percher 0.5.10 → 0.5.12

package/dist/bin/percher.js

@@ -90873,6 +90873,46 @@ var CAC = class extends EventTarget {
 };
 var cac = (name = "") => new CAC(name);
 
+// ../shared/dist/app-name.js
+var APP_NAME_RE = /^[a-z][a-z0-9-]{2,39}$/;
+// ../shared/dist/limits.js
+var MAX_TARBALL_BYTES = 500 * 1024 * 1024;
+var MAX_INLINE_PUBLISH_BYTES = 25 * 1024 * 1024;
+// ../shared/dist/logs.js
+var MAX_LOG_SEARCH_LENGTH = 256;
+// ../shared/dist/platform-env.js
+var PERCHER_INJECTED_ENV_KEYS = new Set([
+  "NODE_ENV",
+  "PORT",
+  "DATABASE_URL",
+  "POCKETBASE_URL",
+  "POCKETBASE_ADMIN_EMAIL",
+  "POCKETBASE_ADMIN_PASSWORD",
+  "PERCHER_APP_NAME",
+  "PERCHER_APP_URL",
+  "HTTP_PROXY",
+  "HTTPS_PROXY",
+  "NO_PROXY",
+  "NODE_USE_ENV_PROXY"
+]);
+var PROXY_LOWERCASE_ALIASES = new Set([
+  "http_proxy",
+  "https_proxy",
+  "no_proxy"
+]);
+// ../shared/dist/runtime.js
+var DEFAULT_NODE_VERSION_MAJOR = "24";
+var DEFAULT_NODE_VERSION_LABEL = `${DEFAULT_NODE_VERSION_MAJOR} LTS`;
+// ../shared/dist/timeouts.js
+var TIMEOUTS = {
+  workerBuildSubprocess: 10 * 60000,
+  apiToWorkerBuildFetch: 11 * 60000,
+  clientPublishPoll: 12 * 60000,
+  workerHealthcheck: 5000,
+  watchdogList: 15000,
+  mcpWaitDeployDefault: 30000,
+  mcpWaitDeployMax: 12 * 60000
+};
 // ../toml/dist/errors.js
 class PercherTomlError extends Error {
   code;
@@ -104440,45 +104480,6 @@ function date4(params) {
 
 // ../../node_modules/.bun/zod@4.3.6/node_modules/zod/v4/classic/external.js
 config(en_default());
-// ../shared/dist/app-name.js
-var APP_NAME_RE = /^[a-z][a-z0-9-]{2,39}$/;
-// ../shared/dist/limits.js
-var MAX_TARBALL_BYTES = 500 * 1024 * 1024;
-// ../shared/dist/logs.js
-var MAX_LOG_SEARCH_LENGTH = 256;
-// ../shared/dist/platform-env.js
-var PERCHER_INJECTED_ENV_KEYS = new Set([
-  "NODE_ENV",
-  "PORT",
-  "DATABASE_URL",
-  "POCKETBASE_URL",
-  "POCKETBASE_ADMIN_EMAIL",
-  "POCKETBASE_ADMIN_PASSWORD",
-  "PERCHER_APP_NAME",
-  "PERCHER_APP_URL",
-  "HTTP_PROXY",
-  "HTTPS_PROXY",
-  "NO_PROXY",
-  "NODE_USE_ENV_PROXY"
-]);
-var PROXY_LOWERCASE_ALIASES = new Set([
-  "http_proxy",
-  "https_proxy",
-  "no_proxy"
-]);
-// ../shared/dist/runtime.js
-var DEFAULT_NODE_VERSION_MAJOR = "24";
-var DEFAULT_NODE_VERSION_LABEL = `${DEFAULT_NODE_VERSION_MAJOR} LTS`;
-// ../shared/dist/timeouts.js
-var TIMEOUTS = {
-  workerBuildSubprocess: 10 * 60000,
-  apiToWorkerBuildFetch: 11 * 60000,
-  clientPublishPoll: 12 * 60000,
-  workerHealthcheck: 5000,
-  watchdogList: 15000,
-  mcpWaitDeployDefault: 30000,
-  mcpWaitDeployMax: 12 * 60000
-};
 // ../toml/dist/schema.js
 var appSchema = exports_external.object({
   name: exports_external.string().regex(APP_NAME_RE, "must be 3–40 chars, lowercase, start with a letter, [a-z0-9-] only"),
@@ -105963,6 +105964,12 @@ class AccountResource {
   revokeToken(id) {
     return this.http.delete(`/account/tokens/${encodeURIComponent(id)}`);
   }
+  listOAuthGrants() {
+    return this.http.get("/account/oauth-grants");
+  }
+  revokeOAuthGrant(grantId) {
+    return this.http.delete(`/account/oauth-grants/${encodeURIComponent(grantId)}`);
+  }
   exportData() {
     return this.http.get("/account/export");
   }
@@ -106058,12 +106065,43 @@ class AppsResource {
     }
     return this.http.postBinary(`/apps/${encodeURIComponent(id)}/deploys${qs ? `?${qs}` : ""}`, input.tarball, headers);
   }
+  publishInline(input) {
+    const params = new URLSearchParams;
+    params.set("name", input.name);
+    params.set("runtime", input.runtime);
+    if (input.framework)
+      params.set("framework", input.framework);
+    if (input.type === "preview")
+      params.set("type", "preview");
+    if (input.note)
+      params.set("note", input.note);
+    if (input.noCache)
+      params.set("noCache", "1");
+    const headers = {};
+    if (input.tarballHash)
+      headers["X-Tarball-Hash"] = input.tarballHash;
+    return this.http.postBinary(`/apps/publish?${params.toString()}`, input.tarball, headers);
+  }
   promotePreview(appRef, deployId) {
     return this.http.post(`/apps/${encodeURIComponent(appRef)}/deploys/${encodeURIComponent(deployId)}/promote`, {});
   }
   rerunDeploy(appRef, deployId) {
     return this.http.post(`/apps/${encodeURIComponent(appRef)}/deploys/${encodeURIComponent(deployId)}/rerun`, {});
   }
+  deployLatestCommit(appRef, input) {
+    return this.http.post(`/apps/${encodeURIComponent(appRef)}/deploys/from-latest-commit`, input ?? {});
+  }
+  publishFromGit(input) {
+    const params = new URLSearchParams;
+    params.set("url", input.url);
+    if (input.name)
+      params.set("name", input.name);
+    if (input.branch)
+      params.set("branch", input.branch);
+    if (input.note)
+      params.set("note", input.note);
+    return this.http.post(`/apps/publish-from-git?${params.toString()}`, {});
+  }
   setCrashAnalysisEnabled(appRef, enabled) {
     return this.http.put(`/apps/${encodeURIComponent(appRef)}/crash-analysis`, {
       crashAnalysisEnabled: enabled
@@ -106368,6 +106406,15 @@ class DataResource {
   getAdminLink(appRef) {
     return this.http.get(`/apps/${encodeURIComponent(appRef)}/data/admin-link`);
   }
+  setOAuthProvider(appRef, body) {
+    return this.http.post(`/apps/${encodeURIComponent(appRef)}/data/oauth`, body);
+  }
+  getOAuthStatus(appRef) {
+    return this.http.get(`/apps/${encodeURIComponent(appRef)}/data/oauth`);
+  }
+  removeOAuthProvider(appRef, provider) {
+    return this.http.delete(`/apps/${encodeURIComponent(appRef)}/data/oauth/${encodeURIComponent(provider)}`);
+  }
 }
 
 // ../client/dist/resources/env.js
@@ -106702,9 +106749,10 @@ class PercherClient {
   invites;
   transfers;
   constructor(options = {}) {
-    const defaults = loadConfig();
-    this.apiUrl = options.apiUrl ?? defaults.apiUrl;
-    this.token = options.token !== undefined ? options.token : defaults.token;
+    const bothExplicit = options.apiUrl !== undefined && options.token !== undefined;
+    const defaults = bothExplicit ? undefined : loadConfig();
+    this.apiUrl = options.apiUrl ?? defaults?.apiUrl ?? "";
+    this.token = options.token !== undefined ? options.token : defaults?.token ?? null;
     this.sessionId = options.sessionId;
     const http = new Http({
       apiUrl: this.apiUrl,
@@ -106967,6 +107015,49 @@ async function dataExport(ctx, input) {
     exportedAt: new Date().toISOString()
   };
 }
+// ../core/dist/commands/data-oauth.js
+var dataOauthInputSchema = exports_external.object({
+  app: exports_external.string().optional(),
+  provider: exports_external.string().default("google"),
+  clientId: exports_external.string().optional(),
+  clientSecret: exports_external.string().optional(),
+  remove: exports_external.boolean().optional(),
+  json: exports_external.boolean().optional()
+});
+async function dataOauth(ctx, input = { provider: "google" }) {
+  const name = input.app ?? readPercherTomlAppName(ctx.cwd);
+  if (!name) {
+    throw new PercherCoreError("No app specified and no percher.toml found", {
+      code: "data.no-app",
+      hint: "Pass an app name or run from a directory with percher.toml."
+    });
+  }
+  const provider = input.provider || "google";
+  if (input.remove) {
+    await ctx.client.data.removeOAuthProvider(name, provider);
+    return { action: "removed", provider };
+  }
+  if (input.clientId && input.clientSecret) {
+    const res = await ctx.client.data.setOAuthProvider(name, {
+      provider,
+      clientId: input.clientId,
+      clientSecret: input.clientSecret
+    });
+    return {
+      action: "set",
+      provider: res.provider,
+      redirectUri: res.redirectUri,
+      note: res.note
+    };
+  }
+  const status = await ctx.client.data.getOAuthStatus(name);
+  return {
+    action: "status",
+    provider,
+    providers: status.providers,
+    redirectUri: status.redirectUri
+  };
+}
 // ../core/dist/commands/delete.js
 var deleteInputSchema = exports_external.object({
   app: exports_external.string().optional().describe("App name to delete (defaults to percher.toml app name)"),
@@ -106988,427 +107079,278 @@ async function deleteApp(ctx, input) {
   }
   await ctx.client.apps.delete(name);
 }
-// ../core/dist/commands/deploys.js
-var deploysListInputSchema = exports_external.object({
-  app: exports_external.string().optional(),
-  limit: exports_external.number().int().positive().max(100).optional()
-});
-var deploysInspectInputSchema = exports_external.object({
-  app: exports_external.string().optional(),
-  id: exports_external.string().optional(),
-  latestFailed: exports_external.boolean().optional()
-}).superRefine((val, ctx) => {
-  if (!val.id && !val.latestFailed) {
-    ctx.addIssue({
-      code: exports_external.ZodIssueCode.custom,
-      message: "either `id` or `latestFailed: true` must be provided"
-    });
-  }
-});
-function resolveAppName(ctx, app) {
-  const name = app ?? readPercherTomlAppName(ctx.cwd);
-  if (!name) {
-    throw new PercherCoreError("No app specified and no percher.toml found", {
-      code: "deploys.no-app",
-      hint: "Pass --app <name> or run from a directory with percher.toml."
-    });
+// ../core/dist/poll-deployment.js
+async function pollDeployment(opts) {
+  const terminal = opts.terminal ?? ["live", "failed"];
+  const intervalMs = opts.intervalMs ?? 2000;
+  const timeoutMs = opts.timeoutMs ?? TIMEOUTS.clientPublishPoll;
+  const maxRetries = opts.maxRetries ?? 5;
+  let deployment = opts.initial;
+  const startedAt = Date.now();
+  const seenEventIds = new Set;
+  if (opts.onEvent) {
+    await drainNewEvents(opts, deployment.id, seenEventIds);
   }
-  return name;
-}
-async function deploysList(ctx, input = {}) {
-  const name = resolveAppName(ctx, input.app);
-  return ctx.client.apps.listDeploys(name, { limit: input.limit ?? 10 });
-}
-async function deploysInspect(ctx, input) {
-  const name = resolveAppName(ctx, input.app);
-  let deployId = input.id;
-  if (!deployId && input.latestFailed) {
-    const recent = await ctx.client.apps.listDeploys(name, { limit: 25 });
-    const failed = recent.find((d) => d.status === "failed");
-    if (!failed) {
-      throw new PercherCoreError(`No failed deploys found for "${name}"`, {
-        code: "deploys.no-failed",
-        hint: "Try `percher deploys` to list recent deploys, or omit --latest-failed."
-      });
+  while (!terminal.includes(deployment.status)) {
+    if (Date.now() - startedAt > timeoutMs) {
+      opts.onTimeout(deployment);
+    }
+    opts.onTick?.(deployment);
+    await new Promise((r) => setTimeout(r, intervalMs));
+    let attempt = 0;
+    let polled = false;
+    while (!polled) {
+      try {
+        deployment = await opts.ctx.client.apps.getDeployment(opts.appId, deployment.id);
+        polled = true;
+      } catch (err) {
+        attempt++;
+        const isNetwork = isTransientNetworkError(err);
+        if (!isNetwork || attempt >= maxRetries) {
+          if (isNetwork) {
+            const msg = err.message ?? String(err);
+            throw new Error(`${msg}
+
+The deploy may already be live — your network connection dropped mid-poll. Check with: percher deploys list ${opts.appName}`, { cause: err });
+          }
+          throw err;
+        }
+        const backoff = (opts.backoffMs ?? ((n) => 1000 * 2 ** (n - 1)))(attempt);
+        await new Promise((r) => setTimeout(r, backoff));
+      }
+    }
+    if (opts.onEvent) {
+      await drainNewEvents(opts, deployment.id, seenEventIds);
     }
-    deployId = failed.id;
-  }
-  if (!deployId) {
-    throw new PercherCoreError("Deploy ID is required", {
-      code: "deploys.no-id"
-    });
   }
-  const deploy = await ctx.client.apps.getDeployment(name, deployId);
-  let buildLog = null;
+  return deployment;
+}
+async function drainNewEvents(opts, deployId, seenEventIds) {
+  if (!opts.onEvent)
+    return;
   try {
-    const log = await ctx.client.apps.getBuildLog(name, deployId);
-    buildLog = log.length > 0 ? log : null;
-  } catch (err) {
-    if (err instanceof PercherApiError && err.status === 404) {
-      buildLog = null;
-    } else {
-      throw err;
+    const { events } = await opts.ctx.client.apps.getDeployEvents(opts.appId, deployId);
+    for (const event of events) {
+      if (seenEventIds.has(event.id))
+        continue;
+      seenEventIds.add(event.id);
+      opts.onEvent(event);
     }
-  }
-  return { deploy, buildLog };
+  } catch {}
 }
-// ../core/dist/commands/dev.js
-import { existsSync as existsSync8 } from "node:fs";
-import { join as join11 } from "node:path";
-
-// ../core/dist/tarball.js
-var import_ignore = __toESM(require_ignore(), 1);
-import { createHash as createHash2 } from "node:crypto";
-import { existsSync as existsSync6, readdirSync as readdirSync2, readFileSync as readFileSync6, statSync as statSync2 } from "node:fs";
-import { join as join9, relative as relative3, sep as sep2 } from "node:path";
-import { Readable } from "node:stream";
-import { createGzip } from "node:zlib";
-
-// ../../node_modules/.bun/tar-stream@3.1.8/node_modules/tar-stream/index.js
-var $extract = require_extract();
-var $pack = require_pack();
 
-// ../core/dist/tarball.js
-var DEFAULT_IGNORE = [
-  "node_modules",
-  ".git",
-  "dist",
-  ".next",
-  ".svelte-kit",
-  "build",
-  "coverage",
-  ".env",
-  ".env.*",
-  ".bun",
-  "*.log",
-  ".DS_Store"
-];
-function* walk(dir, baseDir, ig) {
-  const entries = readdirSync2(dir);
-  for (const name of entries) {
-    const full = join9(dir, name);
-    const rel = relative3(baseDir, full).split(sep2).join("/");
-    if (ig.ignores(rel))
-      continue;
-    const stats = statSync2(full);
-    if (stats.isDirectory()) {
-      if (ig.ignores(`${rel}/`))
-        continue;
-      yield* walk(full, baseDir, ig);
-    } else if (stats.isFile()) {
-      yield rel;
-    }
-  }
-}
-async function createTarball(options) {
-  const ig = import_ignore.default();
-  ig.add(DEFAULT_IGNORE);
-  const gitignorePath = join9(options.cwd, ".gitignore");
-  if (existsSync6(gitignorePath)) {
-    ig.add(readFileSync6(gitignorePath, "utf8"));
-  }
-  if (options.extraIgnore)
-    ig.add(options.extraIgnore);
-  const fileBuffers = [];
-  for (const rel of walk(options.cwd, options.cwd, ig)) {
-    const data2 = readFileSync6(join9(options.cwd, rel));
-    fileBuffers.push({ path: rel, size: data2.length, data: data2 });
-  }
-  fileBuffers.sort((a, b) => a.path < b.path ? -1 : a.path > b.path ? 1 : 0);
-  const totalBytes = fileBuffers.reduce((sum, f) => sum + f.size, 0);
-  const contentHasher = createHash2("sha256");
-  for (const f of fileBuffers) {
-    contentHasher.update(`PATH:${f.path.length}:${f.path}
-`);
-    contentHasher.update(`SIZE:${f.size}
-`);
-    contentHasher.update(f.data);
-    contentHasher.update(`
-`);
-  }
-  const contentHash = contentHasher.digest("hex");
-  const pack = $pack();
-  (async () => {
-    for (const file2 of fileBuffers) {
-      await new Promise((resolve7, reject) => {
-        pack.entry({ name: file2.path, size: file2.data.length }, file2.data, (err) => err ? reject(err) : resolve7());
-      });
-    }
-    pack.finalize();
-  })();
-  const gzip = createGzip();
-  const nodeStream = pack.pipe(gzip);
-  const webStream = Readable.toWeb(nodeStream);
-  const topFiles = [...fileBuffers].sort((a, b) => b.size - a.size).slice(0, 5).map((f) => ({ path: f.path, size: f.size }));
+// ../core/dist/recovery.js
+function recoveryNone(opts = {}) {
   return {
-    stream: webStream,
-    bytes: totalBytes,
-    fileCount: fileBuffers.length,
-    topFiles,
-    contentHash
+    retryable: false,
+    nextAction: "none",
+    reasonCode: opts.reasonCode ?? "none",
+    ...opts.url !== undefined ? { url: opts.url } : {}
   };
 }
-
-// ../core/dist/watcher.js
-var import_ignore2 = __toESM(require_ignore(), 1);
-import { existsSync as existsSync7, readFileSync as readFileSync7, watch } from "node:fs";
-import { join as join10, sep as sep3 } from "node:path";
-var DEFAULT_IGNORE2 = [
-  "node_modules",
-  ".git",
-  "dist",
-  ".next",
-  ".svelte-kit",
-  "build",
-  "coverage",
-  ".env",
-  ".env.*",
-  ".bun",
-  "*.log",
-  ".DS_Store",
-  "__pycache__"
-];
-function createWatcher(options) {
-  const debounceMs = options.debounceMs ?? 500;
-  const ig = import_ignore2.default();
-  ig.add(DEFAULT_IGNORE2);
-  const gitignorePath = join10(options.cwd, ".gitignore");
-  if (existsSync7(gitignorePath)) {
-    ig.add(readFileSync7(gitignorePath, "utf8"));
-  }
-  if (options.extraIgnore)
-    ig.add(options.extraIgnore);
-  let timer = null;
-  let pending = new Set;
-  const fsWatcher = watch(options.cwd, { recursive: true }, (_event, filename) => {
-    if (!filename)
-      return;
-    const rel = filename.split(sep3).join("/");
-    if (ig.ignores(rel))
-      return;
-    pending.add(rel);
-    if (timer)
-      clearTimeout(timer);
-    timer = setTimeout(() => {
-      const files = [...pending];
-      pending = new Set;
-      timer = null;
-      if (files.length > 0) {
-        options.onChange(files);
-      }
-    }, debounceMs);
-  });
+function recoveryLogin(opts = {}) {
   return {
-    close() {
-      if (timer)
-        clearTimeout(timer);
-      fsWatcher.close();
-    }
+    retryable: false,
+    nextAction: "open_login",
+    suggestedTool: "percher_login",
+    args: {},
+    reasonCode: opts.reasonCode ?? "auth_required"
   };
 }
-
-// ../core/dist/commands/dev.js
-var devInputSchema = exports_external.object({
-  app: exports_external.string().optional()
-});
-async function loadConfig2(ctx, appOverride) {
-  const tomlPath = join11(ctx.cwd, "percher.toml");
-  if (!existsSync8(tomlPath)) {
-    throw new PercherCoreError("No percher.toml found. Run: percher init", {
-      code: "dev.no-app",
-      hint: "Create a percher.toml first with `percher init`."
-    });
-  }
-  const config2 = await parseFile(tomlPath);
-  if (appOverride)
-    return { ...config2, app: { ...config2.app, name: appOverride } };
-  return config2;
+function recoveryWait(opts) {
+  return {
+    retryable: false,
+    nextAction: "wait_deploy",
+    suggestedTool: "percher_wait_for_deploy",
+    args: {
+      app: opts.app,
+      deployId: opts.deployId,
+      timeoutSeconds: opts.timeoutSeconds ?? TIMEOUTS.mcpWaitDeployDefault / 1000
+    },
+    reasonCode: opts.reasonCode
+  };
 }
-async function ensureApp(ctx, config2) {
-  try {
-    return await ctx.client.apps.get(config2.app.name);
-  } catch (err) {
-    if (err.code === "APP_NOT_FOUND") {
-      return ctx.client.apps.create({
-        name: config2.app.name,
-        runtime: config2.app.runtime,
-        framework: config2.app.framework
-      });
-    }
-    throw err;
-  }
+function recoveryDoctor(opts) {
+  const args = {};
+  if (opts.app !== undefined)
+    args.app = opts.app;
+  if (opts.deployId !== undefined)
+    args.deployId = opts.deployId;
+  if (opts.mode !== undefined)
+    args.mode = opts.mode;
+  return {
+    retryable: false,
+    nextAction: "run_doctor",
+    suggestedTool: "percher_doctor",
+    args,
+    reasonCode: opts.reasonCode,
+    ...opts.alternativeActions !== undefined ? { alternativeActions: opts.alternativeActions } : {}
+  };
 }
-async function doPush(ctx, config2, callbacks) {
-  const tarball = await createTarball({ cwd: ctx.cwd, config: config2 });
-  const app = await ensureApp(ctx, config2);
-  await callbacks.writeLine(`Pushing ${tarball.fileCount} files (${(tarball.bytes / 1024).toFixed(0)} KB)...`);
-  const deployResponse = await ctx.client.apps.deploy(app.id, { tarball: tarball.stream });
-  if (deployResponse.status === "already_in_progress") {
-    const active = deployResponse;
-    await callbacks.writeLine(`  Skipped — deploy already in progress (${active.deployId}, ${active.deployStatus}).`);
-    return { success: false, appId: app.id };
-  }
-  let deployment = deployResponse;
-  const startedAt = Date.now();
-  const timeoutMs = TIMEOUTS.clientPublishPoll;
-  const pollInterval = 2000;
-  let lastStatus = "";
-  while (deployment.status !== "live" && deployment.status !== "failed") {
-    if (Date.now() - startedAt > timeoutMs) {
-      await callbacks.writeLine("Deploy timed out");
-      return { success: false, appId: app.id };
-    }
-    if (callbacks.signal.aborted)
-      return { success: false, appId: app.id };
-    if (deployment.status !== lastStatus) {
-      lastStatus = deployment.status;
-      await callbacks.writeLine(`  ${deployment.status}...`);
-    }
-    await new Promise((r) => setTimeout(r, pollInterval));
-    deployment = await ctx.client.apps.getDeployment(app.id, deployment.id);
-  }
-  if (deployment.status === "failed") {
-    try {
-      const insp = await ctx.client.apps.getDeployment(app.id, deployment.id);
-      if (insp.errorMessage) {
-        await callbacks.writeLine("Deploy failed:");
-        for (const line of insp.errorMessage.split(`
-`).slice(0, 30)) {
-          await callbacks.writeLine(`  ${line}`);
-        }
-      } else {
-        await callbacks.writeLine("Deploy failed.");
-      }
-    } catch {
-      await callbacks.writeLine("Deploy failed.");
-    }
-    return { success: false, appId: app.id };
-  }
-  await callbacks.writeLine(`Live at ${deployment.url ?? ""}`);
-  return { success: true, appId: app.id };
+function recoveryEnv(opts) {
+  const args = {};
+  if (opts.app !== undefined)
+    args.app = opts.app;
+  if (opts.keys.length > 0)
+    args.keys = opts.keys;
+  return {
+    retryable: false,
+    nextAction: "set_env_vars",
+    suggestedTool: "percher_env_set",
+    args,
+    reasonCode: opts.reasonCode ?? "missing_env"
+  };
 }
-function formatLogLine(l) {
-  const level = l.level.toUpperCase().padEnd(5);
-  const src = l.source === "runtime" ? "" : `[${l.source}] `;
-  return `  ${src}${level} ${l.message}`;
+function recoveryFixConfig(opts) {
+  return {
+    retryable: false,
+    nextAction: "fix_config",
+    problems: opts.problems,
+    reasonCode: opts.reasonCode ?? "config_invalid"
+  };
 }
-async function streamLogs(ctx, appId, callbacks, signal) {
-  try {
-    for await (const line of ctx.client.logs.stream(appId, { signal })) {
-      if (signal.aborted)
-        return;
-      await callbacks.writeLine(formatLogLine(line));
-    }
-  } catch (err) {
-    if (signal.aborted)
-      return;
-    await callbacks.writeLine(`Log stream error: ${err.message}`);
-  }
+function recoveryFixProblems(opts) {
+  return {
+    retryable: false,
+    nextAction: "fix_problems",
+    problems: opts.problems,
+    reasonCode: opts.reasonCode ?? "build_failed",
+    ...opts.alternativeActions !== undefined ? { alternativeActions: opts.alternativeActions } : {}
+  };
 }
-async function dev(ctx, input, callbacks) {
-  const config2 = await loadConfig2(ctx, input.app);
-  const app = await ensureApp(ctx, config2);
-  await callbacks.writeLine(`App: ${app.url}`);
-  await callbacks.writeLine("Watching for changes (logs streaming below)...");
-  await callbacks.writeLine("");
-  const logStream = { ctrl: null };
-  function startLogStream(appId) {
-    logStream.ctrl?.abort();
-    logStream.ctrl = new AbortController;
-    const linkedSignal = logStream.ctrl.signal;
-    streamLogs(ctx, appId, callbacks, linkedSignal);
+function recoveryRetry(opts) {
+  return {
+    retryable: true,
+    nextAction: "retry",
+    suggestedTool: opts.suggestedTool,
+    args: opts.args,
+    reasonCode: opts.reasonCode
+  };
+}
+function recoveryAsk(opts) {
+  if (!opts.prompt || opts.prompt.trim().length === 0) {
+    throw new Error("recoveryAsk requires a non-empty prompt");
   }
-  startLogStream(app.id);
-  let busy = false;
-  let queued = null;
-  async function handleChange(files) {
-    if (busy) {
-      queued = files;
-      return;
-    }
-    busy = true;
-    try {
-      const shortList = files.length <= 3 ? files.join(", ") : `${files.slice(0, 3).join(", ")} +${files.length - 3} more`;
-      await callbacks.writeLine(`Change detected: ${shortList}`);
-      logStream.ctrl?.abort();
-      const shouldPush = await callbacks.onFilesChanged(files);
-      if (shouldPush) {
-        try {
-          const freshConfig = await loadConfig2(ctx, input.app);
-          const result = await doPush(ctx, freshConfig, callbacks);
-          if (result.success) {
-            startLogStream(result.appId);
-          } else {
-            startLogStream(app.id);
+  return {
+    retryable: opts.retryable ?? false,
+    nextAction: "ask_user",
+    prompt: opts.prompt,
+    ...opts.options !== undefined ? { options: opts.options } : {},
+    reasonCode: opts.reasonCode
+  };
+}
+function recoveryInspectBuildLog(opts) {
+  const args = opts.deployId ? { id: opts.deployId, app: opts.app } : { latestFailed: true, app: opts.app };
+  return {
+    retryable: false,
+    nextAction: "inspect_build_log",
+    suggestedTool: "percher_deploys_inspect",
+    args,
+    reasonCode: opts.reasonCode ?? "build_failed",
+    ...opts.alternativeActions !== undefined ? { alternativeActions: opts.alternativeActions } : {}
+  };
+}
+var RECOVERY_NONE = recoveryNone();
+var RECOVERY_NEEDS_LOGIN = recoveryLogin();
+function buildProblemToRecoveryProblem(p) {
+  const file2 = p.file ?? "";
+  const message = p.hint && p.hint.length > 0 ? `${p.message}
+Hint: ${p.hint}` : p.message;
+  return {
+    file: file2,
+    ...typeof p.line === "number" ? { line: p.line } : {},
+    ...typeof p.column === "number" ? { column: p.column } : {},
+    message
+  };
+}
+function recoveryFromErrorClass(errorClass, failure = {}) {
+  switch (errorClass) {
+    case "missing_env":
+      return recoveryEnv({
+        keys: failure.missingEnvVars ?? [],
+        reasonCode: "missing_env"
+      });
+    case "infra_unavailable":
+      return recoveryRetry({
+        suggestedTool: "percher_publish",
+        args: failure.publishInput ?? {},
+        reasonCode: "infra_unavailable"
+      });
+    case "platform_at_capacity":
+      return recoveryRetry({
+        suggestedTool: "percher_publish",
+        args: failure.publishInput ?? {},
+        reasonCode: "infra_transient"
+      });
+    case "config_invalid":
+      return recoveryFixConfig({
+        problems: [
+          {
+            file: "percher.toml",
+            message: "percher.toml failed validation — fix the file and re-run."
           }
-        } catch (err) {
-          await callbacks.writeLine(`Push error: ${err.message}`);
-          startLogStream(app.id);
-        }
-      } else {
-        startLogStream(app.id);
+        ],
+        reasonCode: "config_invalid"
+      });
+    case "build_failed":
+    case "missing_dependency":
+    case "health_check_timeout":
+    case "port_mismatch":
+    case "permission_denied":
+    case "runtime_crash":
+    case "oom_killed": {
+      const fileProblems = (failure.problems ?? []).filter((p) => p.file);
+      const reproduceAlt = failure.deployId ? {
+        action: "reproduce_locally",
+        suggestedTool: "percher_reproduce",
+        args: { deployId: failure.deployId, app: failure.appName },
+        when: "after the primary path didn't surface a clear fix and the user has nixpacks installed locally"
+      } : undefined;
+      if (fileProblems.length > 0) {
+        return recoveryFixProblems({
+          problems: fileProblems.map(buildProblemToRecoveryProblem),
+          reasonCode: "build_failed",
+          ...reproduceAlt ? {
+            alternativeActions: [
+              {
+                ...reproduceAlt,
+                when: "after fixing the file-located problems didn't make the build pass and the user has nixpacks installed locally"
+              }
+            ]
+          } : {}
+        });
       }
-    } finally {
-      busy = false;
-      if (queued) {
-        const next = queued;
-        queued = null;
-        await handleChange(next);
+      const inspectAlt = {
+        action: "inspect_build_log",
+        suggestedTool: "percher_deploys_inspect",
+        args: failure.deployId ? { id: failure.deployId, app: failure.appName } : { latestFailed: true, app: failure.appName },
+        when: "after percher_doctor's recovery didn't yield a fix and you want to read the raw build log directly"
+      };
+      const alternativeActions = [inspectAlt];
+      if (reproduceAlt) {
+        alternativeActions.push({
+          ...reproduceAlt,
+          when: "after percher_doctor + percher_deploys_inspect didn't surface a clear fix and the user has nixpacks installed locally"
+        });
       }
+      return recoveryDoctor({
+        app: failure.appName,
+        deployId: failure.deployId,
+        mode: "deploy",
+        reasonCode: "build_failed",
+        alternativeActions
+      });
     }
+    default:
+      return recoveryAsk({
+        prompt: "Unexpected failure — Percher couldn't classify this error. Try `percher doctor` for diagnostics, or surface the error to the user.",
+        reasonCode: "unknown"
+      });
   }
-  const devConfig = config2.dev;
-  const watcher = createWatcher({
-    cwd: ctx.cwd,
-    extraIgnore: devConfig?.ignore,
-    debounceMs: devConfig?.debounce,
-    onChange(files) {
-      handleChange(files);
-    }
-  });
-  try {
-    await new Promise((resolve7) => {
-      if (callbacks.signal.aborted) {
-        resolve7();
-        return;
-      }
-      callbacks.signal.addEventListener("abort", () => resolve7(), { once: true });
-    });
-  } finally {
-    logStream.ctrl?.abort();
-    watcher.close();
-  }
-}
-// ../core/dist/commands/diagnose.js
-var diagnoseInputSchema = exports_external.object({
-  app: exports_external.string().optional(),
-  logLines: exports_external.number().int().min(0).max(200).optional(),
-  recencyHours: exports_external.number().positive().max(24 * 30).optional()
-});
-// ../core/dist/commands/diff.js
-var diffInputSchema = exports_external.object({
-  app: exports_external.string().optional(),
-  base: exports_external.string().optional(),
-  head: exports_external.string().optional(),
-  patch: exports_external.boolean().optional()
-});
-async function diff(ctx, input = {}) {
-  const name = input.app ?? readPercherTomlAppName(ctx.cwd);
-  if (!name) {
-    throw new PercherCoreError("No app specified and no percher.toml found", {
-      code: "diff.no-app",
-      hint: "Pass --app <name> or run from a directory with percher.toml."
-    });
-  }
-  return ctx.client.apps.getChanges(name, {
-    base: input.base,
-    head: input.head,
-    patch: input.patch
-  });
 }
-// ../core/dist/commands/doctor.js
-import { existsSync as existsSync9 } from "node:fs";
-import { join as join13 } from "node:path";
+
+// ../core/dist/commands/publish-failure.js
+import { join as join9 } from "node:path";
 
 // ../core/dist/error-classifier.js
 function extractEnvVarsFromLog(combined) {
@@ -107742,219 +107684,6 @@ ${buildLog ?? ""}`;
   return null;
 }
 
-// ../core/dist/recovery.js
-function recoveryNone(opts = {}) {
-  return {
-    retryable: false,
-    nextAction: "none",
-    reasonCode: opts.reasonCode ?? "none",
-    ...opts.url !== undefined ? { url: opts.url } : {}
-  };
-}
-function recoveryLogin(opts = {}) {
-  return {
-    retryable: false,
-    nextAction: "open_login",
-    suggestedTool: "percher_login",
-    args: {},
-    reasonCode: opts.reasonCode ?? "auth_required"
-  };
-}
-function recoveryWait(opts) {
-  return {
-    retryable: false,
-    nextAction: "wait_deploy",
-    suggestedTool: "percher_wait_for_deploy",
-    args: {
-      app: opts.app,
-      deployId: opts.deployId,
-      timeoutSeconds: opts.timeoutSeconds ?? TIMEOUTS.mcpWaitDeployDefault / 1000
-    },
-    reasonCode: opts.reasonCode
-  };
-}
-function recoveryDoctor(opts) {
-  const args = {};
-  if (opts.app !== undefined)
-    args.app = opts.app;
-  if (opts.deployId !== undefined)
-    args.deployId = opts.deployId;
-  if (opts.mode !== undefined)
-    args.mode = opts.mode;
-  return {
-    retryable: false,
-    nextAction: "run_doctor",
-    suggestedTool: "percher_doctor",
-    args,
-    reasonCode: opts.reasonCode,
-    ...opts.alternativeActions !== undefined ? { alternativeActions: opts.alternativeActions } : {}
-  };
-}
-function recoveryEnv(opts) {
-  const args = {};
-  if (opts.app !== undefined)
-    args.app = opts.app;
-  if (opts.keys.length > 0)
-    args.keys = opts.keys;
-  return {
-    retryable: false,
-    nextAction: "set_env_vars",
-    suggestedTool: "percher_env_set",
-    args,
-    reasonCode: opts.reasonCode ?? "missing_env"
-  };
-}
-function recoveryFixConfig(opts) {
-  return {
-    retryable: false,
-    nextAction: "fix_config",
-    problems: opts.problems,
-    reasonCode: opts.reasonCode ?? "config_invalid"
-  };
-}
-function recoveryFixProblems(opts) {
-  return {
-    retryable: false,
-    nextAction: "fix_problems",
-    problems: opts.problems,
-    reasonCode: opts.reasonCode ?? "build_failed",
-    ...opts.alternativeActions !== undefined ? { alternativeActions: opts.alternativeActions } : {}
-  };
-}
-function recoveryRetry(opts) {
-  return {
-    retryable: true,
-    nextAction: "retry",
-    suggestedTool: opts.suggestedTool,
-    args: opts.args,
-    reasonCode: opts.reasonCode
-  };
-}
-function recoveryAsk(opts) {
-  if (!opts.prompt || opts.prompt.trim().length === 0) {
-    throw new Error("recoveryAsk requires a non-empty prompt");
-  }
-  return {
-    retryable: opts.retryable ?? false,
-    nextAction: "ask_user",
-    prompt: opts.prompt,
-    ...opts.options !== undefined ? { options: opts.options } : {},
-    reasonCode: opts.reasonCode
-  };
-}
-function recoveryInspectBuildLog(opts) {
-  const args = opts.deployId ? { id: opts.deployId, app: opts.app } : { latestFailed: true, app: opts.app };
-  return {
-    retryable: false,
-    nextAction: "inspect_build_log",
-    suggestedTool: "percher_deploys_inspect",
-    args,
-    reasonCode: opts.reasonCode ?? "build_failed",
-    ...opts.alternativeActions !== undefined ? { alternativeActions: opts.alternativeActions } : {}
-  };
-}
-var RECOVERY_NONE = recoveryNone();
-var RECOVERY_NEEDS_LOGIN = recoveryLogin();
-function buildProblemToRecoveryProblem(p) {
-  const file2 = p.file ?? "";
-  const message = p.hint && p.hint.length > 0 ? `${p.message}
-Hint: ${p.hint}` : p.message;
-  return {
-    file: file2,
-    ...typeof p.line === "number" ? { line: p.line } : {},
-    ...typeof p.column === "number" ? { column: p.column } : {},
-    message
-  };
-}
-function recoveryFromErrorClass(errorClass, failure = {}) {
-  switch (errorClass) {
-    case "missing_env":
-      return recoveryEnv({
-        keys: failure.missingEnvVars ?? [],
-        reasonCode: "missing_env"
-      });
-    case "infra_unavailable":
-      return recoveryRetry({
-        suggestedTool: "percher_publish",
-        args: failure.publishInput ?? {},
-        reasonCode: "infra_unavailable"
-      });
-    case "platform_at_capacity":
-      return recoveryRetry({
-        suggestedTool: "percher_publish",
-        args: failure.publishInput ?? {},
-        reasonCode: "infra_transient"
-      });
-    case "config_invalid":
-      return recoveryFixConfig({
-        problems: [
-          {
-            file: "percher.toml",
-            message: "percher.toml failed validation — fix the file and re-run."
-          }
-        ],
-        reasonCode: "config_invalid"
-      });
-    case "build_failed":
-    case "missing_dependency":
-    case "health_check_timeout":
-    case "port_mismatch":
-    case "permission_denied":
-    case "runtime_crash":
-    case "oom_killed": {
-      const fileProblems = (failure.problems ?? []).filter((p) => p.file);
-      const reproduceAlt = failure.deployId ? {
-        action: "reproduce_locally",
-        suggestedTool: "percher_reproduce",
-        args: { deployId: failure.deployId, app: failure.appName },
-        when: "after the primary path didn't surface a clear fix and the user has nixpacks installed locally"
-      } : undefined;
-      if (fileProblems.length > 0) {
-        return recoveryFixProblems({
-          problems: fileProblems.map(buildProblemToRecoveryProblem),
-          reasonCode: "build_failed",
-          ...reproduceAlt ? {
-            alternativeActions: [
-              {
-                ...reproduceAlt,
-                when: "after fixing the file-located problems didn't make the build pass and the user has nixpacks installed locally"
-              }
-            ]
-          } : {}
-        });
-      }
-      const inspectAlt = {
-        action: "inspect_build_log",
-        suggestedTool: "percher_deploys_inspect",
-        args: failure.deployId ? { id: failure.deployId, app: failure.appName } : { latestFailed: true, app: failure.appName },
-        when: "after percher_doctor's recovery didn't yield a fix and you want to read the raw build log directly"
-      };
-      const alternativeActions = [inspectAlt];
-      if (reproduceAlt) {
-        alternativeActions.push({
-          ...reproduceAlt,
-          when: "after percher_doctor + percher_deploys_inspect didn't surface a clear fix and the user has nixpacks installed locally"
-        });
-      }
-      return recoveryDoctor({
-        app: failure.appName,
-        deployId: failure.deployId,
-        mode: "deploy",
-        reasonCode: "build_failed",
-        alternativeActions
-      });
-    }
-    default:
-      return recoveryAsk({
-        prompt: "Unexpected failure — Percher couldn't classify this error. Try `percher doctor` for diagnostics, or surface the error to the user.",
-        reasonCode: "unknown"
-      });
-  }
-}
-
-// ../core/dist/commands/publish-failure.js
-import { join as join12 } from "node:path";
-
 // ../core/dist/structured-error-codes.js
 var MAPPINGS = {
   WORKER_UNAVAILABLE: {
@@ -108005,128 +107734,600 @@ var MAPPINGS = {
     explanation: () => "The platform abandoned this deploy — likely because the API or build worker restarted mid-build. Your code is fine; the build never finished.",
     suggestion: "Run `percher publish` again. The new deploy will start fresh. If you see this repeatedly across multiple publishes, check status.percher.app — it implies a recurring platform issue."
   }
-};
-function classifyByErrorCode(code, rawMessage) {
-  if (!code)
-    return null;
-  const mapping = MAPPINGS[code];
-  if (!mapping)
-    return null;
+};
+function classifyByErrorCode(code, rawMessage) {
+  if (!code)
+    return null;
+  const mapping = MAPPINGS[code];
+  if (!mapping)
+    return null;
+  return {
+    title: mapping.title,
+    explanation: mapping.explanation(rawMessage),
+    suggestion: mapping.suggestion,
+    errorClass: mapping.errorClass,
+    phase: mapping.phase,
+    cause: mapping.cause,
+    relevantFiles: [],
+    missingEnvVars: []
+  };
+}
+function trimMessage(raw) {
+  const firstLine = raw.split(`
+`)[0] ?? "";
+  return firstLine.length > 200 ? `${firstLine.slice(0, 200)}…` : firstLine;
+}
+
+// ../core/dist/commands/publish-failure.js
+function tomlPathFor(cwd) {
+  return join9(cwd, "percher.toml");
+}
+async function buildFailureError(ctx, app, deployment, signal) {
+  let buildLogTail;
+  let buildLogFetchFailed = false;
+  let fullLog = "";
+  try {
+    fullLog = await ctx.client.apps.getBuildLog(app.id, deployment.id, { signal });
+    if (!fullLog && !signal?.aborted) {
+      await abortableSleep(1500, signal);
+      if (!signal?.aborted) {
+        fullLog = await ctx.client.apps.getBuildLog(app.id, deployment.id, { signal });
+      }
+    }
+    if (fullLog) {
+      const lines = fullLog.split(`
+`);
+      buildLogTail = lines.slice(-50).join(`
+`);
+    }
+  } catch {
+    buildLogFetchFailed = true;
+  }
+  const errorMessage = deployment.errorMessage ?? "";
+  const classified = classifyByErrorCode(deployment.errorCode, errorMessage) ?? classifyError(errorMessage || "Deployment failed", fullLog);
+  const rawErrorMessage = errorMessage && !buildLogTail && !classified?.explanation.includes(errorMessage) ? errorMessage : undefined;
+  const problems = deployment.problems && deployment.problems.length > 0 ? deployment.problems : undefined;
+  if (classified) {
+    return {
+      title: classified.title,
+      explanation: classified.explanation,
+      suggestion: classified.suggestion,
+      buildLogTail,
+      rawErrorMessage,
+      errorClass: classified.errorClass,
+      phase: classified.phase,
+      cause: classified.cause,
+      relevantFiles: classified.relevantFiles,
+      missingEnvVars: classified.missingEnvVars,
+      problems
+    };
+  }
+  return {
+    title: "Deployment failed",
+    explanation: errorMessage ? `The deployment failed: ${errorMessage}` : "The deployment failed. See the build log for details.",
+    suggestion: buildLogTail ? "Check the build log below for errors. Run your build command locally to reproduce, fix, and publish again." : buildLogFetchFailed ? `The deploy failed and we could not retrieve the build log (network/API error after retries). The log itself may exist on the server — fetch it directly with: percher logs ${app.name} --build ${deployment.id}` : errorMessage ? `The deploy failed with: ${errorMessage.split(`
+`)[0]}. The build log column is empty — try \`percher logs ${app.name} --build ${deployment.id}\` to fetch it directly. If it remains empty, run \`percher deploys inspect ${deployment.id}\` for full details.` : `No build log was produced — the failure happened before the build started. This usually means a Percher infra issue. Retry once, and if it persists, fetch the deploy details with: percher deploys inspect ${deployment.id}`,
+    buildLogTail,
+    errorClass: "build_failed",
+    phase: "build",
+    cause: "unknown",
+    relevantFiles: [],
+    missingEnvVars: [],
+    problems
+  };
+}
+async function classifyDeploymentFailure(opts) {
+  const { ctx, app, deployment, publishInput } = opts;
+  const error48 = await buildFailureError(ctx, app, deployment, opts.signal);
+  const recovery = error48.errorClass ? recoveryFromErrorClass(error48.errorClass, {
+    missingEnvVars: error48.missingEnvVars,
+    deployId: deployment.id,
+    appName: app.name,
+    publishInput,
+    problems: error48.problems
+  }) : recoveryAsk({
+    prompt: `${app.name} deploy ${deployment.id} failed: ${error48.title}. ${error48.suggestion}`.trim(),
+    reasonCode: "build_failed"
+  });
+  return {
+    error: error48,
+    recovery,
+    summary: `${error48.title} (${app.name}, deploy ${deployment.id}).`
+  };
+}
+async function buildFailureResult(opts) {
+  const { ctx, app, deployment, tarball, input } = opts;
+  const { error: error48, recovery, summary } = await classifyDeploymentFailure({
+    ctx,
+    app,
+    deployment,
+    publishInput: input
+  });
+  return {
+    status: "failed",
+    app,
+    deployment,
+    fileCount: tarball.fileCount,
+    bytes: tarball.bytes,
+    error: error48,
+    recovery,
+    summary,
+    configPath: tomlPathFor(ctx.cwd),
+    bundle: { fileCount: tarball.fileCount, bytes: tarball.bytes }
+  };
+}
+
+// ../core/dist/commands/deploy-repo.js
+var deployRepoInputSchema = exports_external.object({
+  app: exports_external.string().describe("App name or id (required — hosted has no cwd)."),
+  branch: exports_external.string().optional().describe("Branch to deploy. Defaults to the app's tracked branch."),
+  note: exports_external.string().optional().describe("Optional note recorded against the deploy.")
+});
+// ../core/dist/commands/deploys.js
+var deploysListInputSchema = exports_external.object({
+  app: exports_external.string().optional(),
+  limit: exports_external.number().int().positive().max(100).optional()
+});
+var deploysInspectInputSchema = exports_external.object({
+  app: exports_external.string().optional(),
+  id: exports_external.string().optional(),
+  latestFailed: exports_external.boolean().optional()
+}).superRefine((val, ctx) => {
+  if (!val.id && !val.latestFailed) {
+    ctx.addIssue({
+      code: exports_external.ZodIssueCode.custom,
+      message: "either `id` or `latestFailed: true` must be provided"
+    });
+  }
+});
+function resolveAppName(ctx, app) {
+  const name = app ?? readPercherTomlAppName(ctx.cwd);
+  if (!name) {
+    throw new PercherCoreError("No app specified and no percher.toml found", {
+      code: "deploys.no-app",
+      hint: "Pass --app <name> or run from a directory with percher.toml."
+    });
+  }
+  return name;
+}
+async function deploysList(ctx, input = {}) {
+  const name = resolveAppName(ctx, input.app);
+  return ctx.client.apps.listDeploys(name, { limit: input.limit ?? 10 });
+}
+async function deploysInspect(ctx, input) {
+  const name = resolveAppName(ctx, input.app);
+  let deployId = input.id;
+  if (!deployId && input.latestFailed) {
+    const recent = await ctx.client.apps.listDeploys(name, { limit: 25 });
+    const failed = recent.find((d) => d.status === "failed");
+    if (!failed) {
+      throw new PercherCoreError(`No failed deploys found for "${name}"`, {
+        code: "deploys.no-failed",
+        hint: "Try `percher deploys` to list recent deploys, or omit --latest-failed."
+      });
+    }
+    deployId = failed.id;
+  }
+  if (!deployId) {
+    throw new PercherCoreError("Deploy ID is required", {
+      code: "deploys.no-id"
+    });
+  }
+  const deploy = await ctx.client.apps.getDeployment(name, deployId);
+  let buildLog = null;
+  try {
+    const log = await ctx.client.apps.getBuildLog(name, deployId);
+    buildLog = log.length > 0 ? log : null;
+  } catch (err) {
+    if (err instanceof PercherApiError && err.status === 404) {
+      buildLog = null;
+    } else {
+      throw err;
+    }
+  }
+  return { deploy, buildLog };
+}
+// ../core/dist/commands/dev.js
+import { existsSync as existsSync8 } from "node:fs";
+import { join as join12 } from "node:path";
+
+// ../core/dist/tarball.js
+var import_ignore = __toESM(require_ignore(), 1);
+import { createHash as createHash2 } from "node:crypto";
+import { existsSync as existsSync6, readdirSync as readdirSync2, readFileSync as readFileSync6, statSync as statSync2 } from "node:fs";
+import { join as join10, relative as relative3, sep as sep2 } from "node:path";
+import { Readable } from "node:stream";
+import { createGzip } from "node:zlib";
+
+// ../../node_modules/.bun/tar-stream@3.1.8/node_modules/tar-stream/index.js
+var $extract = require_extract();
+var $pack = require_pack();
+
+// ../core/dist/tarball.js
+function isFilesOptions(options) {
+  return "files" in options;
+}
+var DEFAULT_IGNORE = [
+  "node_modules",
+  ".git",
+  "dist",
+  ".next",
+  ".svelte-kit",
+  "build",
+  "coverage",
+  ".env",
+  ".env.*",
+  ".bun",
+  "*.log",
+  ".DS_Store"
+];
+function* walk(dir, baseDir, ig) {
+  const entries = readdirSync2(dir);
+  for (const name of entries) {
+    const full = join10(dir, name);
+    const rel = relative3(baseDir, full).split(sep2).join("/");
+    if (ig.ignores(rel))
+      continue;
+    const stats = statSync2(full);
+    if (stats.isDirectory()) {
+      if (ig.ignores(`${rel}/`))
+        continue;
+      yield* walk(full, baseDir, ig);
+    } else if (stats.isFile()) {
+      yield rel;
+    }
+  }
+}
+function normalizeInlinePath(raw) {
+  const path = raw.replace(/\\/g, "/");
+  if (path.length === 0) {
+    throw new Error("file path must not be empty");
+  }
+  if (path.startsWith("/")) {
+    throw new Error(`file path must be relative, got absolute path: ${raw}`);
+  }
+  if (/^[a-zA-Z]:/.test(path)) {
+    throw new Error(`file path must be relative, got drive path: ${raw}`);
+  }
+  const segments = path.split("/");
+  if (segments.some((s) => s === "..")) {
+    throw new Error(`file path must not contain "..": ${raw}`);
+  }
+  const cleaned = segments.filter((s) => s !== "" && s !== ".").join("/");
+  if (cleaned.length === 0) {
+    throw new Error(`file path resolves to nothing: ${raw}`);
+  }
+  return cleaned;
+}
+function buildTarball(fileBuffers) {
+  fileBuffers.sort((a, b) => a.path < b.path ? -1 : a.path > b.path ? 1 : 0);
+  const totalBytes = fileBuffers.reduce((sum, f) => sum + f.size, 0);
+  const contentHasher = createHash2("sha256");
+  for (const f of fileBuffers) {
+    contentHasher.update(`PATH:${f.path.length}:${f.path}
+`);
+    contentHasher.update(`SIZE:${f.size}
+`);
+    contentHasher.update(f.data);
+    contentHasher.update(`
+`);
+  }
+  const contentHash = contentHasher.digest("hex");
+  const pack = $pack();
+  (async () => {
+    for (const file2 of fileBuffers) {
+      await new Promise((resolve7, reject) => {
+        pack.entry({ name: file2.path, size: file2.data.length }, file2.data, (err) => err ? reject(err) : resolve7());
+      });
+    }
+    pack.finalize();
+  })();
+  const gzip = createGzip();
+  const nodeStream = pack.pipe(gzip);
+  const webStream = Readable.toWeb(nodeStream);
+  const topFiles = [...fileBuffers].sort((a, b) => b.size - a.size).slice(0, 5).map((f) => ({ path: f.path, size: f.size }));
+  return {
+    stream: webStream,
+    bytes: totalBytes,
+    fileCount: fileBuffers.length,
+    topFiles,
+    contentHash
+  };
+}
+async function createTarball(options) {
+  if (isFilesOptions(options)) {
+    return createTarballFromFiles(options.files, options.config);
+  }
+  const ig = import_ignore.default();
+  ig.add(DEFAULT_IGNORE);
+  const gitignorePath = join10(options.cwd, ".gitignore");
+  if (existsSync6(gitignorePath)) {
+    ig.add(readFileSync6(gitignorePath, "utf8"));
+  }
+  if (options.extraIgnore)
+    ig.add(options.extraIgnore);
+  const fileBuffers = [];
+  for (const rel of walk(options.cwd, options.cwd, ig)) {
+    const data2 = readFileSync6(join10(options.cwd, rel));
+    fileBuffers.push({ path: rel, size: data2.length, data: data2 });
+  }
+  return buildTarball(fileBuffers);
+}
+function createTarballFromFiles(files, _config) {
+  const seen = new Set;
+  const fileBuffers = [];
+  for (const file2 of files) {
+    const path = normalizeInlinePath(file2.path);
+    if (seen.has(path)) {
+      throw new Error(`duplicate file path in inline source: ${path}`);
+    }
+    seen.add(path);
+    const data2 = Buffer.from(file2.data);
+    fileBuffers.push({ path, size: data2.length, data: data2 });
+  }
+  return buildTarball(fileBuffers);
+}
+
+// ../core/dist/watcher.js
+var import_ignore2 = __toESM(require_ignore(), 1);
+import { existsSync as existsSync7, readFileSync as readFileSync7, watch } from "node:fs";
+import { join as join11, sep as sep3 } from "node:path";
+var DEFAULT_IGNORE2 = [
+  "node_modules",
+  ".git",
+  "dist",
+  ".next",
+  ".svelte-kit",
+  "build",
+  "coverage",
+  ".env",
+  ".env.*",
+  ".bun",
+  "*.log",
+  ".DS_Store",
+  "__pycache__"
+];
+function createWatcher(options) {
+  const debounceMs = options.debounceMs ?? 500;
+  const ig = import_ignore2.default();
+  ig.add(DEFAULT_IGNORE2);
+  const gitignorePath = join11(options.cwd, ".gitignore");
+  if (existsSync7(gitignorePath)) {
+    ig.add(readFileSync7(gitignorePath, "utf8"));
+  }
+  if (options.extraIgnore)
+    ig.add(options.extraIgnore);
+  let timer = null;
+  let pending = new Set;
+  const fsWatcher = watch(options.cwd, { recursive: true }, (_event, filename) => {
+    if (!filename)
+      return;
+    const rel = filename.split(sep3).join("/");
+    if (ig.ignores(rel))
+      return;
+    pending.add(rel);
+    if (timer)
+      clearTimeout(timer);
+    timer = setTimeout(() => {
+      const files = [...pending];
+      pending = new Set;
+      timer = null;
+      if (files.length > 0) {
+        options.onChange(files);
+      }
+    }, debounceMs);
+  });
   return {
-    title: mapping.title,
-    explanation: mapping.explanation(rawMessage),
-    suggestion: mapping.suggestion,
-    errorClass: mapping.errorClass,
-    phase: mapping.phase,
-    cause: mapping.cause,
-    relevantFiles: [],
-    missingEnvVars: []
+    close() {
+      if (timer)
+        clearTimeout(timer);
+      fsWatcher.close();
+    }
   };
 }
-function trimMessage(raw) {
-  const firstLine = raw.split(`
-`)[0] ?? "";
-  return firstLine.length > 200 ? `${firstLine.slice(0, 200)}…` : firstLine;
-}
 
-// ../core/dist/commands/publish-failure.js
-function tomlPathFor(cwd) {
-  return join12(cwd, "percher.toml");
+// ../core/dist/commands/dev.js
+var devInputSchema = exports_external.object({
+  app: exports_external.string().optional()
+});
+async function loadConfig2(ctx, appOverride) {
+  const tomlPath = join12(ctx.cwd, "percher.toml");
+  if (!existsSync8(tomlPath)) {
+    throw new PercherCoreError("No percher.toml found. Run: percher init", {
+      code: "dev.no-app",
+      hint: "Create a percher.toml first with `percher init`."
+    });
+  }
+  const config2 = await parseFile(tomlPath);
+  if (appOverride)
+    return { ...config2, app: { ...config2.app, name: appOverride } };
+  return config2;
 }
-async function buildFailureError(ctx, app, deployment, signal) {
-  let buildLogTail;
-  let buildLogFetchFailed = false;
-  let fullLog = "";
+async function ensureApp(ctx, config2) {
   try {
-    fullLog = await ctx.client.apps.getBuildLog(app.id, deployment.id, { signal });
-    if (!fullLog && !signal?.aborted) {
-      await abortableSleep(1500, signal);
-      if (!signal?.aborted) {
-        fullLog = await ctx.client.apps.getBuildLog(app.id, deployment.id, { signal });
+    return await ctx.client.apps.get(config2.app.name);
+  } catch (err) {
+    if (err.code === "APP_NOT_FOUND") {
+      return ctx.client.apps.create({
+        name: config2.app.name,
+        runtime: config2.app.runtime,
+        framework: config2.app.framework
+      });
+    }
+    throw err;
+  }
+}
+async function doPush(ctx, config2, callbacks) {
+  const tarball = await createTarball({ cwd: ctx.cwd, config: config2 });
+  const app = await ensureApp(ctx, config2);
+  await callbacks.writeLine(`Pushing ${tarball.fileCount} files (${(tarball.bytes / 1024).toFixed(0)} KB)...`);
+  const deployResponse = await ctx.client.apps.deploy(app.id, { tarball: tarball.stream });
+  if (deployResponse.status === "already_in_progress") {
+    const active = deployResponse;
+    await callbacks.writeLine(`  Skipped — deploy already in progress (${active.deployId}, ${active.deployStatus}).`);
+    return { success: false, appId: app.id };
+  }
+  let deployment = deployResponse;
+  const startedAt = Date.now();
+  const timeoutMs = TIMEOUTS.clientPublishPoll;
+  const pollInterval = 2000;
+  let lastStatus = "";
+  while (deployment.status !== "live" && deployment.status !== "failed") {
+    if (Date.now() - startedAt > timeoutMs) {
+      await callbacks.writeLine("Deploy timed out");
+      return { success: false, appId: app.id };
+    }
+    if (callbacks.signal.aborted)
+      return { success: false, appId: app.id };
+    if (deployment.status !== lastStatus) {
+      lastStatus = deployment.status;
+      await callbacks.writeLine(`  ${deployment.status}...`);
+    }
+    await new Promise((r) => setTimeout(r, pollInterval));
+    deployment = await ctx.client.apps.getDeployment(app.id, deployment.id);
+  }
+  if (deployment.status === "failed") {
+    try {
+      const insp = await ctx.client.apps.getDeployment(app.id, deployment.id);
+      if (insp.errorMessage) {
+        await callbacks.writeLine("Deploy failed:");
+        for (const line of insp.errorMessage.split(`
+`).slice(0, 30)) {
+          await callbacks.writeLine(`  ${line}`);
+        }
+      } else {
+        await callbacks.writeLine("Deploy failed.");
       }
+    } catch {
+      await callbacks.writeLine("Deploy failed.");
     }
-    if (fullLog) {
-      const lines = fullLog.split(`
-`);
-      buildLogTail = lines.slice(-50).join(`
-`);
+    return { success: false, appId: app.id };
+  }
+  await callbacks.writeLine(`Live at ${deployment.url ?? ""}`);
+  return { success: true, appId: app.id };
+}
+function formatLogLine(l) {
+  const level = l.level.toUpperCase().padEnd(5);
+  const src = l.source === "runtime" ? "" : `[${l.source}] `;
+  return `  ${src}${level} ${l.message}`;
+}
+async function streamLogs(ctx, appId, callbacks, signal) {
+  try {
+    for await (const line of ctx.client.logs.stream(appId, { signal })) {
+      if (signal.aborted)
+        return;
+      await callbacks.writeLine(formatLogLine(line));
     }
-  } catch {
-    buildLogFetchFailed = true;
+  } catch (err) {
+    if (signal.aborted)
+      return;
+    await callbacks.writeLine(`Log stream error: ${err.message}`);
   }
-  const errorMessage = deployment.errorMessage ?? "";
-  const classified = classifyByErrorCode(deployment.errorCode, errorMessage) ?? classifyError(errorMessage || "Deployment failed", fullLog);
-  const rawErrorMessage = errorMessage && !buildLogTail && !classified?.explanation.includes(errorMessage) ? errorMessage : undefined;
-  const problems = deployment.problems && deployment.problems.length > 0 ? deployment.problems : undefined;
-  if (classified) {
-    return {
-      title: classified.title,
-      explanation: classified.explanation,
-      suggestion: classified.suggestion,
-      buildLogTail,
-      rawErrorMessage,
-      errorClass: classified.errorClass,
-      phase: classified.phase,
-      cause: classified.cause,
-      relevantFiles: classified.relevantFiles,
-      missingEnvVars: classified.missingEnvVars,
-      problems
-    };
+}
+async function dev(ctx, input, callbacks) {
+  const config2 = await loadConfig2(ctx, input.app);
+  const app = await ensureApp(ctx, config2);
+  await callbacks.writeLine(`App: ${app.url}`);
+  await callbacks.writeLine("Watching for changes (logs streaming below)...");
+  await callbacks.writeLine("");
+  const logStream = { ctrl: null };
+  function startLogStream(appId) {
+    logStream.ctrl?.abort();
+    logStream.ctrl = new AbortController;
+    const linkedSignal = logStream.ctrl.signal;
+    streamLogs(ctx, appId, callbacks, linkedSignal);
+  }
+  startLogStream(app.id);
+  let busy = false;
+  let queued = null;
+  async function handleChange(files) {
+    if (busy) {
+      queued = files;
+      return;
+    }
+    busy = true;
+    try {
+      const shortList = files.length <= 3 ? files.join(", ") : `${files.slice(0, 3).join(", ")} +${files.length - 3} more`;
+      await callbacks.writeLine(`Change detected: ${shortList}`);
+      logStream.ctrl?.abort();
+      const shouldPush = await callbacks.onFilesChanged(files);
+      if (shouldPush) {
+        try {
+          const freshConfig = await loadConfig2(ctx, input.app);
+          const result = await doPush(ctx, freshConfig, callbacks);
+          if (result.success) {
+            startLogStream(result.appId);
+          } else {
+            startLogStream(app.id);
+          }
+        } catch (err) {
+          await callbacks.writeLine(`Push error: ${err.message}`);
+          startLogStream(app.id);
+        }
+      } else {
+        startLogStream(app.id);
+      }
+    } finally {
+      busy = false;
+      if (queued) {
+        const next = queued;
+        queued = null;
+        await handleChange(next);
+      }
+    }
   }
-  return {
-    title: "Deployment failed",
-    explanation: errorMessage ? `The deployment failed: ${errorMessage}` : "The deployment failed. See the build log for details.",
-    suggestion: buildLogTail ? "Check the build log below for errors. Run your build command locally to reproduce, fix, and publish again." : buildLogFetchFailed ? `The deploy failed and we could not retrieve the build log (network/API error after retries). The log itself may exist on the server — fetch it directly with: percher logs ${app.name} --build ${deployment.id}` : errorMessage ? `The deploy failed with: ${errorMessage.split(`
-`)[0]}. The build log column is empty — try \`percher logs ${app.name} --build ${deployment.id}\` to fetch it directly. If it remains empty, run \`percher deploys inspect ${deployment.id}\` for full details.` : `No build log was produced — the failure happened before the build started. This usually means a Percher infra issue. Retry once, and if it persists, fetch the deploy details with: percher deploys inspect ${deployment.id}`,
-    buildLogTail,
-    errorClass: "build_failed",
-    phase: "build",
-    cause: "unknown",
-    relevantFiles: [],
-    missingEnvVars: [],
-    problems
-  };
-}
-async function classifyDeploymentFailure(opts) {
-  const { ctx, app, deployment, publishInput } = opts;
-  const error48 = await buildFailureError(ctx, app, deployment, opts.signal);
-  const recovery = error48.errorClass ? recoveryFromErrorClass(error48.errorClass, {
-    missingEnvVars: error48.missingEnvVars,
-    deployId: deployment.id,
-    appName: app.name,
-    publishInput,
-    problems: error48.problems
-  }) : recoveryAsk({
-    prompt: `${app.name} deploy ${deployment.id} failed: ${error48.title}. ${error48.suggestion}`.trim(),
-    reasonCode: "build_failed"
+  const devConfig = config2.dev;
+  const watcher = createWatcher({
+    cwd: ctx.cwd,
+    extraIgnore: devConfig?.ignore,
+    debounceMs: devConfig?.debounce,
+    onChange(files) {
+      handleChange(files);
+    }
   });
-  return {
-    error: error48,
-    recovery,
-    summary: `${error48.title} (${app.name}, deploy ${deployment.id}).`
-  };
+  try {
+    await new Promise((resolve7) => {
+      if (callbacks.signal.aborted) {
+        resolve7();
+        return;
+      }
+      callbacks.signal.addEventListener("abort", () => resolve7(), { once: true });
+    });
+  } finally {
+    logStream.ctrl?.abort();
+    watcher.close();
+  }
 }
-async function buildFailureResult(opts) {
-  const { ctx, app, deployment, tarball, input } = opts;
-  const { error: error48, recovery, summary } = await classifyDeploymentFailure({
-    ctx,
-    app,
-    deployment,
-    publishInput: input
+// ../core/dist/commands/diagnose.js
+var diagnoseInputSchema = exports_external.object({
+  app: exports_external.string().optional(),
+  logLines: exports_external.number().int().min(0).max(200).optional(),
+  recencyHours: exports_external.number().positive().max(24 * 30).optional()
+});
+// ../core/dist/commands/diff.js
+var diffInputSchema = exports_external.object({
+  app: exports_external.string().optional(),
+  base: exports_external.string().optional(),
+  head: exports_external.string().optional(),
+  patch: exports_external.boolean().optional()
+});
+async function diff(ctx, input = {}) {
+  const name = input.app ?? readPercherTomlAppName(ctx.cwd);
+  if (!name) {
+    throw new PercherCoreError("No app specified and no percher.toml found", {
+      code: "diff.no-app",
+      hint: "Pass --app <name> or run from a directory with percher.toml."
+    });
+  }
+  return ctx.client.apps.getChanges(name, {
+    base: input.base,
+    head: input.head,
+    patch: input.patch
   });
-  return {
-    status: "failed",
-    app,
-    deployment,
-    fileCount: tarball.fileCount,
-    bytes: tarball.bytes,
-    error: error48,
-    recovery,
-    summary,
-    configPath: tomlPathFor(ctx.cwd),
-    bundle: { fileCount: tarball.fileCount, bytes: tarball.bytes }
-  };
 }
+// ../core/dist/commands/doctor.js
+import { existsSync as existsSync9 } from "node:fs";
+import { join as join13 } from "node:path";
 
 // ../core/dist/commands/wait-deploy.js
 var waitForDeployInputSchema = exports_external.object({
@@ -109790,12 +109991,12 @@ import { basename as basename3, join as join17 } from "node:path";
 // ../core/dist/detect.js
 import { existsSync as existsSync12, readFileSync as readFileSync9 } from "node:fs";
 import { join as join16 } from "node:path";
-function exists(dir, ...names) {
-  return names.some((n) => existsSync12(join16(dir, n)));
-}
-function readJson(path) {
+function readPackageJson(src) {
+  const raw = src.text("package.json");
+  if (raw === null)
+    return null;
   try {
-    return JSON.parse(readFileSync9(path, "utf8"));
+    return JSON.parse(raw);
   } catch {
     return null;
   }
@@ -109807,8 +110008,8 @@ function hasDependency(pkg, name) {
   const dev2 = pkg.devDependencies ?? {};
   return name in deps || name in dev2;
 }
-function detectDataMode(pkg, cwd) {
-  if (exists(cwd, "convex.json", "convex/_generated")) {
+function detectDataMode(pkg, src) {
+  if (src.has("convex.json", "convex/_generated")) {
     return { mode: "convex" };
   }
   if (hasDependency(pkg, "convex")) {
@@ -109819,36 +110020,35 @@ function detectDataMode(pkg, cwd) {
   }
   return { mode: "none" };
 }
-async function detectFramework(cwd) {
-  const pkgPath = join16(cwd, "package.json");
-  const pkg = existsSync12(pkgPath) ? readJson(pkgPath) : null;
-  if (exists(cwd, "Dockerfile")) {
+function detectFromSource(src) {
+  const pkg = readPackageJson(src);
+  if (src.has("Dockerfile")) {
     return {
       runtime: "docker",
       framework: "docker",
       web: { port: 8080, health: "/health" },
-      data: detectDataMode(pkg, cwd)
+      data: detectDataMode(pkg, src)
     };
   }
-  if (exists(cwd, "next.config.js", "next.config.ts", "next.config.mjs")) {
+  if (src.has("next.config.js", "next.config.ts", "next.config.mjs")) {
     return {
       runtime: "node",
       framework: "nextjs",
       build: { command: "bun run build", output: ".next" },
       web: { port: 3000, health: "/api/health" },
-      data: detectDataMode(pkg, cwd)
+      data: detectDataMode(pkg, src)
     };
   }
-  if (exists(cwd, "svelte.config.js", "svelte.config.ts")) {
+  if (src.has("svelte.config.js", "svelte.config.ts")) {
     return {
       runtime: "node",
       framework: "sveltekit",
       build: { command: "bun run build", output: "build" },
       web: { port: 3000, health: "/health" },
-      data: detectDataMode(pkg, cwd)
+      data: detectDataMode(pkg, src)
     };
   }
-  if (exists(cwd, "astro.config.mjs", "astro.config.ts", "astro.config.js")) {
+  if (src.has("astro.config.mjs", "astro.config.ts", "astro.config.js")) {
     const ssr = hasDependency(pkg, "@astrojs/node");
     if (ssr) {
       return {
@@ -109856,7 +110056,7 @@ async function detectFramework(cwd) {
         framework: "astro",
         build: { command: "bun run build", output: "dist" },
         web: { port: 4321, health: "/health" },
-        data: detectDataMode(pkg, cwd)
+        data: detectDataMode(pkg, src)
       };
     }
     return {
@@ -109864,25 +110064,25 @@ async function detectFramework(cwd) {
       framework: "astro",
       web: { port: STATIC_DOCKER_PORT, health: "/" },
       staticBuild: { outputDir: "dist", spa: false },
-      data: detectDataMode(pkg, cwd)
+      data: detectDataMode(pkg, src)
     };
   }
-  if (exists(cwd, "remix.config.js", "remix.config.ts") || hasDependency(pkg, "@remix-run/node")) {
+  if (src.has("remix.config.js", "remix.config.ts") || hasDependency(pkg, "@remix-run/node")) {
     return {
       runtime: "node",
       framework: "remix",
       build: { command: "bun run build", output: "build" },
       web: { port: 3000, health: "/health" },
-      data: detectDataMode(pkg, cwd)
+      data: detectDataMode(pkg, src)
     };
   }
-  if (exists(cwd, "vite.config.js", "vite.config.ts")) {
+  if (src.has("vite.config.js", "vite.config.ts")) {
     return {
       runtime: "docker",
       framework: "vite",
       web: { port: STATIC_DOCKER_PORT, health: "/" },
       staticBuild: { outputDir: "dist", spa: true },
-      data: detectDataMode(pkg, cwd)
+      data: detectDataMode(pkg, src)
     };
   }
   if (hasDependency(pkg, "express")) {
@@ -109890,7 +110090,7 @@ async function detectFramework(cwd) {
       runtime: "node",
       framework: "express",
       web: { port: 3000, health: "/health" },
-      data: detectDataMode(pkg, cwd)
+      data: detectDataMode(pkg, src)
     };
   }
   if (hasDependency(pkg, "fastify")) {
@@ -109898,7 +110098,7 @@ async function detectFramework(cwd) {
       runtime: "node",
       framework: "fastify",
       web: { port: 3000, health: "/health" },
-      data: detectDataMode(pkg, cwd)
+      data: detectDataMode(pkg, src)
     };
   }
   if (hasDependency(pkg, "hono")) {
@@ -109906,14 +110106,14 @@ async function detectFramework(cwd) {
       runtime: "node",
       framework: "hono",
       web: { port: 3000, health: "/health" },
-      data: detectDataMode(pkg, cwd)
+      data: detectDataMode(pkg, src)
     };
   }
   if (pkg) {
     const detected = {
       runtime: "node",
       web: { port: 3000, health: "/health" },
-      data: detectDataMode(pkg, cwd)
+      data: detectDataMode(pkg, src)
     };
     const scripts = pkg.scripts ?? {};
     if (scripts.build) {
@@ -109921,65 +110121,64 @@ async function detectFramework(cwd) {
     }
     return detected;
   }
-  const hasPython = exists(cwd, "requirements.txt", "pyproject.toml");
+  const hasPython = src.has("requirements.txt", "pyproject.toml");
   if (hasPython) {
-    if (existsSync12(join16(cwd, "manage.py"))) {
+    if (src.has("manage.py")) {
       return {
         runtime: "python",
         framework: "django",
         web: { port: 8000, health: "/health" },
-        data: detectDataMode(pkg, cwd)
+        data: detectDataMode(pkg, src)
       };
     }
-    const mainPy = existsSync12(join16(cwd, "main.py")) ? readFileSync9(join16(cwd, "main.py"), "utf8") : "";
+    const mainPy = src.text("main.py") ?? "";
     if (/FastAPI\s*\(/.test(mainPy) || /from\s+fastapi/.test(mainPy)) {
       return {
         runtime: "python",
         framework: "fastapi",
         web: { port: 8000, health: "/health" },
-        data: detectDataMode(pkg, cwd)
+        data: detectDataMode(pkg, src)
       };
     }
-    const appPy = existsSync12(join16(cwd, "app.py")) ? readFileSync9(join16(cwd, "app.py"), "utf8") : "";
+    const appPy = src.text("app.py") ?? "";
     if (/Flask\s*\(/.test(appPy) || /from\s+flask/.test(appPy)) {
       return {
         runtime: "python",
         framework: "flask",
         web: { port: 5000, health: "/health" },
-        data: detectDataMode(pkg, cwd)
+        data: detectDataMode(pkg, src)
       };
     }
     return {
       runtime: "python",
       web: { port: 8000, health: "/health" },
-      data: detectDataMode(pkg, cwd)
+      data: detectDataMode(pkg, src)
     };
   }
-  if (existsSync12(join16(cwd, "index.html"))) {
+  if (src.has("index.html")) {
     return { runtime: "static" };
   }
   return null;
 }
+async function detectFramework(cwd) {
+  const src = {
+    has: (...names) => names.some((n) => existsSync12(join16(cwd, n))),
+    text: (name) => {
+      try {
+        return readFileSync9(join16(cwd, name), "utf8");
+      } catch {
+        return null;
+      }
+    }
+  };
+  return detectFromSource(src);
+}
 function refineBunRuntime(detected, cwd) {
-  if (detected.runtime === "node" && exists(cwd, "bun.lockb", "bun.lock")) {
+  if (detected.runtime === "node" && (existsSync12(join16(cwd, "bun.lockb")) || existsSync12(join16(cwd, "bun.lock")))) {
     return { ...detected, runtime: "bun" };
   }
   return detected;
 }
-
-// ../core/dist/commands/init.js
-function isSuspiciousAutoName(name) {
-  if (/-\d{8,}$/.test(name))
-    return true;
-  if (/\d{4}-?\d{2}-?\d{2}/.test(name))
-    return true;
-  if (name.length >= 30)
-    return true;
-  return false;
-}
-function detectInteractive() {
-  return process.stdin?.isTTY === true && process.stdout?.isTTY === true;
-}
 function buildDataConfig(mode) {
   if (mode === "convex") {
     return {
@@ -109995,6 +110194,32 @@ function buildDataConfig(mode) {
   }
   return { mode };
 }
+function configFromDetection(name, detected, dataMode) {
+  return {
+    app: {
+      name,
+      runtime: detected?.runtime ?? "node",
+      ...detected?.framework ? { framework: detected.framework } : {}
+    },
+    ...detected?.build ? { build: detected.build } : {},
+    ...detected?.web ? { web: detected.web } : {},
+    ...detected?.data || dataMode ? { data: buildDataConfig(dataMode ?? detected?.data?.mode ?? "none") } : {}
+  };
+}
+
+// ../core/dist/commands/init.js
+function isSuspiciousAutoName(name) {
+  if (/-\d{8,}$/.test(name))
+    return true;
+  if (/\d{4}-?\d{2}-?\d{2}/.test(name))
+    return true;
+  if (name.length >= 30)
+    return true;
+  return false;
+}
+function detectInteractive() {
+  return process.stdin?.isTTY === true && process.stdout?.isTTY === true;
+}
 var initInputSchema = exports_external.object({
   force: exports_external.boolean().optional(),
   name: exports_external.string().optional(),
@@ -110006,8 +110231,8 @@ function scanEnvVars(_cwd) {
 }
 async function init(ctx, input = {}) {
   const path = join17(ctx.cwd, "percher.toml");
-  const exists2 = existsSync13(path);
-  if (exists2 && !input.force) {
+  const exists = existsSync13(path);
+  if (exists && !input.force) {
     throw new PercherCoreError("percher.toml already exists", {
       code: "init.exists",
       hint: "Run with --force to overwrite."
@@ -110037,18 +110262,7 @@ async function init(ctx, input = {}) {
       name = suggestion;
     }
   }
-  const config2 = {
-    app: {
-      name,
-      runtime: detected?.runtime ?? "node",
-      ...detected?.framework ? { framework: detected.framework } : {}
-    },
-    ...detected?.build ? { build: detected.build } : {},
-    ...detected?.web ? { web: detected.web } : {},
-    ...detected?.data || input.dataMode ? {
-      data: buildDataConfig(input.dataMode ?? detected?.data?.mode ?? "none")
-    } : {}
-  };
+  const config2 = configFromDetection(name, detected, input.dataMode);
   const envVars = scanEnvVars(ctx.cwd);
   if (Object.keys(envVars).length > 0) {
     config2.env = envVars;
@@ -110080,7 +110294,7 @@ async function init(ctx, input = {}) {
     path,
     config: config2,
     detected,
-    overwritten: exists2,
+    overwritten: exists,
     scaffoldedFiles
   };
 }
@@ -110225,6 +110439,7 @@ async function logs(ctx, input = {}) {
 }
 // ../core/dist/commands/mcp.js
 var mcpInputSchema = exports_external.object({});
+var HOSTED_MCP_URL = "https://mcp.percher.app/mcp";
 function mcp(_ctx, _input = {}) {
   return {
     config: {
@@ -110235,19 +110450,43 @@ function mcp(_ctx, _input = {}) {
         }
       }
     },
+    hosted: {
+      config: {
+        mcpServers: {
+          percher: {
+            transport: "http",
+            url: HOSTED_MCP_URL
+          }
+        }
+      },
+      url: HOSTED_MCP_URL,
+      auth: "oauth"
+    },
     installLocations: [
       {
         client: "Claude Code",
-        path: "~/.claude.json (under mcpServers, or a per-project .mcp.json)"
+        path: "~/.claude.json (under mcpServers, or a per-project .mcp.json)",
+        note: "Local stdio — recommended for Claude Code (full tool set, incl. publish from local files)."
+      },
+      {
+        client: "Claude.ai (web/desktop)",
+        path: `Settings → Connectors → Add custom connector → ${HOSTED_MCP_URL}`,
+        note: "Hosted — OAuth, no token to paste. Remote-safe subset (operate existing apps + deploy connected repos)."
       },
       {
         client: "Cursor / Windsurf",
-        path: "settings → MCP → add server (use the same npx command)"
+        path: "settings → MCP → add server (local: the same npx command; hosted: add the URL as a connector)"
       },
       {
         client: "VS Code (Continue / Cline)",
-        path: "extension settings → MCP servers"
+        path: "extension settings → MCP servers (local npx command)"
       }
+    ],
+    notes: [
+      "Two ways to connect:",
+      "  • Local (npx): full tool set, reads your project files — required for first publish from local files. Recommended for Claude Code.",
+      `  • Hosted connector: add ${HOSTED_MCP_URL} as a custom connector. OAuth login in the browser — no token to paste. Remote-safe subset (operate existing apps + deploy connected repos); first-publish-from-local-files stays on the npx path.`,
+      "Manage or revoke hosted connections from the Percher dashboard."
     ]
   };
 }
@@ -114209,66 +114448,6 @@ function withDuration(label, durationMs) {
   return `${label} (${seconds}s)`;
 }
 
-// ../core/dist/poll-deployment.js
-async function pollDeployment(opts) {
-  const terminal = opts.terminal ?? ["live", "failed"];
-  const intervalMs = opts.intervalMs ?? 2000;
-  const timeoutMs = opts.timeoutMs ?? TIMEOUTS.clientPublishPoll;
-  const maxRetries = opts.maxRetries ?? 5;
-  let deployment = opts.initial;
-  const startedAt = Date.now();
-  const seenEventIds = new Set;
-  if (opts.onEvent) {
-    await drainNewEvents(opts, deployment.id, seenEventIds);
-  }
-  while (!terminal.includes(deployment.status)) {
-    if (Date.now() - startedAt > timeoutMs) {
-      opts.onTimeout(deployment);
-    }
-    opts.onTick?.(deployment);
-    await new Promise((r) => setTimeout(r, intervalMs));
-    let attempt = 0;
-    let polled = false;
-    while (!polled) {
-      try {
-        deployment = await opts.ctx.client.apps.getDeployment(opts.appId, deployment.id);
-        polled = true;
-      } catch (err) {
-        attempt++;
-        const isNetwork = isTransientNetworkError(err);
-        if (!isNetwork || attempt >= maxRetries) {
-          if (isNetwork) {
-            const msg = err.message ?? String(err);
-            throw new Error(`${msg}
-
-The deploy may already be live — your network connection dropped mid-poll. Check with: percher deploys list ${opts.appName}`, { cause: err });
-          }
-          throw err;
-        }
-        const backoff = (opts.backoffMs ?? ((n) => 1000 * 2 ** (n - 1)))(attempt);
-        await new Promise((r) => setTimeout(r, backoff));
-      }
-    }
-    if (opts.onEvent) {
-      await drainNewEvents(opts, deployment.id, seenEventIds);
-    }
-  }
-  return deployment;
-}
-async function drainNewEvents(opts, deployId, seenEventIds) {
-  if (!opts.onEvent)
-    return;
-  try {
-    const { events } = await opts.ctx.client.apps.getDeployEvents(opts.appId, deployId);
-    for (const event of events) {
-      if (seenEventIds.has(event.id))
-        continue;
-      seenEventIds.add(event.id);
-      opts.onEvent(event);
-    }
-  } catch {}
-}
-
 // ../core/dist/publish-retry.js
 var NON_RETRYABLE_CODES = new Set([
   "WORKER_UNAVAILABLE_PERSISTENT",
@@ -115282,11 +115461,29 @@ async function executeDeploy(opts) {
       throw err;
     }
   }
+  const uploadMs = Date.now() - uploadStart;
+  return finalizeDeploy({
+    ctx,
+    config: config2,
+    input,
+    app,
+    firstDeploy,
+    tarball: { fileCount: tarball.fileCount, bytes: tarball.bytes },
+    deployment,
+    t0,
+    packageMs,
+    uploadMs,
+    missingBuildEnvKeys,
+    cacheReused: cacheReusedDeployment !== null
+  });
+}
+async function finalizeDeploy(opts) {
+  const { ctx, config: config2, input, app, firstDeploy, tarball, t0, packageMs, uploadMs, missingBuildEnvKeys, cacheReused } = opts;
+  let deployment = opts.deployment;
   const replacedPreview = deployment.replacedPreview === true;
   if (replacedPreview) {
     ctx.status("Replaced previous preview...");
   }
-  const uploadMs = Date.now() - uploadStart;
   if (input.waitForLive === false) {
     ctx.status(`Queued (${deployment.id}) — resume with percher_wait_for_deploy.`);
     return {
@@ -115426,7 +115623,7 @@ async function executeDeploy(opts) {
     firstDeploy: firstDeploy || undefined,
     cacheHit,
     cacheStatus,
-    cacheReused: cacheReusedDeployment !== null || undefined,
+    cacheReused: cacheReused || undefined,
     missingBuildEnvKeys: missingBuildEnvKeys.length > 0 ? missingBuildEnvKeys : undefined,
     traceId: deployment.id,
     recovery: RECOVERY_NONE,
@@ -115665,6 +115862,27 @@ function emitPreflight(ctx, config2, tarball) {
     ctx.status(line);
   }
 }
+// ../core/dist/commands/publish-from-repo.js
+var publishFromRepoInputSchema = exports_external.object({
+  url: exports_external.string().min(1).describe("Public https git repo URL to clone and deploy (one-shot — no webhook is created)."),
+  name: exports_external.string().optional().describe("App name. Overrides the repo's percher.toml [app].name; required if the repo omits it."),
+  branch: exports_external.string().optional().describe("Branch to deploy. Defaults to main."),
+  note: exports_external.string().optional().describe("Optional note recorded against the deploy."),
+  waitForLive: exports_external.boolean().optional().describe("If false (default on the hosted connector), returns once the deploy is queued — resume with percher_wait_for_deploy. If true, block until live or failed.")
+});
+// ../core/dist/commands/publish-inline.js
+var publishInlineInputSchema = exports_external.object({
+  name: exports_external.string().optional().describe("App name. Overrides [app].name when percher.toml is present; REQUIRED when no percher.toml is provided (so the auto-detected app can be named)."),
+  files: exports_external.array(exports_external.object({
+    path: exports_external.string().min(1).describe("Repo-relative path (no leading / and no ..)."),
+    content: exports_external.string().describe("File contents — UTF-8 text, or base64-encoded bytes when encoding is 'base64'."),
+    encoding: exports_external.enum(["utf8", "base64"]).optional().describe("Content encoding. Default 'utf8' (text). Use 'base64' for binary assets (images, fonts).")
+  })).min(1).describe("Inline source files. Include a percher.toml ([app].name + runtime), or omit it and Percher auto-detects the runtime from the files (then `name` is required)."),
+  preview: exports_external.boolean().optional().describe("Deploy as a preview (does not replace the live version)."),
+  message: exports_external.string().optional().describe("Deploy note (visible in deploy history)."),
+  noCache: exports_external.boolean().optional().describe("Skip the image cache and force a fresh build."),
+  waitForLive: exports_external.boolean().optional().describe("If true (default), block until the deploy is live or failed. If false, return as soon as it is queued so the agent can resume with percher_wait_for_deploy.")
+});
 // ../core/dist/commands/push.js
 import { existsSync as existsSync16 } from "node:fs";
 import { join as join25 } from "node:path";
@@ -117314,13 +117532,23 @@ function registerAccountCommands(cli, ctx) {
       return;
     }
     await writeLine(ctx, import_picocolors2.default.bold("Percher MCP server"));
-    await writeLine(ctx, import_picocolors2.default.dim("Add this entry to your MCP-aware client:"));
     await writeLine(ctx, "");
+    await writeLine(ctx, import_picocolors2.default.bold("Local (npx) — full tool set, reads your project files:"));
     await writeLine(ctx, JSON.stringify(result.config, null, 2));
     await writeLine(ctx, "");
+    await writeLine(ctx, import_picocolors2.default.bold("Hosted connector — add this URL, OAuth login in the browser (no token):"));
+    await writeLine(ctx, `  ${result.hosted.url}`);
+    await writeLine(ctx, "");
     await writeLine(ctx, import_picocolors2.default.bold("Where to paste:"));
     for (const loc of result.installLocations) {
       await writeLine(ctx, `  ${loc.client.padEnd(28)} ${import_picocolors2.default.dim(loc.path)}`);
+      if (loc.note) {
+        await writeLine(ctx, `  ${"".padEnd(28)} ${import_picocolors2.default.dim(loc.note)}`);
+      }
+    }
+    await writeLine(ctx, "");
+    for (const note of result.notes) {
+      await writeLine(ctx, import_picocolors2.default.dim(note));
     }
     await writeLine(ctx, "");
     await writeLine(ctx, import_picocolors2.default.dim("Once installed, your assistant gets percher_publish + 28 other tools."));
@@ -118044,7 +118272,7 @@ function registerAuthCommands(cli, ctx) {
 // src/commands/data.ts
 var import_picocolors6 = __toESM(require_picocolors(), 1);
 function registerDataCommands(cli, ctx, argv) {
-  cli.command("data [app] [...rest]", "Show app data status and collections").option("--json", "Output as JSON").option("--reveal", "(reset-superuser only) also print the plaintext password once").option("--out <path>", "(export only) Output file (default: ./<app>-pb-<timestamp>.tar.gz)").action(async (app, _rest, options) => {
+  cli.command("data [app] [...rest]", "Show app data status and collections").option("--json", "Output as JSON").option("--reveal", "(reset-superuser only) also print the plaintext password once").option("--out <path>", "(export only) Output file (default: ./<app>-pb-<timestamp>.tar.gz)").option("--provider <name>", "(oauth only) OAuth provider (default: google)").option("--app <name>", "(oauth only) target app (default: read percher.toml)").option("--client-id <id>", "(oauth only) OAuth client id").option("--client-secret <secret>", "(oauth only) OAuth client secret").option("--remove", "(oauth only) remove the provider instead of setting it").action(async (app, _rest, options) => {
     if (app === "reset-superuser") {
       const idx = argv.indexOf("reset-superuser");
       const realApp = idx >= 0 ? firstNonFlagAfter(argv, idx) : undefined;
@@ -118065,6 +118293,37 @@ function registerDataCommands(cli, ctx, argv) {
       await writeLine(ctx, `  Size: ${mb} MB`);
       return;
     }
+    if (app === "oauth") {
+      const idx = argv.indexOf("oauth");
+      const provider = (idx >= 0 ? firstNonFlagAfter(argv, idx) : undefined) ?? options.provider ?? "google";
+      const result2 = await dataOauth(ctx, {
+        app: options.app,
+        provider,
+        clientId: options.clientId,
+        clientSecret: options.clientSecret,
+        remove: options.remove
+      });
+      if (result2.action === "removed") {
+        await writeLine(ctx, `${import_picocolors6.default.green("✓")} Removed ${result2.provider} sign-in.`);
+      } else if (result2.action === "set") {
+        await writeLine(ctx, `${import_picocolors6.default.green("✓")} ${result2.provider} sign-in enabled.`);
+        await writeLine(ctx, "");
+        await writeLine(ctx, import_picocolors6.default.bold("One more step — add this redirect URI in the provider console:"));
+        await writeLine(ctx, `  ${result2.redirectUri}`);
+      } else {
+        if (!result2.providers?.length) {
+          await writeLine(ctx, import_picocolors6.default.dim("No OAuth providers configured."));
+        } else {
+          await writeLine(ctx, import_picocolors6.default.bold("Configured providers"));
+          for (const p of result2.providers) {
+            await writeLine(ctx, `  ${p.provider.padEnd(12)} ${import_picocolors6.default.dim(p.clientId)}`);
+          }
+        }
+        await writeLine(ctx, "");
+        await writeLine(ctx, `Redirect URI: ${result2.redirectUri}`);
+      }
+      return;
+    }
     const result = await data(ctx, { app, json: options.json });
     if (options.json) {
       await writeLine(ctx, JSON.stringify(result, null, 2));
@@ -118094,6 +118353,7 @@ function registerDataCommands(cli, ctx, argv) {
     const result = await resetSuperuser(ctx, { app, reveal: options.reveal });
     await printSuperuserResetResult(ctx, result);
   });
+  cli.command("data oauth [provider]", "Configure capsule OAuth sign-in (e.g. `data oauth google --client-id … --client-secret …`)").action(async () => {});
   cli.command("data export [app]", "Download a snapshot of your app's PocketBase data as a .tar.gz").action(async () => {});
   cli.command("backups [app]", "List available backups for an app").action(async (app) => {
     const { backups, skipped } = await listBackups(ctx, { app });
@@ -119048,7 +119308,7 @@ async function renderError(stderr, error48) {
 // package.json
 var package_default = {
   name: "percher",
-  version: "0.5.10",
+  version: "0.5.12",
   description: "CLI for the Percher hosting platform — publish apps with one command",
   type: "module",
   bin: {
@@ -119072,8 +119332,8 @@ var package_default = {
     typecheck: "tsc --noEmit"
   },
   dependencies: {
-    "@percher/client": "^0.2.10",
-    "@percher/core": "^0.4.5",
+    "@percher/client": "^0.2.16",
+    "@percher/core": "^0.4.16",
     "@percher/toml": "^0.1.5",
     cac: "^7.0.0",
     picocolors: "^1.1.1"