err) {
+        attempt++;
+        const isNetwork = isTransientNetworkError(err);
+        if (!isNetwork || attempt >= maxRetries) {
+          if (isNetwork) {
+            const msg = err.message ?? String(err);
+            throw new Error(`${msg}
+
+The deploy may already be live — your network connection dropped mid-poll. Check with: percher deploys list ${opts.appName}`, { cause: err });
+          }
+          throw err;
+        }
+        const backoff = (opts.backoffMs ?? ((n) => 1000 * 2 ** (n - 1)))(attempt);
+        await new Promise((r) => setTimeout(r, backoff));
+      }
+    }
+    if (opts.onEvent) {
+      await drainNewEvents(opts, deployment.id, seenEventIds);
     }
   }
-  return { deploy, buildLog };
+  return deployment;
 }
-// ../core/dist/commands/dev.js
-import { existsSync as existsSync8 } from "node:fs";
-import { join as join11 } from "node:path";
-
-// ../core/dist/tarball.js
-var import_ignore = __toESM(require_ignore(), 1);
-import { createHash as createHash2 } from "node:crypto";
-import { existsSync as existsSync6, readdirSync as readdirSync2, readFileSync as readFileSync6, statSync as statSync2 } from "node:fs";
-import { join as join9, relative as relative3, sep as sep2 } from "node:path";
-import { Readable } from "node:stream";
-import { createGzip } from "node:zlib";
-
-// ../../node_modules/.bun/tar-stream@3.1.8/node_modules/tar-stream/index.js
-var $extract = require_extract();
-var $pack = require_pack();
-
-// ../core/dist/tarball.js
-var DEFAULT_IGNORE = [
-  "node_modules",
-  ".git",
-  "dist",
-  ".next",
-  ".svelte-kit",
-  "build",
-  "coverage",
-  ".env",
-  ".env.*",
-  ".bun",
-  "*.log",
-  ".DS_Store"
-];
-function* walk(dir, baseDir, ig) {
-  const entries = readdirSync2(dir);
-  for (const name of entries) {
-    const full = join9(dir, name);
-    const rel = relative3(baseDir, full).split(sep2).join("/");
-    if (ig.ignores(rel))
-      continue;
-    const stats = statSync2(full);
-    if (stats.isDirectory()) {
-      if (ig.ignores(`${rel}/`))
+async function drainNewEvents(opts, deployId, seenEventIds) {
+  if (!opts.onEvent)
+    return;
+  try {
+    const { events } = await opts.ctx.client.apps.getDeployEvents(opts.appId, deployId);
+    for (const event of events) {
+      if (seenEventIds.has(event.id))
         continue;
-      yield* walk(full, baseDir, ig);
-    } else if (stats.isFile()) {
-      yield rel;
+      seenEventIds.add(event.id);
+      opts.onEvent(event);
     }
-  }
+  } catch {}
 }
-async function createTarball(options) {
-  const ig = import_ignore.default();
-  ig.add(DEFAULT_IGNORE);
-  const gitignorePath = join9(options.cwd, ".gitignore");
-  if (existsSync6(gitignorePath)) {
-    ig.add(readFileSync6(gitignorePath, "utf8"));
-  }
-  if (options.extraIgnore)
-    ig.add(options.extraIgnore);
-  const fileBuffers = [];
-  for (const rel of walk(options.cwd, options.cwd, ig)) {
-    const data2 = readFileSync6(join9(options.cwd, rel));
-    fileBuffers.push({ path: rel, size: data2.length, data: data2 });
-  }
-  fileBuffers.sort((a, b) => a.path < b.path ? -1 : a.path > b.path ? 1 : 0);
-  const totalBytes = fileBuffers.reduce((sum, f) => sum + f.size, 0);
-  const contentHasher = createHash2("sha256");
-  for (const f of fileBuffers) {
-    contentHasher.update(`PATH:${f.path.length}:${f.path}
-`);
-    contentHasher.update(`SIZE:${f.size}
-`);
-    contentHasher.update(f.data);
-    contentHasher.update(`
-`);
-  }
-  const contentHash = contentHasher.digest("hex");
-  const pack = $pack();
-  (async () => {
-    for (const file2 of fileBuffers) {
-      await new Promise((resolve7, reject) => {
-        pack.entry({ name: file2.path, size: file2.data.length }, file2.data, (err) => err ? reject(err) : resolve7());
-      });
-    }
-    pack.finalize();
-  })();
-  const gzip = createGzip();
-  const nodeStream = pack.pipe(gzip);
-  const webStream = Readable.toWeb(nodeStream);
-  const topFiles = [...fileBuffers].sort((a, b) => b.size - a.size).slice(0, 5).map((f) => ({ path: f.path, size: f.size }));
+
+// ../core/dist/recovery.js
+function recoveryNone(opts = {}) {
   return {
-    stream: webStream,
-    bytes: totalBytes,
-    fileCount: fileBuffers.length,
-    topFiles,
-    contentHash
+    retryable: false,
+    nextAction: "none",
+    reasonCode: opts.reasonCode ?? "none",
+    ...opts.url !== undefined ? { url: opts.url } : {}
   };
 }
-
-// ../core/dist/watcher.js
-var import_ignore2 = __toESM(require_ignore(), 1);
-import { existsSync as existsSync7, readFileSync as readFileSync7, watch } from "node:fs";
-import { join as join10, sep as sep3 } from "node:path";
-var DEFAULT_IGNORE2 = [
-  "node_modules",
-  ".git",
-  "dist",
-  ".next",
-  ".svelte-kit",
-  "build",
-  "coverage",
-  ".env",
-  ".env.*",
-  ".bun",
-  "*.log",
-  ".DS_Store",
-  "__pycache__"
-];
-function createWatcher(options) {
-  const debounceMs = options.debounceMs ?? 500;
-  const ig = import_ignore2.default();
-  ig.add(DEFAULT_IGNORE2);
-  const gitignorePath = join10(options.cwd, ".gitignore");
-  if (existsSync7(gitignorePath)) {
-    ig.add(readFileSync7(gitignorePath, "utf8"));
-  }
-  if (options.extraIgnore)
-    ig.add(options.extraIgnore);
-  let timer = null;
-  let pending = new Set;
-  const fsWatcher = watch(options.cwd, { recursive: true }, (_event, filename) => {
-    if (!filename)
-      return;
-    const rel = filename.split(sep3).join("/");
-    if (ig.ignores(rel))
-      return;
-    pending.add(rel);
-    if (timer)
-      clearTimeout(timer);
-    timer = setTimeout(() => {
-      const files = [...pending];
-      pending = new Set;
-      timer = null;
-      if (files.length > 0) {
-        options.onChange(files);
-      }
-    }, debounceMs);
-  });
+function recoveryLogin(opts = {}) {
   return {
-    close() {
-      if (timer)
-        clearTimeout(timer);
-      fsWatcher.close();
-    }
+    retryable: false,
+    nextAction: "open_login",
+    suggestedTool: "percher_login",
+    args: {},
+    reasonCode: opts.reasonCode ?? "auth_required"
   };
 }
-
-// ../core/dist/commands/dev.js
-var devInputSchema = exports_external.object({
-  app: exports_external.string().optional()
-});
-async function loadConfig2(ctx, appOverride) {
-  const tomlPath = join11(ctx.cwd, "percher.toml");
-  if (!existsSync8(tomlPath)) {
-    throw new PercherCoreError("No percher.toml found. Run: percher init", {
-      code: "dev.no-app",
-      hint: "Create a percher.toml first with `percher init`."
-    });
-  }
-  const config2 = await parseFile(tomlPath);
-  if (appOverride)
-    return { ...config2, app: { ...config2.app, name: appOverride } };
-  return config2;
+function recoveryWait(opts) {
+  return {
+    retryable: false,
+    nextAction: "wait_deploy",
+    suggestedTool: "percher_wait_for_deploy",
+    args: {
+      app: opts.app,
+      deployId: opts.deployId,
+      timeoutSeconds: opts.timeoutSeconds ?? TIMEOUTS.mcpWaitDeployDefault / 1000
+    },
+    reasonCode: opts.reasonCode
+  };
 }
-async function ensureApp(ctx, config2) {
-  try {
-    return await ctx.client.apps.get(config2.app.name);
-  } catch (err) {
-    if (err.code === "APP_NOT_FOUND") {
-      return ctx.client.apps.create({
-        name: config2.app.name,
-        runtime: config2.app.runtime,
-        framework: config2.app.framework
-      });
-    }
-    throw err;
-  }
+function recoveryDoctor(opts) {
+  const args = {};
+  if (opts.app !== undefined)
+    args.app = opts.app;
+  if (opts.deployId !== undefined)
+    args.deployId = opts.deployId;
+  if (opts.mode !== undefined)
+    args.mode = opts.mode;
+  return {
+    retryable: false,
+    nextAction: "run_doctor",
+    suggestedTool: "percher_doctor",
+    args,
+    reasonCode: opts.reasonCode,
+    ...opts.alternativeActions !== undefined ? { alternativeActions: opts.alternativeActions } : {}
+  };
 }
-async function doPush(ctx, config2, callbacks) {
-  const tarball = await createTarball({ cwd: ctx.cwd, config: config2 });
-  const app = await ensureApp(ctx, config2);
-  await callbacks.writeLine(`Pushing ${tarball.fileCount} files (${(tarball.bytes / 1024).toFixed(0)} KB)...`);
-  const deployResponse = await ctx.client.apps.deploy(app.id, { tarball: tarball.stream });
-  if (deployResponse.status === "already_in_progress") {
-    const active = deployResponse;
-    await callbacks.writeLine(`  Skipped — deploy already in progress (${active.deployId}, ${active.deployStatus}).`);
-    return { success: false, appId: app.id };
-  }
-  let deployment = deployResponse;
-  const startedAt = Date.now();
-  const timeoutMs = TIMEOUTS.clientPublishPoll;
-  const pollInterval = 2000;
-  let lastStatus = "";
-  while (deployment.status !== "live" && deployment.status !== "failed") {
-    if (Date.now() - startedAt > timeoutMs) {
-      await callbacks.writeLine("Deploy timed out");
-      return { success: false, appId: app.id };
-    }
-    if (callbacks.signal.aborted)
-      return { success: false, appId: app.id };
-    if (deployment.status !== lastStatus) {
-      lastStatus = deployment.status;
-      await callbacks.writeLine(`  ${deployment.status}...`);
-    }
-    await new Promise((r) => setTimeout(r, pollInterval));
-    deployment = await ctx.client.apps.getDeployment(app.id, deployment.id);
-  }
-  if (deployment.status === "failed") {
-    try {
-      const insp = await ctx.client.apps.getDeployment(app.id, deployment.id);
-      if (insp.errorMessage) {
-        await callbacks.writeLine("Deploy failed:");
-        for (const line of insp.errorMessage.split(`
-`).slice(0, 30)) {
-          await callbacks.writeLine(`  ${line}`);
-        }
-      } else {
-        await callbacks.writeLine("Deploy failed.");
-      }
-    } catch {
-      await callbacks.writeLine("Deploy failed.");
-    }
-    return { success: false, appId: app.id };
-  }
-  await callbacks.writeLine(`Live at ${deployment.url ?? ""}`);
-  return { success: true, appId: app.id };
+function recoveryEnv(opts) {
+  const args = {};
+  if (opts.app !== undefined)
+    args.app = opts.app;
+  if (opts.keys.length > 0)
+    args.keys = opts.keys;
+  return {
+    retryable: false,
+    nextAction: "set_env_vars",
+    suggestedTool: "percher_env_set",
+    args,
+    reasonCode: opts.reasonCode ?? "missing_env"
+  };
 }
-function formatLogLine(l) {
-  const level = l.level.toUpperCase().padEnd(5);
-  const src = l.source === "runtime" ? "" : `[${l.source}] `;
-  return `  ${src}${level} ${l.message}`;
+function recoveryFixConfig(opts) {
+  return {
+    retryable: false,
+    nextAction: "fix_config",
+    problems: opts.problems,
+    reasonCode: opts.reasonCode ?? "config_invalid"
+  };
 }
-async function streamLogs(ctx, appId, callbacks, signal) {
-  try {
-    for await (const line of ctx.client.logs.stream(appId, { signal })) {
-      if (signal.aborted)
-        return;
-      await callbacks.writeLine(formatLogLine(line));
-    }
-  } catch (err) {
-    if (signal.aborted)
-      return;
-    await callbacks.writeLine(`Log stream error: ${err.message}`);
-  }
+function recoveryFixProblems(opts) {
+  return {
+    retryable: false,
+    nextAction: "fix_problems",
+    problems: opts.problems,
+    reasonCode: opts.reasonCode ?? "build_failed",
+    ...opts.alternativeActions !== undefined ? { alternativeActions: opts.alternativeActions } : {}
+  };
 }
-async function dev(ctx, input, callbacks) {
-  const config2 = await loadConfig2(ctx, input.app);
-  const app = await ensureApp(ctx, config2);
-  await callbacks.writeLine(`App: ${app.url}`);
-  await callbacks.writeLine("Watching for changes (logs streaming below)...");
-  await callbacks.writeLine("");
-  const logStream = { ctrl: null };
-  function startLogStream(appId) {
-    logStream.ctrl?.abort();
-    logStream.ctrl = new AbortController;
-    const linkedSignal = logStream.ctrl.signal;
-    streamLogs(ctx, appId, callbacks, linkedSignal);
+function recoveryRetry(opts) {
+  return {
+    retryable: true,
+    nextAction: "retry",
+    suggestedTool: opts.suggestedTool,
+    args: opts.args,
+    reasonCode: opts.reasonCode
+  };
+}
+function recoveryAsk(opts) {
+  if (!opts.prompt || opts.prompt.trim().length === 0) {
+    throw new Error("recoveryAsk requires a non-empty prompt");
   }
-  startLogStream(app.id);
-  let busy = false;
-  let queued = null;
-  async function handleChange(files) {
-    if (busy) {
-      queued = files;
-      return;
-    }
-    busy = true;
-    try {
-      const shortList = files.length <= 3 ? files.join(", ") : `${files.slice(0, 3).join(", ")} +${files.length - 3} more`;
-      await callbacks.writeLine(`Change detected: ${shortList}`);
-      logStream.ctrl?.abort();
-      const shouldPush = await callbacks.onFilesChanged(files);
-      if (shouldPush) {
-        try {
-          const freshConfig = await loadConfig2(ctx, input.app);
-          const result = await doPush(ctx, freshConfig, callbacks);
-          if (result.success) {
-            startLogStream(result.appId);
-          } else {
-            startLogStream(app.id);
+  return {
+    retryable: opts.retryable ?? false,
+    nextAction: "ask_user",
+    prompt: opts.prompt,
+    ...opts.options !== undefined ? { options: opts.options } : {},
+    reasonCode: opts.reasonCode
+  };
+}
+function recoveryInspectBuildLog(opts) {
+  const args = opts.deployId ? { id: opts.deployId, app: opts.app } : { latestFailed: true, app: opts.app };
+  return {
+    retryable: false,
+    nextAction: "inspect_build_log",
+    suggestedTool: "percher_deploys_inspect",
+    args,
+    reasonCode: opts.reasonCode ?? "build_failed",
+    ...opts.alternativeActions !== undefined ? { alternativeActions: opts.alternativeActions } : {}
+  };
+}
+var RECOVERY_NONE = recoveryNone();
+var RECOVERY_NEEDS_LOGIN = recoveryLogin();
+function buildProblemToRecoveryProblem(p) {
+  const file2 = p.file ?? "";
+  const message = p.hint && p.hint.length > 0 ? `${p.message}
+Hint: ${p.hint}` : p.message;
+  return {
+    file: file2,
+    ...typeof p.line === "number" ? { line: p.line } : {},
+    ...typeof p.column === "number" ? { column: p.column } : {},
+    message
+  };
+}
+function recoveryFromErrorClass(errorClass, failure = {}) {
+  switch (errorClass) {
+    case "missing_env":
+      return recoveryEnv({
+        keys: failure.missingEnvVars ?? [],
+        reasonCode: "missing_env"
+      });
+    case "infra_unavailable":
+      return recoveryRetry({
+        suggestedTool: "percher_publish",
+        args: failure.publishInput ?? {},
+        reasonCode: "infra_unavailable"
+      });
+    case "platform_at_capacity":
+      return recoveryRetry({
+        suggestedTool: "percher_publish",
+        args: failure.publishInput ?? {},
+        reasonCode: "infra_transient"
+      });
+    case "config_invalid":
+      return recoveryFixConfig({
+        problems: [
+          {
+            file: "percher.toml",
+            message: "percher.toml failed validation — fix the file and re-run."
           }
-        } catch (err) {
-          await callbacks.writeLine(`Push error: ${err.message}`);
-          startLogStream(app.id);
-        }
-      } else {
-        startLogStream(app.id);
+        ],
+        reasonCode: "config_invalid"
+      });
+    case "build_failed":
+    case "missing_dependency":
+    case "health_check_timeout":
+    case "port_mismatch":
+    case "permission_denied":
+    case "runtime_crash":
+    case "oom_killed": {
+      const fileProblems = (failure.problems ?? []).filter((p) => p.file);
+      const reproduceAlt = failure.deployId ? {
+        action: "reproduce_locally",
+        suggestedTool: "percher_reproduce",
+        args: { deployId: failure.deployId, app: failure.appName },
+        when: "after the primary path didn't surface a clear fix and the user has nixpacks installed locally"
+      } : undefined;
+      if (fileProblems.length > 0) {
+        return recoveryFixProblems({
+          problems: fileProblems.map(buildProblemToRecoveryProblem),
+          reasonCode: "build_failed",
+          ...reproduceAlt ? {
+            alternativeActions: [
+              {
+                ...reproduceAlt,
+                when: "after fixing the file-located problems didn't make the build pass and the user has nixpacks installed locally"
+              }
+            ]
+          } : {}
+        });
       }
-    } finally {
-      busy = false;
-      if (queued) {
-        const next = queued;
-        queued = null;
-        await handleChange(next);
+      const inspectAlt = {
+        action: "inspect_build_log",
+        suggestedTool: "percher_deploys_inspect",
+        args: failure.deployId ? { id: failure.deployId, app: failure.appName } : { latestFailed: true, app: failure.appName },
+        when: "after percher_doctor's recovery didn't yield a fix and you want to read the raw build log directly"
+      };
+      const alternativeActions = [inspectAlt];
+      if (reproduceAlt) {
+        alternativeActions.push({
+          ...reproduceAlt,
+          when: "after percher_doctor + percher_deploys_inspect didn't surface a clear fix and the user has nixpacks installed locally"
+        });
       }
+      return recoveryDoctor({
+        app: failure.appName,
+        deployId: failure.deployId,
+        mode: "deploy",
+        reasonCode: "build_failed",
+        alternativeActions
+      });
     }
+    default:
+      return recoveryAsk({
+        prompt: "Unexpected failure — Percher couldn't classify this error. Try `percher doctor` for diagnostics, or surface the error to the user.",
+        reasonCode: "unknown"
+      });
   }
-  const devConfig = config2.dev;
-  const watcher = createWatcher({
-    cwd: ctx.cwd,
-    extraIgnore: devConfig?.ignore,
-    debounceMs: devConfig?.debounce,
-    onChange(files) {
-      handleChange(files);
-    }
-  });
-  try {
-    await new Promise((resolve7) => {
-      if (callbacks.signal.aborted) {
-        resolve7();
-        return;
-      }
-      callbacks.signal.addEventListener("abort", () => resolve7(), { once: true });
-    });
-  } finally {
-    logStream.ctrl?.abort();
-    watcher.close();
-  }
-}
-// ../core/dist/commands/diagnose.js
-var diagnoseInputSchema = exports_external.object({
-  app: exports_external.string().optional(),
-  logLines: exports_external.number().int().min(0).max(200).optional(),
-  recencyHours: exports_external.number().positive().max(24 * 30).optional()
-});
-// ../core/dist/commands/diff.js
-var diffInputSchema = exports_external.object({
-  app: exports_external.string().optional(),
-  base: exports_external.string().optional(),
-  head: exports_external.string().optional(),
-  patch: exports_external.boolean().optional()
-});
-async function diff(ctx, input = {}) {
-  const name = input.app ?? readPercherTomlAppName(ctx.cwd);
-  if (!name) {
-    throw new PercherCoreError("No app specified and no percher.toml found", {
-      code: "diff.no-app",
-      hint: "Pass --app <name> or run from a directory with percher.toml."
-    });
-  }
-  return ctx.client.apps.getChanges(name, {
-    base: input.base,
-    head: input.head,
-    patch: input.patch
-  });
 }
-// ../core/dist/commands/doctor.js
-import { existsSync as existsSync9 } from "node:fs";
-import { join as join13 } from "node:path";
+
+// ../core/dist/commands/publish-failure.js
+import { join as join9 } from "node:path";
 
 // ../core/dist/error-classifier.js
 function extractEnvVarsFromLog(combined) {
@@ -107742,391 +107621,650 @@ ${buildLog ?? ""}`;
   return null;
 }
 
-// ../core/dist/recovery.js
-function recoveryNone(opts = {}) {
-  return {
-    retryable: false,
-    nextAction: "none",
-    reasonCode: opts.reasonCode ?? "none",
-    ...opts.url !== undefined ? { url: opts.url } : {}
-  };
-}
-function recoveryLogin(opts = {}) {
-  return {
-    retryable: false,
-    nextAction: "open_login",
-    suggestedTool: "percher_login",
-    args: {},
-    reasonCode: opts.reasonCode ?? "auth_required"
-  };
-}
-function recoveryWait(opts) {
-  return {
-    retryable: false,
-    nextAction: "wait_deploy",
-    suggestedTool: "percher_wait_for_deploy",
-    args: {
-      app: opts.app,
-      deployId: opts.deployId,
-      timeoutSeconds: opts.timeoutSeconds ?? TIMEOUTS.mcpWaitDeployDefault / 1000
-    },
-    reasonCode: opts.reasonCode
-  };
-}
-function recoveryDoctor(opts) {
-  const args = {};
-  if (opts.app !== undefined)
-    args.app = opts.app;
-  if (opts.deployId !== undefined)
-    args.deployId = opts.deployId;
-  if (opts.mode !== undefined)
-    args.mode = opts.mode;
-  return {
-    retryable: false,
-    nextAction: "run_doctor",
-    suggestedTool: "percher_doctor",
-    args,
-    reasonCode: opts.reasonCode,
-    ...opts.alternativeActions !== undefined ? { alternativeActions: opts.alternativeActions } : {}
-  };
-}
-function recoveryEnv(opts) {
-  const args = {};
-  if (opts.app !== undefined)
-    args.app = opts.app;
-  if (opts.keys.length > 0)
-    args.keys = opts.keys;
-  return {
-    retryable: false,
-    nextAction: "set_env_vars",
-    suggestedTool: "percher_env_set",
-    args,
-    reasonCode: opts.reasonCode ?? "missing_env"
-  };
-}
-function recoveryFixConfig(opts) {
+// ../core/dist/structured-error-codes.js
+var MAPPINGS = {
+  WORKER_UNAVAILABLE: {
+    errorClass: "infra_unavailable",
+    phase: "infra",
+    cause: "worker_fetch_failed",
+    title: "Build worker is unreachable",
+    explanation: (raw) => raw ? `The Percher build worker did not respond in time: ${trimMessage(raw)}. This is a platform-side issue, not your code.` : "The Percher build worker did not respond in time. This is a platform-side issue, not your code.",
+    suggestion: "Wait 30 seconds and run `percher publish` again. If retry #2 also fails, pause 5 minutes before the next attempt — back-to-back retries during a partial outage just waste your time. After 3 spaced-out retries, check status.percher.app or contact support. Your build never started."
+  },
+  WORKER_UNAVAILABLE_PERSISTENT: {
+    errorClass: "infra_unavailable",
+    phase: "infra",
+    cause: "worker_circuit_breaker_open",
+    title: "Build worker is in a crash loop",
+    explanation: () => "The Percher build worker has failed repeatedly in the last minute and the platform's circuit breaker has flipped open. Retrying immediately would just queue more failures.",
+    suggestion: "Wait 2-3 minutes for the platform to recover, then retry. If it persists past 5 minutes check status.percher.app or contact support — this is a platform incident, not your code."
+  },
+  BUILD_TIMEOUT: {
+    errorClass: "build_failed",
+    phase: "build",
+    cause: "build_timeout",
+    title: "Build timed out",
+    explanation: () => "The build ran longer than the 10-minute platform limit and was aborted.",
+    suggestion: "Common causes: a slow `postinstall` hook, very large dependency tree, or a Dockerfile that pulls a huge base image. Try `bun install` locally and check what's slow. If it's legitimately a heavy build, contact support to discuss raising the limit for your account."
+  },
+  BUILD_FAILED: {
+    errorClass: "build_failed",
+    phase: "build",
+    cause: "build_nonzero_exit",
+    title: "Build failed",
+    explanation: (raw) => raw ? `The build process returned a non-zero exit code: ${trimMessage(raw)}. Read the build log below for the exact error.` : "The build process returned a non-zero exit code. Read the build log below for the exact error.",
+    suggestion: "Run your build locally to reproduce: `bun install && bun run build`. The error in the build log usually points to a missing dependency, a TypeScript/syntax error, or a misconfigured framework setting."
+  },
+  WORKER_ERROR: {
+    errorClass: "infra_unavailable",
+    phase: "infra",
+    cause: "worker_internal_error",
+    title: "Platform error inside the build worker",
+    explanation: (raw) => raw ? `The build worker hit an internal error: ${trimMessage(raw)}. This is a Percher bug, not your code.` : "The build worker hit an internal error. This is a Percher bug, not your code.",
+    suggestion: "Retry once — transient platform errors usually clear within a minute. If it repeats, please report it: include the deploy ID and we'll investigate. Your account is not at fault."
+  },
+  DEPLOY_STALLED: {
+    errorClass: "infra_unavailable",
+    phase: "infra",
+    cause: "deploy_stalled",
+    title: "Deploy stalled",
+    explanation: () => "The platform abandoned this deploy — likely because the API or build worker restarted mid-build. Your code is fine; the build never finished.",
+    suggestion: "Run `percher publish` again. The new deploy will start fresh. If you see this repeatedly across multiple publishes, check status.percher.app — it implies a recurring platform issue."
+  }
+};
+function classifyByErrorCode(code, rawMessage) {
+  if (!code)
+    return null;
+  const mapping = MAPPINGS[code];
+  if (!mapping)
+    return null;
   return {
-    retryable: false,
-    nextAction: "fix_config",
-    problems: opts.problems,
-    reasonCode: opts.reasonCode ?? "config_invalid"
+    title: mapping.title,
+    explanation: mapping.explanation(rawMessage),
+    suggestion: mapping.suggestion,
+    errorClass: mapping.errorClass,
+    phase: mapping.phase,
+    cause: mapping.cause,
+    relevantFiles: [],
+    missingEnvVars: []
   };
 }
-function recoveryFixProblems(opts) {
-  return {
-    retryable: false,
-    nextAction: "fix_problems",
-    problems: opts.problems,
-    reasonCode: opts.reasonCode ?? "build_failed",
-    ...opts.alternativeActions !== undefined ? { alternativeActions: opts.alternativeActions } : {}
-  };
+function trimMessage(raw) {
+  const firstLine = raw.split(`
+`)[0] ?? "";
+  return firstLine.length > 200 ? `${firstLine.slice(0, 200)}…` : firstLine;
 }
-function recoveryRetry(opts) {
-  return {
-    retryable: true,
-    nextAction: "retry",
-    suggestedTool: opts.suggestedTool,
-    args: opts.args,
-    reasonCode: opts.reasonCode
-  };
+
+// ../core/dist/commands/publish-failure.js
+function tomlPathFor(cwd) {
+  return join9(cwd, "percher.toml");
 }
-function recoveryAsk(opts) {
-  if (!opts.prompt || opts.prompt.trim().length === 0) {
-    throw new Error("recoveryAsk requires a non-empty prompt");
+async function buildFailureError(ctx, app, deployment, signal) {
+  let buildLogTail;
+  let buildLogFetchFailed = false;
+  let fullLog = "";
+  try {
+    fullLog = await ctx.client.apps.getBuildLog(app.id, deployment.id, { signal });
+    if (!fullLog && !signal?.aborted) {
+      await abortableSleep(1500, signal);
+      if (!signal?.aborted) {
+        fullLog = await ctx.client.apps.getBuildLog(app.id, deployment.id, { signal });
+      }
+    }
+    if (fullLog) {
+      const lines = fullLog.split(`
+`);
+      buildLogTail = lines.slice(-50).join(`
+`);
+    }
+  } catch {
+    buildLogFetchFailed = true;
+  }
+  const errorMessage = deployment.errorMessage ?? "";
+  const classified = classifyByErrorCode(deployment.errorCode, errorMessage) ?? classifyError(errorMessage || "Deployment failed", fullLog);
+  const rawErrorMessage = errorMessage && !buildLogTail && !classified?.explanation.includes(errorMessage) ? errorMessage : undefined;
+  const problems = deployment.problems && deployment.problems.length > 0 ? deployment.problems : undefined;
+  if (classified) {
+    return {
+      title: classified.title,
+      explanation: classified.explanation,
+      suggestion: classified.suggestion,
+      buildLogTail,
+      rawErrorMessage,
+      errorClass: classified.errorClass,
+      phase: classified.phase,
+      cause: classified.cause,
+      relevantFiles: classified.relevantFiles,
+      missingEnvVars: classified.missingEnvVars,
+      problems
+    };
   }
   return {
-    retryable: opts.retryable ?? false,
-    nextAction: "ask_user",
-    prompt: opts.prompt,
-    ...opts.options !== undefined ? { options: opts.options } : {},
-    reasonCode: opts.reasonCode
+    title: "Deployment failed",
+    explanation: errorMessage ? `The deployment failed: ${errorMessage}` : "The deployment failed. See the build log for details.",
+    suggestion: buildLogTail ? "Check the build log below for errors. Run your build command locally to reproduce, fix, and publish again." : buildLogFetchFailed ? `The deploy failed and we could not retrieve the build log (network/API error after retries). The log itself may exist on the server — fetch it directly with: percher logs ${app.name} --build ${deployment.id}` : errorMessage ? `The deploy failed with: ${errorMessage.split(`
+`)[0]}. The build log column is empty — try \`percher logs ${app.name} --build ${deployment.id}\` to fetch it directly. If it remains empty, run \`percher deploys inspect ${deployment.id}\` for full details.` : `No build log was produced — the failure happened before the build started. This usually means a Percher infra issue. Retry once, and if it persists, fetch the deploy details with: percher deploys inspect ${deployment.id}`,
+    buildLogTail,
+    errorClass: "build_failed",
+    phase: "build",
+    cause: "unknown",
+    relevantFiles: [],
+    missingEnvVars: [],
+    problems
   };
 }
-function recoveryInspectBuildLog(opts) {
-  const args = opts.deployId ? { id: opts.deployId, app: opts.app } : { latestFailed: true, app: opts.app };
+async function classifyDeploymentFailure(opts) {
+  const { ctx, app, deployment, publishInput } = opts;
+  const error48 = await buildFailureError(ctx, app, deployment, opts.signal);
+  const recovery = error48.errorClass ? recoveryFromErrorClass(error48.errorClass, {
+    missingEnvVars: error48.missingEnvVars,
+    deployId: deployment.id,
+    appName: app.name,
+    publishInput,
+    problems: error48.problems
+  }) : recoveryAsk({
+    prompt: `${app.name} deploy ${deployment.id} failed: ${error48.title}. ${error48.suggestion}`.trim(),
+    reasonCode: "build_failed"
+  });
   return {
-    retryable: false,
-    nextAction: "inspect_build_log",
-    suggestedTool: "percher_deploys_inspect",
-    args,
-    reasonCode: opts.reasonCode ?? "build_failed",
-    ...opts.alternativeActions !== undefined ? { alternativeActions: opts.alternativeActions } : {}
+    error: error48,
+    recovery,
+    summary: `${error48.title} (${app.name}, deploy ${deployment.id}).`
   };
 }
-var RECOVERY_NONE = recoveryNone();
-var RECOVERY_NEEDS_LOGIN = recoveryLogin();
-function buildProblemToRecoveryProblem(p) {
-  const file2 = p.file ?? "";
-  const message = p.hint && p.hint.length > 0 ? `${p.message}
-Hint: ${p.hint}` : p.message;
+async function buildFailureResult(opts) {
+  const { ctx, app, deployment, tarball, input } = opts;
+  const { error: error48, recovery, summary } = await classifyDeploymentFailure({
+    ctx,
+    app,
+    deployment,
+    publishInput: input
+  });
   return {
-    file: file2,
-    ...typeof p.line === "number" ? { line: p.line } : {},
-    ...typeof p.column === "number" ? { column: p.column } : {},
-    message
+    status: "failed",
+    app,
+    deployment,
+    fileCount: tarball.fileCount,
+    bytes: tarball.bytes,
+    error: error48,
+    recovery,
+    summary,
+    configPath: tomlPathFor(ctx.cwd),
+    bundle: { fileCount: tarball.fileCount, bytes: tarball.bytes }
   };
 }
-function recoveryFromErrorClass(errorClass, failure = {}) {
-  switch (errorClass) {
-    case "missing_env":
-      return recoveryEnv({
-        keys: failure.missingEnvVars ?? [],
-        reasonCode: "missing_env"
-      });
-    case "infra_unavailable":
-      return recoveryRetry({
-        suggestedTool: "percher_publish",
-        args: failure.publishInput ?? {},
-        reasonCode: "infra_unavailable"
-      });
-    case "platform_at_capacity":
-      return recoveryRetry({
-        suggestedTool: "percher_publish",
-        args: failure.publishInput ?? {},
-        reasonCode: "infra_transient"
-      });
-    case "config_invalid":
-      return recoveryFixConfig({
-        problems: [
-          {
-            file: "percher.toml",
-            message: "percher.toml failed validation — fix the file and re-run."
-          }
-        ],
-        reasonCode: "config_invalid"
+
+// ../core/dist/commands/deploy-repo.js
+var deployRepoInputSchema = exports_external.object({
+  app: exports_external.string().describe("App name or id (required — hosted has no cwd)."),
+  branch: exports_external.string().optional().describe("Branch to deploy. Defaults to the app's tracked branch."),
+  note: exports_external.string().optional().describe("Optional note recorded against the deploy.")
+});
+// ../core/dist/commands/deploys.js
+var deploysListInputSchema = exports_external.object({
+  app: exports_external.string().optional(),
+  limit: exports_external.number().int().positive().max(100).optional()
+});
+var deploysInspectInputSchema = exports_external.object({
+  app: exports_external.string().optional(),
+  id: exports_external.string().optional(),
+  latestFailed: exports_external.boolean().optional()
+}).superRefine((val, ctx) => {
+  if (!val.id && !val.latestFailed) {
+    ctx.addIssue({
+      code: exports_external.ZodIssueCode.custom,
+      message: "either `id` or `latestFailed: true` must be provided"
+    });
+  }
+});
+function resolveAppName(ctx, app) {
+  const name = app ?? readPercherTomlAppName(ctx.cwd);
+  if (!name) {
+    throw new PercherCoreError("No app specified and no percher.toml found", {
+      code: "deploys.no-app",
+      hint: "Pass --app <name> or run from a directory with percher.toml."
+    });
+  }
+  return name;
+}
+async function deploysList(ctx, input = {}) {
+  const name = resolveAppName(ctx, input.app);
+  return ctx.client.apps.listDeploys(name, { limit: input.limit ?? 10 });
+}
+async function deploysInspect(ctx, input) {
+  const name = resolveAppName(ctx, input.app);
+  let deployId = input.id;
+  if (!deployId && input.latestFailed) {
+    const recent = await ctx.client.apps.listDeploys(name, { limit: 25 });
+    const failed = recent.find((d) => d.status === "failed");
+    if (!failed) {
+      throw new PercherCoreError(`No failed deploys found for "${name}"`, {
+        code: "deploys.no-failed",
+        hint: "Try `percher deploys` to list recent deploys, or omit --latest-failed."
       });
-    case "build_failed":
-    case "missing_dependency":
-    case "health_check_timeout":
-    case "port_mismatch":
-    case "permission_denied":
-    case "runtime_crash":
-    case "oom_killed": {
-      const fileProblems = (failure.problems ?? []).filter((p) => p.file);
-      const reproduceAlt = failure.deployId ? {
-        action: "reproduce_locally",
-        suggestedTool: "percher_reproduce",
-        args: { deployId: failure.deployId, app: failure.appName },
-        when: "after the primary path didn't surface a clear fix and the user has nixpacks installed locally"
-      } : undefined;
-      if (fileProblems.length > 0) {
-        return recoveryFixProblems({
-          problems: fileProblems.map(buildProblemToRecoveryProblem),
-          reasonCode: "build_failed",
-          ...reproduceAlt ? {
-            alternativeActions: [
-              {
-                ...reproduceAlt,
-                when: "after fixing the file-located problems didn't make the build pass and the user has nixpacks installed locally"
-              }
-            ]
-          } : {}
-        });
-      }
-      const inspectAlt = {
-        action: "inspect_build_log",
-        suggestedTool: "percher_deploys_inspect",
-        args: failure.deployId ? { id: failure.deployId, app: failure.appName } : { latestFailed: true, app: failure.appName },
-        when: "after percher_doctor's recovery didn't yield a fix and you want to read the raw build log directly"
-      };
-      const alternativeActions = [inspectAlt];
-      if (reproduceAlt) {
-        alternativeActions.push({
-          ...reproduceAlt,
-          when: "after percher_doctor + percher_deploys_inspect didn't surface a clear fix and the user has nixpacks installed locally"
-        });
-      }
-      return recoveryDoctor({
-        app: failure.appName,
-        deployId: failure.deployId,
-        mode: "deploy",
-        reasonCode: "build_failed",
-        alternativeActions
+    }
+    deployId = failed.id;
+  }
+  if (!deployId) {
+    throw new PercherCoreError("Deploy ID is required", {
+      code: "deploys.no-id"
+    });
+  }
+  const deploy = await ctx.client.apps.getDeployment(name, deployId);
+  let buildLog = null;
+  try {
+    const log = await ctx.client.apps.getBuildLog(name, deployId);
+    buildLog = log.length > 0 ? log : null;
+  } catch (err) {
+    if (err instanceof PercherApiError && err.status === 404) {
+      buildLog = null;
+    } else {
+      throw err;
+    }
+  }
+  return { deploy, buildLog };
+}
+// ../core/dist/commands/dev.js
+import { existsSync as existsSync8 } from "node:fs";
+import { join as join12 } from "node:path";
+
+// ../core/dist/tarball.js
+var import_ignore = __toESM(require_ignore(), 1);
+import { createHash as createHash2 } from "node:crypto";
+import { existsSync as existsSync6, readdirSync as readdirSync2, readFileSync as readFileSync6, statSync as statSync2 } from "node:fs";
+import { join as join10, relative as relative3, sep as sep2 } from "node:path";
+import { Readable } from "node:stream";
+import { createGzip } from "node:zlib";
+
+// ../../node_modules/.bun/tar-stream@3.1.8/node_modules/tar-stream/index.js
+var $extract = require_extract();
+var $pack = require_pack();
+
+// ../core/dist/tarball.js
+function isFilesOptions(options) {
+  return "files" in options;
+}
+var DEFAULT_IGNORE = [
+  "node_modules",
+  ".git",
+  "dist",
+  ".next",
+  ".svelte-kit",
+  "build",
+  "coverage",
+  ".env",
+  ".env.*",
+  ".bun",
+  "*.log",
+  ".DS_Store"
+];
+function* walk(dir, baseDir, ig) {
+  const entries = readdirSync2(dir);
+  for (const name of entries) {
+    const full = join10(dir, name);
+    const rel = relative3(baseDir, full).split(sep2).join("/");
+    if (ig.ignores(rel))
+      continue;
+    const stats = statSync2(full);
+    if (stats.isDirectory()) {
+      if (ig.ignores(`${rel}/`))
+        continue;
+      yield* walk(full, baseDir, ig);
+    } else if (stats.isFile()) {
+      yield rel;
+    }
+  }
+}
+function normalizeInlinePath(raw) {
+  const path = raw.replace(/\\/g, "/");
+  if (path.length === 0) {
+    throw new Error("file path must not be empty");
+  }
+  if (path.startsWith("/")) {
+    throw new Error(`file path must be relative, got absolute path: ${raw}`);
+  }
+  if (/^[a-zA-Z]:/.test(path)) {
+    throw new Error(`file path must be relative, got drive path: ${raw}`);
+  }
+  const segments = path.split("/");
+  if (segments.some((s) => s === "..")) {
+    throw new Error(`file path must not contain "..": ${raw}`);
+  }
+  const cleaned = segments.filter((s) => s !== "" && s !== ".").join("/");
+  if (cleaned.length === 0) {
+    throw new Error(`file path resolves to nothing: ${raw}`);
+  }
+  return cleaned;
+}
+function buildTarball(fileBuffers) {
+  fileBuffers.sort((a, b) => a.path < b.path ? -1 : a.path > b.path ? 1 : 0);
+  const totalBytes = fileBuffers.reduce((sum, f) => sum + f.size, 0);
+  const contentHasher = createHash2("sha256");
+  for (const f of fileBuffers) {
+    contentHasher.update(`PATH:${f.path.length}:${f.path}
+`);
+    contentHasher.update(`SIZE:${f.size}
+`);
+    contentHasher.update(f.data);
+    contentHasher.update(`
+`);
+  }
+  const contentHash = contentHasher.digest("hex");
+  const pack = $pack();
+  (async () => {
+    for (const file2 of fileBuffers) {
+      await new Promise((resolve7, reject) => {
+        pack.entry({ name: file2.path, size: file2.data.length }, file2.data, (err) => err ? reject(err) : resolve7());
       });
     }
-    default:
-      return recoveryAsk({
-        prompt: "Unexpected failure — Percher couldn't classify this error. Try `percher doctor` for diagnostics, or surface the error to the user.",
-        reasonCode: "unknown"
-      });
+    pack.finalize();
+  })();
+  const gzip = createGzip();
+  const nodeStream = pack.pipe(gzip);
+  const webStream = Readable.toWeb(nodeStream);
+  const topFiles = [...fileBuffers].sort((a, b) => b.size - a.size).slice(0, 5).map((f) => ({ path: f.path, size: f.size }));
+  return {
+    stream: webStream,
+    bytes: totalBytes,
+    fileCount: fileBuffers.length,
+    topFiles,
+    contentHash
+  };
+}
+async function createTarball(options) {
+  if (isFilesOptions(options)) {
+    return createTarballFromFiles(options.files, options.config);
+  }
+  const ig = import_ignore.default();
+  ig.add(DEFAULT_IGNORE);
+  const gitignorePath = join10(options.cwd, ".gitignore");
+  if (existsSync6(gitignorePath)) {
+    ig.add(readFileSync6(gitignorePath, "utf8"));
+  }
+  if (options.extraIgnore)
+    ig.add(options.extraIgnore);
+  const fileBuffers = [];
+  for (const rel of walk(options.cwd, options.cwd, ig)) {
+    const data2 = readFileSync6(join10(options.cwd, rel));
+    fileBuffers.push({ path: rel, size: data2.length, data: data2 });
+  }
+  return buildTarball(fileBuffers);
+}
+function createTarballFromFiles(files, _config) {
+  const seen = new Set;
+  const fileBuffers = [];
+  for (const file2 of files) {
+    const path = normalizeInlinePath(file2.path);
+    if (seen.has(path)) {
+      throw new Error(`duplicate file path in inline source: ${path}`);
+    }
+    seen.add(path);
+    const data2 = Buffer.from(file2.data);
+    fileBuffers.push({ path, size: data2.length, data: data2 });
   }
+  return buildTarball(fileBuffers);
 }
 
-// ../core/dist/commands/publish-failure.js
-import { join as join12 } from "node:path";
-
-// ../core/dist/structured-error-codes.js
-var MAPPINGS = {
-  WORKER_UNAVAILABLE: {
-    errorClass: "infra_unavailable",
-    phase: "infra",
-    cause: "worker_fetch_failed",
-    title: "Build worker is unreachable",
-    explanation: (raw) => raw ? `The Percher build worker did not respond in time: ${trimMessage(raw)}. This is a platform-side issue, not your code.` : "The Percher build worker did not respond in time. This is a platform-side issue, not your code.",
-    suggestion: "Wait 30 seconds and run `percher publish` again. If retry #2 also fails, pause 5 minutes before the next attempt — back-to-back retries during a partial outage just waste your time. After 3 spaced-out retries, check status.percher.app or contact support. Your build never started."
-  },
-  WORKER_UNAVAILABLE_PERSISTENT: {
-    errorClass: "infra_unavailable",
-    phase: "infra",
-    cause: "worker_circuit_breaker_open",
-    title: "Build worker is in a crash loop",
-    explanation: () => "The Percher build worker has failed repeatedly in the last minute and the platform's circuit breaker has flipped open. Retrying immediately would just queue more failures.",
-    suggestion: "Wait 2-3 minutes for the platform to recover, then retry. If it persists past 5 minutes check status.percher.app or contact support — this is a platform incident, not your code."
-  },
-  BUILD_TIMEOUT: {
-    errorClass: "build_failed",
-    phase: "build",
-    cause: "build_timeout",
-    title: "Build timed out",
-    explanation: () => "The build ran longer than the 10-minute platform limit and was aborted.",
-    suggestion: "Common causes: a slow `postinstall` hook, very large dependency tree, or a Dockerfile that pulls a huge base image. Try `bun install` locally and check what's slow. If it's legitimately a heavy build, contact support to discuss raising the limit for your account."
-  },
-  BUILD_FAILED: {
-    errorClass: "build_failed",
-    phase: "build",
-    cause: "build_nonzero_exit",
-    title: "Build failed",
-    explanation: (raw) => raw ? `The build process returned a non-zero exit code: ${trimMessage(raw)}. Read the build log below for the exact error.` : "The build process returned a non-zero exit code. Read the build log below for the exact error.",
-    suggestion: "Run your build locally to reproduce: `bun install && bun run build`. The error in the build log usually points to a missing dependency, a TypeScript/syntax error, or a misconfigured framework setting."
-  },
-  WORKER_ERROR: {
-    errorClass: "infra_unavailable",
-    phase: "infra",
-    cause: "worker_internal_error",
-    title: "Platform error inside the build worker",
-    explanation: (raw) => raw ? `The build worker hit an internal error: ${trimMessage(raw)}. This is a Percher bug, not your code.` : "The build worker hit an internal error. This is a Percher bug, not your code.",
-    suggestion: "Retry once — transient platform errors usually clear within a minute. If it repeats, please report it: include the deploy ID and we'll investigate. Your account is not at fault."
-  },
-  DEPLOY_STALLED: {
-    errorClass: "infra_unavailable",
-    phase: "infra",
-    cause: "deploy_stalled",
-    title: "Deploy stalled",
-    explanation: () => "The platform abandoned this deploy — likely because the API or build worker restarted mid-build. Your code is fine; the build never finished.",
-    suggestion: "Run `percher publish` again. The new deploy will start fresh. If you see this repeatedly across multiple publishes, check status.percher.app — it implies a recurring platform issue."
+// ../core/dist/watcher.js
+var import_ignore2 = __toESM(require_ignore(), 1);
+import { existsSync as existsSync7, readFileSync as readFileSync7, watch } from "node:fs";
+import { join as join11, sep as sep3 } from "node:path";
+var DEFAULT_IGNORE2 = [
+  "node_modules",
+  ".git",
+  "dist",
+  ".next",
+  ".svelte-kit",
+  "build",
+  "coverage",
+  ".env",
+  ".env.*",
+  ".bun",
+  "*.log",
+  ".DS_Store",
+  "__pycache__"
+];
+function createWatcher(options) {
+  const debounceMs = options.debounceMs ?? 500;
+  const ig = import_ignore2.default();
+  ig.add(DEFAULT_IGNORE2);
+  const gitignorePath = join11(options.cwd, ".gitignore");
+  if (existsSync7(gitignorePath)) {
+    ig.add(readFileSync7(gitignorePath, "utf8"));
   }
-};
-function classifyByErrorCode(code, rawMessage) {
-  if (!code)
-    return null;
-  const mapping = MAPPINGS[code];
-  if (!mapping)
-    return null;
+  if (options.extraIgnore)
+    ig.add(options.extraIgnore);
+  let timer = null;
+  let pending = new Set;
+  const fsWatcher = watch(options.cwd, { recursive: true }, (_event, filename) => {
+    if (!filename)
+      return;
+    const rel = filename.split(sep3).join("/");
+    if (ig.ignores(rel))
+      return;
+    pending.add(rel);
+    if (timer)
+      clearTimeout(timer);
+    timer = setTimeout(() => {
+      const files = [...pending];
+      pending = new Set;
+      timer = null;
+      if (files.length > 0) {
+        options.onChange(files);
+      }
+    }, debounceMs);
+  });
   return {
-    title: mapping.title,
-    explanation: mapping.explanation(rawMessage),
-    suggestion: mapping.suggestion,
-    errorClass: mapping.errorClass,
-    phase: mapping.phase,
-    cause: mapping.cause,
-    relevantFiles: [],
-    missingEnvVars: []
+    close() {
+      if (timer)
+        clearTimeout(timer);
+      fsWatcher.close();
+    }
   };
 }
-function trimMessage(raw) {
-  const firstLine = raw.split(`
-`)[0] ?? "";
-  return firstLine.length > 200 ? `${firstLine.slice(0, 200)}…` : firstLine;
-}
 
-// ../core/dist/commands/publish-failure.js
-function tomlPathFor(cwd) {
-  return join12(cwd, "percher.toml");
+// ../core/dist/commands/dev.js
+var devInputSchema = exports_external.object({
+  app: exports_external.string().optional()
+});
+async function loadConfig2(ctx, appOverride) {
+  const tomlPath = join12(ctx.cwd, "percher.toml");
+  if (!existsSync8(tomlPath)) {
+    throw new PercherCoreError("No percher.toml found. Run: percher init", {
+      code: "dev.no-app",
+      hint: "Create a percher.toml first with `percher init`."
+    });
+  }
+  const config2 = await parseFile(tomlPath);
+  if (appOverride)
+    return { ...config2, app: { ...config2.app, name: appOverride } };
+  return config2;
 }
-async function buildFailureError(ctx, app, deployment, signal) {
-  let buildLogTail;
-  let buildLogFetchFailed = false;
-  let fullLog = "";
+async function ensureApp(ctx, config2) {
   try {
-    fullLog = await ctx.client.apps.getBuildLog(app.id, deployment.id, { signal });
-    if (!fullLog && !signal?.aborted) {
-      await abortableSleep(1500, signal);
-      if (!signal?.aborted) {
-        fullLog = await ctx.client.apps.getBuildLog(app.id, deployment.id, { signal });
+    return await ctx.client.apps.get(config2.app.name);
+  } catch (err) {
+    if (err.code === "APP_NOT_FOUND") {
+      return ctx.client.apps.create({
+        name: config2.app.name,
+        runtime: config2.app.runtime,
+        framework: config2.app.framework
+      });
+    }
+    throw err;
+  }
+}
+async function doPush(ctx, config2, callbacks) {
+  const tarball = await createTarball({ cwd: ctx.cwd, config: config2 });
+  const app = await ensureApp(ctx, config2);
+  await callbacks.writeLine(`Pushing ${tarball.fileCount} files (${(tarball.bytes / 1024).toFixed(0)} KB)...`);
+  const deployResponse = await ctx.client.apps.deploy(app.id, { tarball: tarball.stream });
+  if (deployResponse.status === "already_in_progress") {
+    const active = deployResponse;
+    await callbacks.writeLine(`  Skipped — deploy already in progress (${active.deployId}, ${active.deployStatus}).`);
+    return { success: false, appId: app.id };
+  }
+  let deployment = deployResponse;
+  const startedAt = Date.now();
+  const timeoutMs = TIMEOUTS.clientPublishPoll;
+  const pollInterval = 2000;
+  let lastStatus = "";
+  while (deployment.status !== "live" && deployment.status !== "failed") {
+    if (Date.now() - startedAt > timeoutMs) {
+      await callbacks.writeLine("Deploy timed out");
+      return { success: false, appId: app.id };
+    }
+    if (callbacks.signal.aborted)
+      return { success: false, appId: app.id };
+    if (deployment.status !== lastStatus) {
+      lastStatus = deployment.status;
+      await callbacks.writeLine(`  ${deployment.status}...`);
+    }
+    await new Promise((r) => setTimeout(r, pollInterval));
+    deployment = await ctx.client.apps.getDeployment(app.id, deployment.id);
+  }
+  if (deployment.status === "failed") {
+    try {
+      const insp = await ctx.client.apps.getDeployment(app.id, deployment.id);
+      if (insp.errorMessage) {
+        await callbacks.writeLine("Deploy failed:");
+        for (const line of insp.errorMessage.split(`
+`).slice(0, 30)) {
+          await callbacks.writeLine(`  ${line}`);
+        }
+      } else {
+        await callbacks.writeLine("Deploy failed.");
       }
+    } catch {
+      await callbacks.writeLine("Deploy failed.");
+    }
+    return { success: false, appId: app.id };
+  }
+  await callbacks.writeLine(`Live at ${deployment.url ?? ""}`);
+  return { success: true, appId: app.id };
+}
+function formatLogLine(l) {
+  const level = l.level.toUpperCase().padEnd(5);
+  const src = l.source === "runtime" ? "" : `[${l.source}] `;
+  return `  ${src}${level} ${l.message}`;
+}
+async function streamLogs(ctx, appId, callbacks, signal) {
+  try {
+    for await (const line of ctx.client.logs.stream(appId, { signal })) {
+      if (signal.aborted)
+        return;
+      await callbacks.writeLine(formatLogLine(line));
+    }
+  } catch (err) {
+    if (signal.aborted)
+      return;
+    await callbacks.writeLine(`Log stream error: ${err.message}`);
+  }
+}
+async function dev(ctx, input, callbacks) {
+  const config2 = await loadConfig2(ctx, input.app);
+  const app = await ensureApp(ctx, config2);
+  await callbacks.writeLine(`App: ${app.url}`);
+  await callbacks.writeLine("Watching for changes (logs streaming below)...");
+  await callbacks.writeLine("");
+  const logStream = { ctrl: null };
+  function startLogStream(appId) {
+    logStream.ctrl?.abort();
+    logStream.ctrl = new AbortController;
+    const linkedSignal = logStream.ctrl.signal;
+    streamLogs(ctx, appId, callbacks, linkedSignal);
+  }
+  startLogStream(app.id);
+  let busy = false;
+  let queued = null;
+  async function handleChange(files) {
+    if (busy) {
+      queued = files;
+      return;
     }
-    if (fullLog) {
-      const lines = fullLog.split(`
-`);
-      buildLogTail = lines.slice(-50).join(`
-`);
+    busy = true;
+    try {
+      const shortList = files.length <= 3 ? files.join(", ") : `${files.slice(0, 3).join(", ")} +${files.length - 3} more`;
+      await callbacks.writeLine(`Change detected: ${shortList}`);
+      logStream.ctrl?.abort();
+      const shouldPush = await callbacks.onFilesChanged(files);
+      if (shouldPush) {
+        try {
+          const freshConfig = await loadConfig2(ctx, input.app);
+          const result = await doPush(ctx, freshConfig, callbacks);
+          if (result.success) {
+            startLogStream(result.appId);
+          } else {
+            startLogStream(app.id);
+          }
+        } catch (err) {
+          await callbacks.writeLine(`Push error: ${err.message}`);
+          startLogStream(app.id);
+        }
+      } else {
+        startLogStream(app.id);
+      }
+    } finally {
+      busy = false;
+      if (queued) {
+        const next = queued;
+        queued = null;
+        await handleChange(next);
+      }
     }
-  } catch {
-    buildLogFetchFailed = true;
-  }
-  const errorMessage = deployment.errorMessage ?? "";
-  const classified = classifyByErrorCode(deployment.errorCode, errorMessage) ?? classifyError(errorMessage || "Deployment failed", fullLog);
-  const rawErrorMessage = errorMessage && !buildLogTail && !classified?.explanation.includes(errorMessage) ? errorMessage : undefined;
-  const problems = deployment.problems && deployment.problems.length > 0 ? deployment.problems : undefined;
-  if (classified) {
-    return {
-      title: classified.title,
-      explanation: classified.explanation,
-      suggestion: classified.suggestion,
-      buildLogTail,
-      rawErrorMessage,
-      errorClass: classified.errorClass,
-      phase: classified.phase,
-      cause: classified.cause,
-      relevantFiles: classified.relevantFiles,
-      missingEnvVars: classified.missingEnvVars,
-      problems
-    };
   }
-  return {
-    title: "Deployment failed",
-    explanation: errorMessage ? `The deployment failed: ${errorMessage}` : "The deployment failed. See the build log for details.",
-    suggestion: buildLogTail ? "Check the build log below for errors. Run your build command locally to reproduce, fix, and publish again." : buildLogFetchFailed ? `The deploy failed and we could not retrieve the build log (network/API error after retries). The log itself may exist on the server — fetch it directly with: percher logs ${app.name} --build ${deployment.id}` : errorMessage ? `The deploy failed with: ${errorMessage.split(`
-`)[0]}. The build log column is empty — try \`percher logs ${app.name} --build ${deployment.id}\` to fetch it directly. If it remains empty, run \`percher deploys inspect ${deployment.id}\` for full details.` : `No build log was produced — the failure happened before the build started. This usually means a Percher infra issue. Retry once, and if it persists, fetch the deploy details with: percher deploys inspect ${deployment.id}`,
-    buildLogTail,
-    errorClass: "build_failed",
-    phase: "build",
-    cause: "unknown",
-    relevantFiles: [],
-    missingEnvVars: [],
-    problems
-  };
-}
-async function classifyDeploymentFailure(opts) {
-  const { ctx, app, deployment, publishInput } = opts;
-  const error48 = await buildFailureError(ctx, app, deployment, opts.signal);
-  const recovery = error48.errorClass ? recoveryFromErrorClass(error48.errorClass, {
-    missingEnvVars: error48.missingEnvVars,
-    deployId: deployment.id,
-    appName: app.name,
-    publishInput,
-    problems: error48.problems
-  }) : recoveryAsk({
-    prompt: `${app.name} deploy ${deployment.id} failed: ${error48.title}. ${error48.suggestion}`.trim(),
-    reasonCode: "build_failed"
+  const devConfig = config2.dev;
+  const watcher = createWatcher({
+    cwd: ctx.cwd,
+    extraIgnore: devConfig?.ignore,
+    debounceMs: devConfig?.debounce,
+    onChange(files) {
+      handleChange(files);
+    }
   });
-  return {
-    error: error48,
-    recovery,
-    summary: `${error48.title} (${app.name}, deploy ${deployment.id}).`
-  };
+  try {
+    await new Promise((resolve7) => {
+      if (callbacks.signal.aborted) {
+        resolve7();
+        return;
+      }
+      callbacks.signal.addEventListener("abort", () => resolve7(), { once: true });
+    });
+  } finally {
+    logStream.ctrl?.abort();
+    watcher.close();
+  }
 }
-async function buildFailureResult(opts) {
-  const { ctx, app, deployment, tarball, input } = opts;
-  const { error: error48, recovery, summary } = await classifyDeploymentFailure({
-    ctx,
-    app,
-    deployment,
-    publishInput: input
+// ../core/dist/commands/diagnose.js
+var diagnoseInputSchema = exports_external.object({
+  app: exports_external.string().optional(),
+  logLines: exports_external.number().int().min(0).max(200).optional(),
+  recencyHours: exports_external.number().positive().max(24 * 30).optional()
+});
+// ../core/dist/commands/diff.js
+var diffInputSchema = exports_external.object({
+  app: exports_external.string().optional(),
+  base: exports_external.string().optional(),
+  head: exports_external.string().optional(),
+  patch: exports_external.boolean().optional()
+});
+async function diff(ctx, input = {}) {
+  const name = input.app ?? readPercherTomlAppName(ctx.cwd);
+  if (!name) {
+    throw new PercherCoreError("No app specified and no percher.toml found", {
+      code: "diff.no-app",
+      hint: "Pass --app <name> or run from a directory with percher.toml."
+    });
+  }
+  return ctx.client.apps.getChanges(name, {
+    base: input.base,
+    head: input.head,
+    patch: input.patch
   });
-  return {
-    status: "failed",
-    app,
-    deployment,
-    fileCount: tarball.fileCount,
-    bytes: tarball.bytes,
-    error: error48,
-    recovery,
-    summary,
-    configPath: tomlPathFor(ctx.cwd),
-    bundle: { fileCount: tarball.fileCount, bytes: tarball.bytes }
-  };
 }
+// ../core/dist/commands/doctor.js
+import { existsSync as existsSync9 } from "node:fs";
+import { join as join13 } from "node:path";
 
 // ../core/dist/commands/wait-deploy.js
 var waitForDeployInputSchema = exports_external.object({
@@ -110225,6 +110363,7 @@ async function logs(ctx, input = {}) {
 }
 // ../core/dist/commands/mcp.js
 var mcpInputSchema = exports_external.object({});
+var HOSTED_MCP_URL = "https://mcp.percher.app/mcp";
 function mcp(_ctx, _input = {}) {
   return {
     config: {
@@ -110235,19 +110374,43 @@ function mcp(_ctx, _input = {}) {
         }
       }
     },
+    hosted: {
+      config: {
+        mcpServers: {
+          percher: {
+            transport: "http",
+            url: HOSTED_MCP_URL
+          }
+        }
+      },
+      url: HOSTED_MCP_URL,
+      auth: "oauth"
+    },
     installLocations: [
       {
         client: "Claude Code",
-        path: "~/.claude.json (under mcpServers, or a per-project .mcp.json)"
+        path: "~/.claude.json (under mcpServers, or a per-project .mcp.json)",
+        note: "Local stdio — recommended for Claude Code (full tool set, incl. publish from local files)."
+      },
+      {
+        client: "Claude.ai (web/desktop)",
+        path: `Settings → Connectors → Add custom connector → ${HOSTED_MCP_URL}`,
+        note: "Hosted — OAuth, no token to paste. Remote-safe subset (operate existing apps + deploy connected repos)."
       },
       {
         client: "Cursor / Windsurf",
-        path: "settings → MCP → add server (use the same npx command)"
+        path: "settings → MCP → add server (local: the same npx command; hosted: add the URL as a connector)"
       },
       {
         client: "VS Code (Continue / Cline)",
-        path: "extension settings → MCP servers"
+        path: "extension settings → MCP servers (local npx command)"
       }
+    ],
+    notes: [
+      "Two ways to connect:",
+      "  • Local (npx): full tool set, reads your project files — required for first publish from local files. Recommended for Claude Code.",
+      `  • Hosted connector: add ${HOSTED_MCP_URL} as a custom connector. OAuth login in the browser — no token to paste. Remote-safe subset (operate existing apps + deploy connected repos); first-publish-from-local-files stays on the npx path.`,
+      "Manage or revoke hosted connections from the Percher dashboard."
     ]
   };
 }
@@ -114209,66 +114372,6 @@ function withDuration(label, durationMs) {
   return `${label} (${seconds}s)`;
 }
 
-// ../core/dist/poll-deployment.js
-async function pollDeployment(opts) {
-  const terminal = opts.terminal ?? ["live", "failed"];
-  const intervalMs = opts.intervalMs ?? 2000;
-  const timeoutMs = opts.timeoutMs ?? TIMEOUTS.clientPublishPoll;
-  const maxRetries = opts.maxRetries ?? 5;
-  let deployment = opts.initial;
-  const startedAt = Date.now();
-  const seenEventIds = new Set;
-  if (opts.onEvent) {
-    await drainNewEvents(opts, deployment.id, seenEventIds);
-  }
-  while (!terminal.includes(deployment.status)) {
-    if (Date.now() - startedAt > timeoutMs) {
-      opts.onTimeout(deployment);
-    }
-    opts.onTick?.(deployment);
-    await new Promise((r) => setTimeout(r, intervalMs));
-    let attempt = 0;
-    let polled = false;
-    while (!polled) {
-      try {
-        deployment = await opts.ctx.client.apps.getDeployment(opts.appId, deployment.id);
-        polled = true;
-      } catch (err) {
-        attempt++;
-        const isNetwork = isTransientNetworkError(err);
-        if (!isNetwork || attempt >= maxRetries) {
-          if (isNetwork) {
-            const msg = err.message ?? String(err);
-            throw new Error(`${msg}
-
-The deploy may already be live — your network connection dropped mid-poll. Check with: percher deploys list ${opts.appName}`, { cause: err });
-          }
-          throw err;
-        }
-        const backoff = (opts.backoffMs ?? ((n) => 1000 * 2 ** (n - 1)))(attempt);
-        await new Promise((r) => setTimeout(r, backoff));
-      }
-    }
-    if (opts.onEvent) {
-      await drainNewEvents(opts, deployment.id, seenEventIds);
-    }
-  }
-  return deployment;
-}
-async function drainNewEvents(opts, deployId, seenEventIds) {
-  if (!opts.onEvent)
-    return;
-  try {
-    const { events } = await opts.ctx.client.apps.getDeployEvents(opts.appId, deployId);
-    for (const event of events) {
-      if (seenEventIds.has(event.id))
-        continue;
-      seenEventIds.add(event.id);
-      opts.onEvent(event);
-    }
-  } catch {}
-}
-
 // ../core/dist/publish-retry.js
 var NON_RETRYABLE_CODES = new Set([
   "WORKER_UNAVAILABLE_PERSISTENT",
@@ -115282,11 +115385,29 @@ async function executeDeploy(opts) {
       throw err;
     }
   }
+  const uploadMs = Date.now() - uploadStart;
+  return finalizeDeploy({
+    ctx,
+    config: config2,
+    input,
+    app,
+    firstDeploy,
+    tarball: { fileCount: tarball.fileCount, bytes: tarball.bytes },
+    deployment,
+    t0,
+    packageMs,
+    uploadMs,
+    missingBuildEnvKeys,
+    cacheReused: cacheReusedDeployment !== null
+  });
+}
+async function finalizeDeploy(opts) {
+  const { ctx, config: config2, input, app, firstDeploy, tarball, t0, packageMs, uploadMs, missingBuildEnvKeys, cacheReused } = opts;
+  let deployment = opts.deployment;
   const replacedPreview = deployment.replacedPreview === true;
   if (replacedPreview) {
     ctx.status("Replaced previous preview...");
   }
-  const uploadMs = Date.now() - uploadStart;
   if (input.waitForLive === false) {
     ctx.status(`Queued (${deployment.id}) — resume with percher_wait_for_deploy.`);
     return {
@@ -115426,7 +115547,7 @@ async function executeDeploy(opts) {
     firstDeploy: firstDeploy || undefined,
     cacheHit,
     cacheStatus,
-    cacheReused: cacheReusedDeployment !== null || undefined,
+    cacheReused: cacheReused || undefined,
     missingBuildEnvKeys: missingBuildEnvKeys.length > 0 ? missingBuildEnvKeys : undefined,
     traceId: deployment.id,
     recovery: RECOVERY_NONE,
@@ -115665,6 +115786,18 @@ function emitPreflight(ctx, config2, tarball) {
     ctx.status(line);
   }
 }
+// ../core/dist/commands/publish-inline.js
+var publishInlineInputSchema = exports_external.object({
+  name: exports_external.string().optional().describe("Override the app name from percher.toml. Optional when percher.toml sets [app].name."),
+  files: exports_external.array(exports_external.object({
+    path: exports_external.string().min(1).describe("Repo-relative path (no leading / and no ..)."),
+    content: exports_external.string().describe("UTF-8 file contents.")
+  })).min(1).describe("Inline source files. MUST include a percher.toml."),
+  preview: exports_external.boolean().optional().describe("Deploy as a preview (does not replace the live version)."),
+  message: exports_external.string().optional().describe("Deploy note (visible in deploy history)."),
+  noCache: exports_external.boolean().optional().describe("Skip the image cache and force a fresh build."),
+  waitForLive: exports_external.boolean().optional().describe("If true (default), block until the deploy is live or failed. If false, return as soon as it is queued so the agent can resume with percher_wait_for_deploy.")
+});
 // ../core/dist/commands/push.js
 import { existsSync as existsSync16 } from "node:fs";
 import { join as join25 } from "node:path";
@@ -117314,13 +117447,23 @@ function registerAccountCommands(cli, ctx) {
       return;
     }
     await writeLine(ctx, import_picocolors2.default.bold("Percher MCP server"));
-    await writeLine(ctx, import_picocolors2.default.dim("Add this entry to your MCP-aware client:"));
     await writeLine(ctx, "");
+    await writeLine(ctx, import_picocolors2.default.bold("Local (npx) — full tool set, reads your project files:"));
     await writeLine(ctx, JSON.stringify(result.config, null, 2));
     await writeLine(ctx, "");
+    await writeLine(ctx, import_picocolors2.default.bold("Hosted connector — add this URL, OAuth login in the browser (no token):"));
+    await writeLine(ctx, `  ${result.hosted.url}`);
+    await writeLine(ctx, "");
     await writeLine(ctx, import_picocolors2.default.bold("Where to paste:"));
     for (const loc of result.installLocations) {
       await writeLine(ctx, `  ${loc.client.padEnd(28)} ${import_picocolors2.default.dim(loc.path)}`);
+      if (loc.note) {
+        await writeLine(ctx, `  ${"".padEnd(28)} ${import_picocolors2.default.dim(loc.note)}`);
+      }
+    }
+    await writeLine(ctx, "");
+    for (const note of result.notes) {
+      await writeLine(ctx, import_picocolors2.default.dim(note));
     }
     await writeLine(ctx, "");
     await writeLine(ctx, import_picocolors2.default.dim("Once installed, your assistant gets percher_publish + 28 other tools."));
@@ -119048,7 +119191,7 @@ async function renderError(stderr, error48) {
 // package.json
 var package_default = {
   name: "percher",
-  version: "0.5.10",
+  version: "0.5.11",
   description: "CLI for the Percher hosting platform — publish apps with one command",
   type: "module",
   bin: {