percher 0.5.15 → 0.5.17

package/dist/bin/percher.js

@@ -105969,6 +105969,9 @@ class AccountResource {
   listTokens() {
     return this.http.get("/account/tokens");
   }
+  createToken(input) {
+    return this.http.post("/account/tokens", input);
+  }
   revokeToken(id) {
     return this.http.delete(`/account/tokens/${encodeURIComponent(id)}`);
   }
@@ -114802,6 +114805,12 @@ function classifyPublishApiError(err, input) {
   const auth = matchAuthError(err);
   if (auth)
     return buildResult(auth, input);
+  const tooLarge = matchInlinePublishTooLarge(err);
+  if (tooLarge)
+    return buildResult(tooLarge, input);
+  const repoMissingConfig = matchRepoMissingConfig(err);
+  if (repoMissingConfig)
+    return buildResult(repoMissingConfig, input);
   const retryLimit = matchRetryLimitReached(err, input);
   if (retryLimit)
     return buildResult(retryLimit, input);
@@ -115086,6 +115095,40 @@ function matchDailyQuotaExceeded(err, input) {
     summary: `Daily ${kind}-deploy quota reached (${used}/${limit}). Resets ${resetAt}.`
   };
 }
+function matchInlinePublishTooLarge(err) {
+  if (err.code !== "INLINE_PUBLISH_TOO_LARGE")
+    return null;
+  return {
+    title: "Inline source too large",
+    explanation: err.message,
+    suggestion: "Inline publishing is for small, text-generated apps. Publish a larger or on-disk app another way: on-disk project → the local `bunx percher publish` CLI (or `npx -y @percher/mcp`); public repo → percher_publish_from_git; private repo → connect it via the GitHub App, then percher_deploy.",
+    recovery: recoveryAsk({
+      prompt: `${err.message} Publish by source instead: on-disk → local \`bunx percher publish\` / \`npx -y @percher/mcp\`; public repo → percher_publish_from_git; private repo → connect via the GitHub App, then percher_deploy.`,
+      options: [
+        "publish on-disk (bunx percher publish / npx @percher/mcp)",
+        "public repo (percher_publish_from_git)",
+        "private repo (GitHub App + percher_deploy)"
+      ],
+      reasonCode: "unknown"
+    }),
+    summary: `Inline source too large: ${err.message}`
+  };
+}
+function matchRepoMissingConfig(err) {
+  if (err.code !== "REPO_MISSING_CONFIG")
+    return null;
+  return {
+    title: "Repo has no percher.toml",
+    explanation: err.message,
+    suggestion: "Add a percher.toml (with [app] name + runtime) to the repo root and push, then retry — or publish the source inline with percher_publish instead.",
+    recovery: recoveryAsk({
+      prompt: `${err.message} Add a percher.toml to the repo root (then retry percher_publish_from_git), or publish the source inline with percher_publish.`,
+      options: ["add percher.toml to the repo", "publish inline (percher_publish)"],
+      reasonCode: "config_missing"
+    }),
+    summary: `Repo missing percher.toml: ${err.message}`
+  };
+}
 function matchGenericClientError(err) {
   if (err.status < 400 || err.status >= 500)
     return null;
@@ -117039,6 +117082,34 @@ function summarize2(verdict, health) {
   }
   return "API responded but reported a non-ok status";
 }
+// ../core/dist/commands/token.js
+var tokenCreateInputSchema = exports_external.object({
+  name: exports_external.string().trim().min(1).max(80).describe("Human label for the token (shown in the list)."),
+  scope: exports_external.enum(["deploy", "env", "read", "full"]).default("full").describe("Least-privilege scope: deploy (publish/rollback/logs), env (set/read env), read (GETs only), or full (account-wide). Prefer the narrowest that works for CI/agents."),
+  app: exports_external.string().trim().min(1).optional().describe("Bind the token to a single app by name. Omit for all of your apps."),
+  ttlDays: exports_external.number().int().positive().max(365).optional().describe("Token lifetime in days (server default ≈ 90).")
+});
+var tokenRevokeInputSchema = exports_external.object({
+  id: exports_external.string().min(1).describe("Token id from `percher token list`.")
+});
+async function tokenCreate(ctx, input) {
+  ctx.status("Minting token…");
+  return ctx.client.account.createToken({
+    name: input.name,
+    scope: input.scope,
+    app: input.app,
+    ttlDays: input.ttlDays
+  });
+}
+async function tokenList(ctx) {
+  ctx.status("Loading tokens…");
+  const { tokens } = await ctx.client.account.listTokens();
+  return tokens;
+}
+async function tokenRevoke(ctx, input) {
+  ctx.status("Revoking token…");
+  await ctx.client.account.revokeToken(input.id);
+}
 // ../core/dist/commands/transfers.js
 function resolveApp5(ctx, app) {
   const name = app ?? readPercherTomlAppName(ctx.cwd);
@@ -119168,18 +119239,91 @@ async function renderHumanStatus(ctx, result) {
   }
 }
 
-// src/commands/transfers.ts
+// src/commands/token.ts
 var import_picocolors14 = __toESM(require_picocolors(), 1);
+var VALID_SCOPES = ["deploy", "env", "read", "full"];
+function scopeLabel(scopes, appName) {
+  const s = scopes && scopes.length > 0 ? scopes.join("+") : "full";
+  return appName ? `${s} · ${appName}` : `${s} · all apps`;
+}
+function registerTokenCommands(cli, ctx) {
+  cli.command("token [action] [arg]", "Manage API tokens: create | list | revoke").option("--scope <scope>", "(create) deploy | env | read | full (default: full)").option("--app <name>", "(create) bind the token to a single app").option("--ttl-days <n>", "(create) token lifetime in days").action(async (action, arg, options) => {
+    if (!ctx.client.token) {
+      await writeLine(ctx, `${import_picocolors14.default.red("✗")} Not logged in. Run: percher login`);
+      throw new SilentExitError;
+    }
+    if (action === "create") {
+      if (!arg) {
+        await writeLine(ctx, `${import_picocolors14.default.red("✗")} A name is required. Usage: percher token create <name> [--scope deploy] [--app <name>]`);
+        throw new SilentExitError;
+      }
+      const scope = options.scope ?? "full";
+      if (!VALID_SCOPES.includes(scope)) {
+        await writeLine(ctx, `${import_picocolors14.default.red("✗")} Invalid --scope "${options.scope}". Use one of: ${VALID_SCOPES.join(", ")}.`);
+        throw new SilentExitError;
+      }
+      const ttlDays = options.ttlDays !== undefined ? Number(options.ttlDays) : undefined;
+      if (ttlDays !== undefined && (!Number.isInteger(ttlDays) || ttlDays <= 0)) {
+        await writeLine(ctx, `${import_picocolors14.default.red("✗")} --ttl-days must be a positive whole number.`);
+        throw new SilentExitError;
+      }
+      const created = await tokenCreate(ctx, {
+        name: arg,
+        scope,
+        app: options.app,
+        ttlDays
+      });
+      await writeLine(ctx, `${import_picocolors14.default.green("✓")} Token created: ${import_picocolors14.default.bold(created.name)}  ${import_picocolors14.default.dim(`(${scopeLabel(created.scopes, created.appName)})`)}`);
+      await writeLine(ctx, "");
+      await writeLine(ctx, `  ${import_picocolors14.default.bold(created.token)}`);
+      await writeLine(ctx, import_picocolors14.default.yellow("  ↑ Store this now — the secret is shown only once and can't be retrieved."));
+      await writeLine(ctx, "");
+      await writeLine(ctx, import_picocolors14.default.dim("  Use it in CI / an agent:"));
+      await writeLine(ctx, import_picocolors14.default.dim(`    PERCHER_TOKEN=${created.token} bunx percher publish`));
+      return;
+    }
+    if (action === "list") {
+      const tokens = await tokenList(ctx);
+      if (tokens.length === 0) {
+        await writeLine(ctx, import_picocolors14.default.dim("No API tokens."));
+        return;
+      }
+      for (const t of tokens) {
+        const expires = t.expiresAt ? `expires ${new Date(t.expiresAt).toISOString().slice(0, 10)}` : "no expiry";
+        await writeLine(ctx, `${import_picocolors14.default.bold(t.id)}  ${t.name.padEnd(20)} ${import_picocolors14.default.dim(scopeLabel(t.scopes, t.appName))}  ${import_picocolors14.default.dim(expires)}`);
+      }
+      await writeLine(ctx, "");
+      await writeLine(ctx, import_picocolors14.default.dim("Revoke one with: percher token revoke <id>"));
+      return;
+    }
+    if (action === "revoke") {
+      if (!arg) {
+        await writeLine(ctx, `${import_picocolors14.default.red("✗")} A token id is required. Usage: percher token revoke <id> (list ids with \`percher token list\`).`);
+        throw new SilentExitError;
+      }
+      await tokenRevoke(ctx, { id: arg });
+      await writeLine(ctx, `${import_picocolors14.default.green("✓")} Token revoked.`);
+      return;
+    }
+    throw new Error(`Unknown token action "${action ?? ""}". Use: create | list | revoke.`);
+  });
+  cli.command("token create <name>", "Mint a scoped API token (the secret is shown once)").option("--scope <scope>", "deploy | env | read | full (default: full)").option("--app <name>", "Bind the token to a single app").option("--ttl-days <n>", "Token lifetime in days").action(async () => {});
+  cli.command("token list", "List your API tokens with scope + bound app").action(async () => {});
+  cli.command("token revoke <id>", "Revoke an API token by id").action(async () => {});
+}
+
+// src/commands/transfers.ts
+var import_picocolors15 = __toESM(require_picocolors(), 1);
 function registerTransfersCommands(cli, ctx) {
   cli.command("transfer [emailOrTransferId]", "Transfer ownership of an app: `transfer <email>` initiates; `transfer --cancel <id>` cancels; `transfer --list` shows history").option("--app <name>", "App name (overrides percher.toml)").option("--cancel", "Cancel a pending transfer by id (positional arg is the transferId)").option("--list", "List the transfer history for this app").action(async (emailOrTransferId, options) => {
     if (options.list) {
       const rows = await transferListForApp(ctx, { app: options.app });
       if (rows.length === 0) {
-        await writeLine(ctx, import_picocolors14.default.dim("No transfers for this app."));
+        await writeLine(ctx, import_picocolors15.default.dim("No transfers for this app."));
         return;
       }
       for (const r of rows) {
-        const status2 = r.status === "pending" ? import_picocolors14.default.yellow("pending") : r.status === "accepted" ? import_picocolors14.default.green("accepted") : import_picocolors14.default.dim(r.status);
+        const status2 = r.status === "pending" ? import_picocolors15.default.yellow("pending") : r.status === "accepted" ? import_picocolors15.default.green("accepted") : import_picocolors15.default.dim(r.status);
         await writeLine(ctx, `${r.id}  ${status2.padEnd(20)}  → ${r.toEmail}  (${r.createdAt})`);
       }
       return;
@@ -119192,7 +119336,7 @@ function registerTransfersCommands(cli, ctx) {
         app: options.app,
         transferId: emailOrTransferId
       });
-      await writeLine(ctx, `${import_picocolors14.default.green("✓")} Cancelled transfer ${emailOrTransferId}`);
+      await writeLine(ctx, `${import_picocolors15.default.green("✓")} Cancelled transfer ${emailOrTransferId}`);
       return;
     }
     if (!emailOrTransferId) {
@@ -119202,17 +119346,17 @@ function registerTransfersCommands(cli, ctx) {
       app: options.app,
       email: emailOrTransferId
     });
-    await writeLine(ctx, `${import_picocolors14.default.green("✓")} Transfer initiated to ${initiated.toEmail} (id ${initiated.id})`);
-    await writeLine(ctx, import_picocolors14.default.dim(`Expires ${new Date(initiated.expiresAt).toLocaleDateString()}. The recipient must accept via 'percher transfers accept ${initiated.id}'.`));
+    await writeLine(ctx, `${import_picocolors15.default.green("✓")} Transfer initiated to ${initiated.toEmail} (id ${initiated.id})`);
+    await writeLine(ctx, import_picocolors15.default.dim(`Expires ${new Date(initiated.expiresAt).toLocaleDateString()}. The recipient must accept via 'percher transfers accept ${initiated.id}'.`));
     if (initiated.notes) {
-      await writeLine(ctx, import_picocolors14.default.yellow(`  ⚠  ${initiated.notes}`));
+      await writeLine(ctx, import_picocolors15.default.yellow(`  ⚠  ${initiated.notes}`));
     }
   });
   cli.command("transfers [action] [transferId]", "Incoming ownership transfers: list (default) | accept <transferId> | decline <transferId>").action(async (action, transferId) => {
     if (action === undefined || action === "list") {
       const rows = await transfersIncoming(ctx, {});
       if (rows.length === 0) {
-        await writeLine(ctx, import_picocolors14.default.dim("No pending incoming transfers."));
+        await writeLine(ctx, import_picocolors15.default.dim("No pending incoming transfers."));
         return;
       }
       for (const r of rows) {
@@ -119225,7 +119369,7 @@ function registerTransfersCommands(cli, ctx) {
         throw new Error("Usage: percher transfers accept <transferId>");
       }
       const accepted = await transfersAccept(ctx, { transferId });
-      await writeLine(ctx, `${import_picocolors14.default.green("✓")} You now own ${import_picocolors14.default.cyan(accepted.appName)}. Run 'percher open --app ${accepted.appName}' to see it.`);
+      await writeLine(ctx, `${import_picocolors15.default.green("✓")} You now own ${import_picocolors15.default.cyan(accepted.appName)}. Run 'percher open --app ${accepted.appName}' to see it.`);
       return;
     }
     if (action === "decline") {
@@ -119233,7 +119377,7 @@ function registerTransfersCommands(cli, ctx) {
         throw new Error("Usage: percher transfers decline <transferId>");
       }
       await transfersDecline(ctx, { transferId });
-      await writeLine(ctx, `${import_picocolors14.default.green("✓")} Declined transfer ${transferId}.`);
+      await writeLine(ctx, `${import_picocolors15.default.green("✓")} Declined transfer ${transferId}.`);
       return;
     }
     throw new Error(`Unknown transfers action "${action}". Use list | accept <id> | decline <id>.`);
@@ -119302,52 +119446,52 @@ async function createCliContext() {
 }
 
 // src/output.ts
-var import_picocolors15 = __toESM(require_picocolors(), 1);
+var import_picocolors16 = __toESM(require_picocolors(), 1);
 async function renderError(stderr, error48) {
   const writer = stderr.getWriter();
   const encoder = new TextEncoder;
   const lines = [];
   if (error48 instanceof PercherTomlError) {
-    lines.push(`${import_picocolors15.default.red(`error (${error48.code}):`)} ${error48.message}`);
+    lines.push(`${import_picocolors16.default.red(`error (${error48.code}):`)} ${error48.message}`);
     if (error48.tomlLine !== undefined) {
-      lines.push(import_picocolors15.default.dim(`  at percher.toml line ${error48.tomlLine}`));
+      lines.push(import_picocolors16.default.dim(`  at percher.toml line ${error48.tomlLine}`));
     }
     for (const issue2 of error48.issues ?? []) {
-      lines.push(`${import_picocolors15.default.dim("  · ") + import_picocolors15.default.yellow(issue2.path.join("."))}: ${issue2.message}`);
+      lines.push(`${import_picocolors16.default.dim("  · ") + import_picocolors16.default.yellow(issue2.path.join("."))}: ${issue2.message}`);
     }
   } else if (error48 instanceof SunsetError) {
     if (error48.gateCode === "platform_delete_gated") {
-      lines.push(`${import_picocolors15.default.yellow("Percher is shutting down — deletes are paused.")}`);
+      lines.push(`${import_picocolors16.default.yellow("Percher is shutting down — deletes are paused.")}`);
       lines.push(error48.message);
-      lines.push(import_picocolors15.default.dim(`  To delete and permanently forfeit your export window, confirm with your password in the dashboard: ${error48.dashboardUrl}`));
-      lines.push(import_picocolors15.default.dim("  The CLI cannot perform this delete during sunset — it must go through the dashboard."));
+      lines.push(import_picocolors16.default.dim(`  To delete and permanently forfeit your export window, confirm with your password in the dashboard: ${error48.dashboardUrl}`));
+      lines.push(import_picocolors16.default.dim("  The CLI cannot perform this delete during sunset — it must go through the dashboard."));
     } else {
-      lines.push(`${import_picocolors15.default.yellow("Percher is in read-only mode ahead of shutdown.")}`);
+      lines.push(`${import_picocolors16.default.yellow("Percher is in read-only mode ahead of shutdown.")}`);
       lines.push(error48.message);
-      lines.push(import_picocolors15.default.dim(`  Your apps keep running. Export them any time from the dashboard: ${error48.dashboardUrl}`));
+      lines.push(import_picocolors16.default.dim(`  Your apps keep running. Export them any time from the dashboard: ${error48.dashboardUrl}`));
     }
-    lines.push(import_picocolors15.default.dim(`  Final data deletion: ${error48.finalDeletionDate}`));
+    lines.push(import_picocolors16.default.dim(`  Final data deletion: ${error48.finalDeletionDate}`));
   } else if (error48 instanceof PercherApiError) {
     if (error48.status === 502 || error48.status === 503) {
-      lines.push(`${import_picocolors15.default.red("error:")} Percher API is temporarily unavailable (HTTP ${error48.status}). Try again in a few seconds.`);
+      lines.push(`${import_picocolors16.default.red("error:")} Percher API is temporarily unavailable (HTTP ${error48.status}). Try again in a few seconds.`);
     } else {
-      lines.push(`${import_picocolors15.default.red("error:")} ${error48.message}`);
-      lines.push(import_picocolors15.default.dim(`  ${error48.code} (HTTP ${error48.status})`));
+      lines.push(`${import_picocolors16.default.red("error:")} ${error48.message}`);
+      lines.push(import_picocolors16.default.dim(`  ${error48.code} (HTTP ${error48.status})`));
     }
     if (error48.requestId)
-      lines.push(import_picocolors15.default.dim(`  request: ${error48.requestId}`));
+      lines.push(import_picocolors16.default.dim(`  request: ${error48.requestId}`));
   } else if (error48 instanceof PercherCoreError) {
-    lines.push(`${import_picocolors15.default.red(`error (${error48.code}):`)} ${error48.message}`);
+    lines.push(`${import_picocolors16.default.red(`error (${error48.code}):`)} ${error48.message}`);
     if (error48.hint)
-      lines.push(import_picocolors15.default.dim(`  ${error48.hint}`));
+      lines.push(import_picocolors16.default.dim(`  ${error48.hint}`));
   } else if (error48 instanceof Error) {
-    lines.push(`${import_picocolors15.default.red("unexpected error:")} ${error48.message}`);
+    lines.push(`${import_picocolors16.default.red("unexpected error:")} ${error48.message}`);
     if (error48.stack)
-      lines.push(import_picocolors15.default.dim(error48.stack.split(`
+      lines.push(import_picocolors16.default.dim(error48.stack.split(`
 `).slice(1, 4).join(`
 `)));
   } else {
-    lines.push(`${import_picocolors15.default.red("unexpected error:")} ${String(error48)}`);
+    lines.push(`${import_picocolors16.default.red("unexpected error:")} ${String(error48)}`);
   }
   try {
     await writer.write(encoder.encode(`${lines.join(`
@@ -119360,7 +119504,7 @@ async function renderError(stderr, error48) {
 // package.json
 var package_default = {
   name: "percher",
-  version: "0.5.15",
+  version: "0.5.17",
   description: "CLI for the Percher hosting platform — publish apps with one command",
   type: "module",
   bin: {
@@ -119457,7 +119601,7 @@ async function showTelemetryNotice() {
 }
 
 // src/version-check.ts
-var import_picocolors16 = __toESM(require_picocolors(), 1);
+var import_picocolors17 = __toESM(require_picocolors(), 1);
 async function checkForUpdates() {
   try {
     const res = await fetch("https://registry.npmjs.org/percher/latest", {
@@ -119468,9 +119612,9 @@ async function checkForUpdates() {
     const data2 = await res.json();
     const latest = data2.version;
     if (latest && latest !== VERSION) {
-      console.error(import_picocolors16.default.yellow(`
+      console.error(import_picocolors17.default.yellow(`
 Update available: ${VERSION} → ${latest}`));
-      console.error(import_picocolors16.default.dim(`Run: bunx percher@latest
+      console.error(import_picocolors17.default.dim(`Run: bunx percher@latest
 `));
     }
   } catch {}
@@ -119491,6 +119635,7 @@ async function run(argv, ctxOverride) {
   registerMigrateCommands(cli, ctx);
   registerSharingCommands(cli, ctx);
   registerStatusCommands(cli, ctx);
+  registerTokenCommands(cli, ctx);
   registerTransfersCommands(cli, ctx);
   registerAdminCommands(cli, ctx);
   cli.help();

package/dist/package.json

@@ -1,7 +1,7 @@
 {
     "name": "percher",
-    "version": "0.5.15",
-    "description": "CLI for the Percher hosting platform \u2014 publish apps with one command",
+    "version": "0.5.17",
+    "description": "CLI for the Percher hosting platform — publish apps with one command",
     "type": "module",
     "bin": {
         "percher": "./dist/bin/percher.js"

package/dist/src/commands/token.d.ts

@@ -0,0 +1,4 @@
+import type { Context } from "@percher/core";
+import type { CAC } from "cac";
+export declare function registerTokenCommands(cli: CAC, ctx: Context): void;
+//# sourceMappingURL=token.d.ts.map

package/dist/src/commands/token.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"token.d.ts","sourceRoot":"","sources":["../../../src/commands/token.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AAE7C,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,KAAK,CAAC;AAY/B,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,OAAO,GAAG,IAAI,CAwHlE"}

package/dist/src/commands/token.js

@@ -0,0 +1,97 @@
+import * as core from "@percher/core";
+import pc from "picocolors";
+import { SilentExitError, writeLine } from "../cli-utils";
+const VALID_SCOPES = ["deploy", "env", "read", "full"];
+function scopeLabel(scopes, appName) {
+    const s = scopes && scopes.length > 0 ? scopes.join("+") : "full";
+    return appName ? `${s} · ${appName}` : `${s} · all apps`;
+}
+export function registerTokenCommands(cli, ctx) {
+    // cac matches commands by single first-token equality, so `token create
+    // <name>` routes here with action="create". `[arg]` is the token label for
+    // create and the token id for revoke.
+    cli
+        .command("token [action] [arg]", "Manage API tokens: create | list | revoke")
+        .option("--scope <scope>", "(create) deploy | env | read | full (default: full)")
+        .option("--app <name>", "(create) bind the token to a single app")
+        .option("--ttl-days <n>", "(create) token lifetime in days")
+        .action(async (action, arg, options) => {
+        if (!ctx.client.token) {
+            await writeLine(ctx, `${pc.red("✗")} Not logged in. Run: percher login`);
+            throw new SilentExitError();
+        }
+        if (action === "create") {
+            if (!arg) {
+                await writeLine(ctx, `${pc.red("✗")} A name is required. Usage: percher token create <name> [--scope deploy] [--app <name>]`);
+                throw new SilentExitError();
+            }
+            const scope = (options.scope ?? "full");
+            if (!VALID_SCOPES.includes(scope)) {
+                await writeLine(ctx, `${pc.red("✗")} Invalid --scope "${options.scope}". Use one of: ${VALID_SCOPES.join(", ")}.`);
+                throw new SilentExitError();
+            }
+            const ttlDays = options.ttlDays !== undefined ? Number(options.ttlDays) : undefined;
+            if (ttlDays !== undefined && (!Number.isInteger(ttlDays) || ttlDays <= 0)) {
+                await writeLine(ctx, `${pc.red("✗")} --ttl-days must be a positive whole number.`);
+                throw new SilentExitError();
+            }
+            const created = await core.tokenCreate(ctx, {
+                name: arg,
+                scope,
+                app: options.app,
+                ttlDays,
+            });
+            await writeLine(ctx, `${pc.green("✓")} Token created: ${pc.bold(created.name)}  ${pc.dim(`(${scopeLabel(created.scopes, created.appName)})`)}`);
+            await writeLine(ctx, "");
+            await writeLine(ctx, `  ${pc.bold(created.token)}`);
+            await writeLine(ctx, pc.yellow("  ↑ Store this now — the secret is shown only once and can't be retrieved."));
+            await writeLine(ctx, "");
+            await writeLine(ctx, pc.dim("  Use it in CI / an agent:"));
+            await writeLine(ctx, pc.dim(`    PERCHER_TOKEN=${created.token} bunx percher publish`));
+            return;
+        }
+        if (action === "list") {
+            const tokens = await core.tokenList(ctx);
+            if (tokens.length === 0) {
+                await writeLine(ctx, pc.dim("No API tokens."));
+                return;
+            }
+            for (const t of tokens) {
+                const expires = t.expiresAt
+                    ? `expires ${new Date(t.expiresAt).toISOString().slice(0, 10)}`
+                    : "no expiry";
+                await writeLine(ctx, `${pc.bold(t.id)}  ${t.name.padEnd(20)} ${pc.dim(scopeLabel(t.scopes, t.appName))}  ${pc.dim(expires)}`);
+            }
+            await writeLine(ctx, "");
+            await writeLine(ctx, pc.dim("Revoke one with: percher token revoke <id>"));
+            return;
+        }
+        if (action === "revoke") {
+            if (!arg) {
+                await writeLine(ctx, `${pc.red("✗")} A token id is required. Usage: percher token revoke <id> (list ids with \`percher token list\`).`);
+                throw new SilentExitError();
+            }
+            await core.tokenRevoke(ctx, { id: arg });
+            await writeLine(ctx, `${pc.green("✓")} Token revoked.`);
+            return;
+        }
+        throw new Error(`Unknown token action "${action ?? ""}". Use: create | list | revoke.`);
+    });
+    // Help-only registrations (unreachable — cac falls through to the parent
+    // `token [action] ...`), so `--help` surfaces each subcommand.
+    cli
+        .command("token create <name>", "Mint a scoped API token (the secret is shown once)")
+        .option("--scope <scope>", "deploy | env | read | full (default: full)")
+        .option("--app <name>", "Bind the token to a single app")
+        .option("--ttl-days <n>", "Token lifetime in days")
+        .action(async () => {
+        /* Unreachable — handled by `token [action] ...`. */
+    });
+    cli.command("token list", "List your API tokens with scope + bound app").action(async () => {
+        /* Unreachable — handled by `token [action] ...`. */
+    });
+    cli.command("token revoke <id>", "Revoke an API token by id").action(async () => {
+        /* Unreachable — handled by `token [action] ...`. */
+    });
+}
+//# sourceMappingURL=token.js.map

package/dist/src/commands/token.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"token.js","sourceRoot":"","sources":["../../../src/commands/token.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,IAAI,MAAM,eAAe,CAAC;AAEtC,OAAO,EAAE,MAAM,YAAY,CAAC;AAC5B,OAAO,EAAE,eAAe,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAE1D,MAAM,YAAY,GAAG,CAAC,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,CAAU,CAAC;AAGhE,SAAS,UAAU,CAAC,MAAuB,EAAE,OAAsB;IACjE,MAAM,CAAC,GAAG,MAAM,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;IAClE,OAAO,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,OAAO,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,aAAa,CAAC;AAC3D,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,GAAQ,EAAE,GAAY;IAC1D,wEAAwE;IACxE,2EAA2E;IAC3E,sCAAsC;IACtC,GAAG;SACA,OAAO,CAAC,sBAAsB,EAAE,2CAA2C,CAAC;SAC5E,MAAM,CAAC,iBAAiB,EAAE,qDAAqD,CAAC;SAChF,MAAM,CAAC,cAAc,EAAE,yCAAyC,CAAC;SACjE,MAAM,CAAC,gBAAgB,EAAE,iCAAiC,CAAC;SAC3D,MAAM,CACL,KAAK,EACH,MAA0B,EAC1B,GAAuB,EACvB,OAAoE,EACpE,EAAE;QACF,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;YACtB,MAAM,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,oCAAoC,CAAC,CAAC;YACzE,MAAM,IAAI,eAAe,EAAE,CAAC;QAC9B,CAAC;QAED,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;YACxB,IAAI,CAAC,GAAG,EAAE,CAAC;gBACT,MAAM,SAAS,CACb,GAAG,EACH,GAAG,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,yFAAyF,CACxG,CAAC;gBACF,MAAM,IAAI,eAAe,EAAE,CAAC;YAC9B,CAAC;YACD,MAAM,KAAK,GAAG,CAAC,OAAO,CAAC,KAAK,IAAI,MAAM,CAAU,CAAC;YACjD,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;gBAClC,MAAM,SAAS,CACb,GAAG,EACH,GAAG,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,qBAAqB,OAAO,CAAC,KAAK,kBAAkB,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAC7F,CAAC;gBACF,MAAM,IAAI,eAAe,EAAE,CAAC;YAC9B,CAAC;YACD,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YACpF,IAAI,OAAO,KAAK,SAAS,IAAI,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,OAAO,IAAI,CAAC,CAAC,EAAE,CAAC;gBAC1E,MAAM,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,8CAA8C,CAAC,CAAC;gBACnF,MAAM,IAAI,eAAe,EAAE,CAAC;YAC9B,CAAC;YACD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,GAAG,EAAE;gBAC1C,IAAI,EAAE,GAAG;gBACT,KAAK;gBACL,GAAG,EAAE,OAAO,CAAC,GAAG;gBAChB,OAAO;aACR,CAAC,CAAC;YACH,MAAM,SAAS,CACb,GAAG,EACH,GAAG,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,mBAAmB,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,GAAG,CACjE,IAAI,UAAU,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,OAAO,CAAC,GAAG,CACnD,EAAE,CACJ,CAAC;YACF,MAAM,SAAS,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;YACzB,MAAM,SAAS,CAAC,GAAG,EAAE,KAAK,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YACpD,MAAM,SAAS,CACb,GAAG,EACH,EAAE,CAAC,MAAM,CAAC,4EAA4E,CAAC,CACxF,CAAC;YACF,MAAM,SAAS,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;YACzB,MAAM,SAAS,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,4BAA4B,CAAC,CAAC,CAAC;YAC3D,MAAM,SAAS,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,qBAAqB,OAAO,CAAC,KAAK,uBAAuB,CAAC,CAAC,CAAC;YACxF,OAAO;QACT,CAAC;QAED,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;YACtB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;YACzC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACxB,MAAM,SAAS,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC,CAAC;gBAC/C,OAAO;YACT,CAAC;YACD,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;gBACvB,MAAM,OAAO,GAAG,CAAC,CAAC,SAAS;oBACzB,CAAC,CAAC,WAAW,IAAI,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE;oBAC/D,CAAC,CAAC,WAAW,CAAC;gBAChB,MAAM,SAAS,CACb,GAAG,EACH,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAC9C,UAAU,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,CAChC,KAAK,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CACxB,CAAC;YACJ,CAAC;YACD,MAAM,SAAS,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;YACzB,MAAM,SAAS,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,4CAA4C,CAAC,CAAC,CAAC;YAC3E,OAAO;QACT,CAAC;QAED,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;YACxB,IAAI,CAAC,GAAG,EAAE,CAAC;gBACT,MAAM,SAAS,CACb,GAAG,EACH,GAAG,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,mGAAmG,CAClH,CAAC;gBACF,MAAM,IAAI,eAAe,EAAE,CAAC;YAC9B,CAAC;YACD,MAAM,IAAI,CAAC,WAAW,CAAC,GAAG,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;YACzC,MAAM,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;YACxD,OAAO;QACT,CAAC;QAED,MAAM,IAAI,KAAK,CAAC,yBAAyB,MAAM,IAAI,EAAE,iCAAiC,CAAC,CAAC;IAC1F,CAAC,CACF,CAAC;IAEJ,yEAAyE;IACzE,+DAA+D;IAC/D,GAAG;SACA,OAAO,CAAC,qBAAqB,EAAE,oDAAoD,CAAC;SACpF,MAAM,CAAC,iBAAiB,EAAE,4CAA4C,CAAC;SACvE,MAAM,CAAC,cAAc,EAAE,gCAAgC,CAAC;SACxD,MAAM,CAAC,gBAAgB,EAAE,wBAAwB,CAAC;SAClD,MAAM,CAAC,KAAK,IAAI,EAAE;QACjB,oDAAoD;IACtD,CAAC,CAAC,CAAC;IACL,GAAG,CAAC,OAAO,CAAC,YAAY,EAAE,6CAA6C,CAAC,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE;QACzF,oDAAoD;IACtD,CAAC,CAAC,CAAC;IACH,GAAG,CAAC,OAAO,CAAC,mBAAmB,EAAE,2BAA2B,CAAC,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE;QAC9E,oDAAoD;IACtD,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/src/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AAqB7C,wBAAsB,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,WAAW,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CAoEhF"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AAsB7C,wBAAsB,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,WAAW,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CAqEhF"}

package/dist/src/index.js

@@ -12,6 +12,7 @@ import { registerGithubCommands } from "./commands/github";
 import { registerMigrateCommands } from "./commands/migrate";
 import { registerSharingCommands } from "./commands/sharing";
 import { registerStatusCommands } from "./commands/status";
+import { registerTokenCommands } from "./commands/token";
 import { registerTransfersCommands } from "./commands/transfers";
 import { createCliContext } from "./context";
 import { renderError } from "./output";
@@ -31,6 +32,7 @@ export async function run(argv, ctxOverride) {
     registerMigrateCommands(cli, ctx);
     registerSharingCommands(cli, ctx);
     registerStatusCommands(cli, ctx);
+    registerTokenCommands(cli, ctx);
     registerTransfersCommands(cli, ctx);
     registerAdminCommands(cli, ctx);
     cli.help();

package/dist/src/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AACA,OAAO,GAAG,MAAM,KAAK,CAAC;AACtB,OAAO,EAAE,eAAe,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AACnE,OAAO,EAAE,uBAAuB,EAAE,MAAM,oBAAoB,CAAC;AAC7D,OAAO,EAAE,qBAAqB,EAAE,MAAM,kBAAkB,CAAC;AACzD,OAAO,EAAE,oBAAoB,EAAE,MAAM,iBAAiB,CAAC;AACvD,OAAO,EAAE,oBAAoB,EAAE,MAAM,iBAAiB,CAAC;AACvD,OAAO,EAAE,oBAAoB,EAAE,MAAM,iBAAiB,CAAC;AACvD,OAAO,EAAE,uBAAuB,EAAE,MAAM,oBAAoB,CAAC;AAC7D,OAAO,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AACrD,OAAO,EAAE,sBAAsB,EAAE,MAAM,mBAAmB,CAAC;AAC3D,OAAO,EAAE,sBAAsB,EAAE,MAAM,mBAAmB,CAAC;AAC3D,OAAO,EAAE,uBAAuB,EAAE,MAAM,oBAAoB,CAAC;AAC7D,OAAO,EAAE,uBAAuB,EAAE,MAAM,oBAAoB,CAAC;AAC7D,OAAO,EAAE,sBAAsB,EAAE,MAAM,mBAAmB,CAAC;AAC3D,OAAO,EAAE,yBAAyB,EAAE,MAAM,sBAAsB,CAAC;AACjE,OAAO,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAC;AAC7C,OAAO,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AACvC,OAAO,EAAE,mBAAmB,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AACvE,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAElD,MAAM,CAAC,KAAK,UAAU,GAAG,CAAC,IAAc,EAAE,WAAqB;IAC7D,MAAM,GAAG,GAAG,GAAG,CAAC,SAAS,CAAC,CAAC;IAC3B,MAAM,GAAG,GAAG,WAAW,IAAI,CAAC,MAAM,gBAAgB,EAAE,CAAC,CAAC;IAEtD,oBAAoB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IAC/B,uBAAuB,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;IACxC,mBAAmB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IAC9B,sBAAsB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IACjC,oBAAoB,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;IACrC,oBAAoB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IAC/B,uBAAuB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IAClC,sBAAsB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IACjC,uBAAuB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IAClC,uBAAuB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IAClC,sBAAsB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IACjC,yBAAyB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IACpC,qBAAqB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IAEhC,GAAG,CAAC,IAAI,EAAE,CAAC;IACX,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IAErB,MAAM,OAAO,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC;IAElC,IAAI,CAAC;QACH,MAAM,mBAAmB,EAAE,CAAC;QAC5B,GAAG,CAAC,KAAK,CAAC,CAAC,SAAS,EAAE,SAAS,EAAE,GAAG,IAAI,CAAC,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC;QAC3D,mEAAmE;QACnE,4DAA4D;QAC5D,4DAA4D;QAC5D,+DAA+D;QAC/D,mEAAmE;QACnE,iEAAiE;QACjE,gEAAgE;QAChE,+DAA+D;QAC/D,gEAAgE;QAChE,MAAM,SAAS,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QAC1B,IAAI,GAAG,CAAC,cAAc,EAAE,CAAC;YACvB,MAAM,GAAG,CAAC,iBAAiB,EAAE,CAAC;QAChC,CAAC;aAAM,IAAI,SAAS,KAAK,SAAS,IAAI,SAAS,KAAK,MAAM,EAAE,CAAC;YAC3D,2DAA2D;YAC3D,GAAG,CAAC,UAAU,EAAE,CAAC;QACnB,CAAC;aAAM,IAAI,SAAS,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YACrC,6DAA6D;YAC7D,wDAAwD;QAC1D,CAAC;aAAM,IAAI,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC;YAChE,2DAA2D;YAC3D,iEAAiE;YACjE,+DAA+D;QACjE,CAAC;aAAM,CAAC;YACN,gEAAgE;YAChE,gEAAgE;YAChE,MAAM,mBAAmB,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;YAC1C,MAAM,IAAI,eAAe,CAAC,CAAC,CAAC,CAAC;QAC/B,CAAC;QACD,UAAU,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;QAC/B,MAAM,eAAe,EAAE,CAAC;QACxB,OAAO,CAAC,CAAC;IACX,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,yDAAyD;QACzD,IAAI,GAAG,YAAY,eAAe,EAAE,CAAC;YACnC,UAAU,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;YACtC,OAAO,GAAG,CAAC,QAAQ,CAAC;QACtB,CAAC;QACD,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;QACxE,UAAU,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;QACtC,MAAM,WAAW,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QACnC,OAAO,CAAC,CAAC;IACX,CAAC;AACH,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AACA,OAAO,GAAG,MAAM,KAAK,CAAC;AACtB,OAAO,EAAE,eAAe,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AACnE,OAAO,EAAE,uBAAuB,EAAE,MAAM,oBAAoB,CAAC;AAC7D,OAAO,EAAE,qBAAqB,EAAE,MAAM,kBAAkB,CAAC;AACzD,OAAO,EAAE,oBAAoB,EAAE,MAAM,iBAAiB,CAAC;AACvD,OAAO,EAAE,oBAAoB,EAAE,MAAM,iBAAiB,CAAC;AACvD,OAAO,EAAE,oBAAoB,EAAE,MAAM,iBAAiB,CAAC;AACvD,OAAO,EAAE,uBAAuB,EAAE,MAAM,oBAAoB,CAAC;AAC7D,OAAO,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AACrD,OAAO,EAAE,sBAAsB,EAAE,MAAM,mBAAmB,CAAC;AAC3D,OAAO,EAAE,sBAAsB,EAAE,MAAM,mBAAmB,CAAC;AAC3D,OAAO,EAAE,uBAAuB,EAAE,MAAM,oBAAoB,CAAC;AAC7D,OAAO,EAAE,uBAAuB,EAAE,MAAM,oBAAoB,CAAC;AAC7D,OAAO,EAAE,sBAAsB,EAAE,MAAM,mBAAmB,CAAC;AAC3D,OAAO,EAAE,qBAAqB,EAAE,MAAM,kBAAkB,CAAC;AACzD,OAAO,EAAE,yBAAyB,EAAE,MAAM,sBAAsB,CAAC;AACjE,OAAO,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAC;AAC7C,OAAO,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AACvC,OAAO,EAAE,mBAAmB,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AACvE,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAElD,MAAM,CAAC,KAAK,UAAU,GAAG,CAAC,IAAc,EAAE,WAAqB;IAC7D,MAAM,GAAG,GAAG,GAAG,CAAC,SAAS,CAAC,CAAC;IAC3B,MAAM,GAAG,GAAG,WAAW,IAAI,CAAC,MAAM,gBAAgB,EAAE,CAAC,CAAC;IAEtD,oBAAoB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IAC/B,uBAAuB,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;IACxC,mBAAmB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IAC9B,sBAAsB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IACjC,oBAAoB,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;IACrC,oBAAoB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IAC/B,uBAAuB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IAClC,sBAAsB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IACjC,uBAAuB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IAClC,uBAAuB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IAClC,sBAAsB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IACjC,qBAAqB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IAChC,yBAAyB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IACpC,qBAAqB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IAEhC,GAAG,CAAC,IAAI,EAAE,CAAC;IACX,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IAErB,MAAM,OAAO,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC;IAElC,IAAI,CAAC;QACH,MAAM,mBAAmB,EAAE,CAAC;QAC5B,GAAG,CAAC,KAAK,CAAC,CAAC,SAAS,EAAE,SAAS,EAAE,GAAG,IAAI,CAAC,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC;QAC3D,mEAAmE;QACnE,4DAA4D;QAC5D,4DAA4D;QAC5D,+DAA+D;QAC/D,mEAAmE;QACnE,iEAAiE;QACjE,gEAAgE;QAChE,+DAA+D;QAC/D,gEAAgE;QAChE,MAAM,SAAS,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QAC1B,IAAI,GAAG,CAAC,cAAc,EAAE,CAAC;YACvB,MAAM,GAAG,CAAC,iBAAiB,EAAE,CAAC;QAChC,CAAC;aAAM,IAAI,SAAS,KAAK,SAAS,IAAI,SAAS,KAAK,MAAM,EAAE,CAAC;YAC3D,2DAA2D;YAC3D,GAAG,CAAC,UAAU,EAAE,CAAC;QACnB,CAAC;aAAM,IAAI,SAAS,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YACrC,6DAA6D;YAC7D,wDAAwD;QAC1D,CAAC;aAAM,IAAI,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC;YAChE,2DAA2D;YAC3D,iEAAiE;YACjE,+DAA+D;QACjE,CAAC;aAAM,CAAC;YACN,gEAAgE;YAChE,gEAAgE;YAChE,MAAM,mBAAmB,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;YAC1C,MAAM,IAAI,eAAe,CAAC,CAAC,CAAC,CAAC;QAC/B,CAAC;QACD,UAAU,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;QAC/B,MAAM,eAAe,EAAE,CAAC;QACxB,OAAO,CAAC,CAAC;IACX,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,yDAAyD;QACzD,IAAI,GAAG,YAAY,eAAe,EAAE,CAAC;YACnC,UAAU,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;YACtC,OAAO,GAAG,CAAC,QAAQ,CAAC;QACtB,CAAC;QACD,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;QACxE,UAAU,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;QACtC,MAAM,WAAW,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QACnC,OAAO,CAAC,CAAC;IACX,CAAC;AACH,CAAC"}

package/dist/templates/capsule/src/lib/ai.ts

@@ -30,3 +30,62 @@ export async function complete(
   const data = (await res.json()) as { choices?: Array<{ message?: { content?: string } }> };
   return data.choices?.[0]?.message?.content ?? "";
 }
+
+/**
+ * Streaming variant of {@link complete} — calls `onToken` with each text delta
+ * as it arrives and resolves with the full text. Same auth + billing as
+ * `complete` (keyless, billed to the app owner). Use it for a typewriter UI:
+ *
+ *   const full = await streamComplete("Write a haiku", (t) => { output.value += t; });
+ */
+export async function streamComplete(
+  prompt: string,
+  onToken: (delta: string) => void,
+  opts?: { model?: string; maxTokens?: number },
+): Promise<string> {
+  if (!AI_URL) throw new Error("Managed inference isn't configured for this app.");
+  if (!pb.authStore.isValid) throw new Error("Sign in to use AI.");
+  const res = await fetch(AI_URL, {
+    method: "POST",
+    headers: { "content-type": "application/json", authorization: pb.authStore.token },
+    body: JSON.stringify({
+      model: opts?.model,
+      max_tokens: opts?.maxTokens ?? 512,
+      messages: [{ role: "user", content: prompt }],
+      stream: true,
+    }),
+  });
+  if (!res.ok || !res.body) throw new Error(`AI request failed (${res.status})`);
+
+  const reader = res.body.getReader();
+  const decoder = new TextDecoder();
+  let buffer = "";
+  let full = "";
+  for (;;) {
+    const { done, value } = await reader.read();
+    if (done) break;
+    buffer += decoder.decode(value, { stream: true });
+    // SSE events are separated by a blank line; parse each complete one.
+    let sep = buffer.indexOf("\n\n");
+    while (sep !== -1) {
+      const event = buffer.slice(0, sep);
+      buffer = buffer.slice(sep + 2);
+      sep = buffer.indexOf("\n\n");
+      const line = event.startsWith("data:") ? event.slice(5).trim() : "";
+      if (!line || line === "[DONE]") continue;
+      try {
+        const chunk = JSON.parse(line) as {
+          choices?: Array<{ delta?: { content?: string } }>;
+        };
+        const delta = chunk.choices?.[0]?.delta?.content ?? "";
+        if (delta) {
+          full += delta;
+          onToken(delta);
+        }
+      } catch {
+        /* ignore keep-alive / non-JSON lines */
+      }
+    }
+  }
+  return full;
+}

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "percher",
-  "version": "0.5.15",
-  "description": "CLI for the Percher hosting platform \u2014 publish apps with one command",
+  "version": "0.5.17",
+  "description": "CLI for the Percher hosting platform — publish apps with one command",
   "type": "module",
   "bin": {
     "percher": "./dist/bin/percher.js"