percher 0.5.22 → 0.5.23

package/dist/package.json

@@ -1,6 +1,6 @@
 {
     "name": "percher",
-    "version": "0.5.22",
+    "version": "0.5.23",
     "description": "CLI for the Percher hosting platform — publish apps with one command",
     "type": "module",
     "bin": {
@@ -27,8 +27,8 @@
         "typecheck": "tsc --noEmit"
     },
     "dependencies": {
-        "@percher/client": "^0.2.21",
-        "@percher/core": "^0.4.27",
+        "@percher/client": "^0.2.22",
+        "@percher/core": "^0.4.28",
         "@percher/toml": "^0.1.10",
         "cac": "^7.0.0",
         "picocolors": "^1.1.1"

package/dist/src/commands/analytics.d.ts

@@ -0,0 +1,4 @@
+import type { Context } from "@percher/core";
+import type { CAC } from "cac";
+export declare function registerAnalyticsCommands(cli: CAC, ctx: Context): void;
+//# sourceMappingURL=analytics.d.ts.map

package/dist/src/commands/analytics.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"analytics.d.ts","sourceRoot":"","sources":["../../../src/commands/analytics.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AAE7C,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,KAAK,CAAC;AAI/B,wBAAgB,yBAAyB,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,OAAO,GAAG,IAAI,CA+DtE"}

package/dist/src/commands/analytics.js

@@ -0,0 +1,66 @@
+import * as core from "@percher/core";
+import pc from "picocolors";
+import { writeLine } from "../cli-utils";
+export function registerAnalyticsCommands(cli, ctx) {
+    cli
+        .command("analytics [app]", "Show visitor analytics for an app")
+        .option("--days <n>", "Window in days (1-90, default 7)")
+        .action(async (app, options) => {
+        // `Number()` is the only conversion here — the RANGE is the core command's
+        // to enforce, so there is exactly one place that decides what a valid
+        // window is. `Number("abc")` is NaN, which the schema rejects with the
+        // same message as 0 or 365.
+        const days = options.days === undefined ? undefined : Number(options.days);
+        const a = await core.analytics(ctx, { app, days });
+        await writeLine(ctx, pc.bold(`Visitors — last ${a.period}`));
+        await writeLine(ctx, "");
+        // Daily uniques SUMMED: identity is per-UTC-day, so nothing can dedupe
+        // across days. The label says so rather than implying otherwise.
+        await writeLine(ctx, `  Unique visitors  ${a.totalVisitors.toLocaleString()} ${pc.dim("(daily, summed)")}`);
+        await writeLine(ctx, `  Page views       ${a.totalPageviews.toLocaleString()}`);
+        await writeLine(ctx, `  Requests         ${a.totalRequests.toLocaleString()}`);
+        await writeLine(ctx, `  Sessions         ${a.totalSessions.toLocaleString()}`);
+        await writeLine(ctx, `  Bounce rate      ${a.totalSessions > 0 ? `${a.bounceRate}%` : "—"}`);
+        await writeLine(ctx, `  Error rate       ${a.errorRate}%`);
+        await writeLine(ctx, pc.dim(`  Filtered         ${(a.totalBotRequests + a.totalScannerRequests).toLocaleString()} bot/scanner requests`));
+        await printList(ctx, "Top pages", a.topPages.map((p) => [p.path, p.views]));
+        await printList(ctx, "Traffic sources", a.topReferrers.map((r) => [r.source, r.visits]));
+        await printList(ctx, "Entry pages", a.topEntryPaths.map((p) => [p.path, p.sessions]));
+        await printList(ctx, "Countries", a.byCountry.map((c) => [c.country, c.visitors]));
+        await printList(ctx, "Devices", a.byDevice.map((d) => [d.key, d.visitors]));
+        if (a.totalRequests === 0 && a.totalBotRequests === 0) {
+            await writeLine(ctx, "");
+            await writeLine(ctx, pc.dim("No traffic recorded yet. Analytics update every 15 minutes."));
+        }
+    });
+}
+/**
+ * Strip anything that lets a stored label control the terminal.
+ *
+ * Paths, referrer hosts and device strings all originate from request traffic,
+ * so a visitor chooses them. Printed raw, an OSC-8 sequence renders as a
+ * clickable link to somewhere else entirely, and a bidi override reorders the
+ * text so `/safe\u202Etxt.exe` reads as something it is not. C0/C1, CSI/OSC and
+ * the bidi controls all go.
+ */
+function safeLabel(label) {
+    return (label
+        // biome-ignore lint/suspicious/noControlCharactersInRegex: stripping them is the point
+        .replace(/\u001b\][^\u0007\u001b]*(?:\u0007|\u001b\\)?/g, "")
+        // biome-ignore lint/suspicious/noControlCharactersInRegex: stripping them is the point
+        .replace(/\u001b\[[0-9;?]*[ -/]*[@-~]/g, "")
+        // biome-ignore lint/suspicious/noControlCharactersInRegex: stripping them is the point
+        .replace(/[\u0000-\u001f\u007f-\u009f]/g, "")
+        .replace(/[\u200e\u200f\u202a-\u202e\u2066-\u2069]/g, "")
+        .slice(0, 120));
+}
+async function printList(ctx, title, rows) {
+    if (rows.length === 0)
+        return;
+    await writeLine(ctx, "");
+    await writeLine(ctx, pc.bold(title));
+    for (const [label, value] of rows.slice(0, 10)) {
+        await writeLine(ctx, `  ${String(value).padStart(7)}  ${safeLabel(label)}`);
+    }
+}
+//# sourceMappingURL=analytics.js.map

package/dist/src/commands/analytics.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"analytics.js","sourceRoot":"","sources":["../../../src/commands/analytics.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,IAAI,MAAM,eAAe,CAAC;AAEtC,OAAO,EAAE,MAAM,YAAY,CAAC;AAC5B,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAEzC,MAAM,UAAU,yBAAyB,CAAC,GAAQ,EAAE,GAAY;IAC9D,GAAG;SACA,OAAO,CAAC,iBAAiB,EAAE,mCAAmC,CAAC;SAC/D,MAAM,CAAC,YAAY,EAAE,kCAAkC,CAAC;SACxD,MAAM,CAAC,KAAK,EAAE,GAAuB,EAAE,OAA0B,EAAE,EAAE;QACpE,2EAA2E;QAC3E,sEAAsE;QACtE,uEAAuE;QACvE,4BAA4B;QAC5B,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAC3E,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC;QAEnD,MAAM,SAAS,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QAC7D,MAAM,SAAS,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QACzB,uEAAuE;QACvE,iEAAiE;QACjE,MAAM,SAAS,CACb,GAAG,EACH,sBAAsB,CAAC,CAAC,aAAa,CAAC,cAAc,EAAE,IAAI,EAAE,CAAC,GAAG,CAAC,iBAAiB,CAAC,EAAE,CACtF,CAAC;QACF,MAAM,SAAS,CAAC,GAAG,EAAE,sBAAsB,CAAC,CAAC,cAAc,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC;QAChF,MAAM,SAAS,CAAC,GAAG,EAAE,sBAAsB,CAAC,CAAC,aAAa,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC;QAC/E,MAAM,SAAS,CAAC,GAAG,EAAE,sBAAsB,CAAC,CAAC,aAAa,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC;QAC/E,MAAM,SAAS,CAAC,GAAG,EAAE,sBAAsB,CAAC,CAAC,aAAa,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,UAAU,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;QAC7F,MAAM,SAAS,CAAC,GAAG,EAAE,sBAAsB,CAAC,CAAC,SAAS,GAAG,CAAC,CAAC;QAC3D,MAAM,SAAS,CACb,GAAG,EACH,EAAE,CAAC,GAAG,CACJ,sBAAsB,CAAC,CAAC,CAAC,gBAAgB,GAAG,CAAC,CAAC,oBAAoB,CAAC,CAAC,cAAc,EAAE,uBAAuB,CAC5G,CACF,CAAC;QAEF,MAAM,SAAS,CACb,GAAG,EACH,WAAW,EACX,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAqB,CAAC,CAC7D,CAAC;QACF,MAAM,SAAS,CACb,GAAG,EACH,iBAAiB,EACjB,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAqB,CAAC,CACpE,CAAC;QACF,MAAM,SAAS,CACb,GAAG,EACH,aAAa,EACb,CAAC,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAqB,CAAC,CACrE,CAAC;QACF,MAAM,SAAS,CACb,GAAG,EACH,WAAW,EACX,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,CAAqB,CAAC,CACpE,CAAC;QACF,MAAM,SAAS,CACb,GAAG,EACH,SAAS,EACT,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,QAAQ,CAAqB,CAAC,CAC/D,CAAC;QAEF,IAAI,CAAC,CAAC,aAAa,KAAK,CAAC,IAAI,CAAC,CAAC,gBAAgB,KAAK,CAAC,EAAE,CAAC;YACtD,MAAM,SAAS,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;YACzB,MAAM,SAAS,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,6DAA6D,CAAC,CAAC,CAAC;QAC9F,CAAC;IACH,CAAC,CAAC,CAAC;AACP,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,SAAS,CAAC,KAAa;IAC9B,OAAO,CACL,KAAK;QACH,uFAAuF;SACtF,OAAO,CAAC,+CAA+C,EAAE,EAAE,CAAC;QAC7D,uFAAuF;SACtF,OAAO,CAAC,8BAA8B,EAAE,EAAE,CAAC;QAC5C,uFAAuF;SACtF,OAAO,CAAC,+BAA+B,EAAE,EAAE,CAAC;SAC5C,OAAO,CAAC,2CAA2C,EAAE,EAAE,CAAC;SACxD,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CACjB,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,SAAS,CACtB,GAAY,EACZ,KAAa,EACb,IAA6B;IAE7B,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO;IAC9B,MAAM,SAAS,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;IACzB,MAAM,SAAS,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;IACrC,KAAK,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;QAC/C,MAAM,SAAS,CAAC,GAAG,EAAE,KAAK,MAAM,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAC9E,CAAC;AACH,CAAC"}

package/dist/src/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AAuB7C,wBAAsB,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,WAAW,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CAsEhF"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AAwB7C,wBAAsB,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,WAAW,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CAuEhF"}

package/dist/src/index.js

@@ -2,6 +2,7 @@ import cac from "cac";
 import { SilentExitError, writeUnknownCommand } from "./cli-utils";
 import { registerAccountCommands } from "./commands/account";
 import { registerAdminCommands } from "./commands/admin";
+import { registerAnalyticsCommands } from "./commands/analytics";
 import { registerAppsCommands } from "./commands/apps";
 import { registerAuthCommands } from "./commands/auth";
 import { registerDataCommands } from "./commands/data";
@@ -23,6 +24,7 @@ export async function run(argv, ctxOverride) {
     const cli = cac("percher");
     const ctx = ctxOverride ?? (await createCliContext());
     registerAppsCommands(cli, ctx);
+    registerAnalyticsCommands(cli, ctx);
     registerDeploysCommands(cli, ctx, argv);
     registerEnvCommands(cli, ctx);
     registerExportCommands(cli, ctx);

package/dist/src/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AACA,OAAO,GAAG,MAAM,KAAK,CAAC;AACtB,OAAO,EAAE,eAAe,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AACnE,OAAO,EAAE,uBAAuB,EAAE,MAAM,oBAAoB,CAAC;AAC7D,OAAO,EAAE,qBAAqB,EAAE,MAAM,kBAAkB,CAAC;AACzD,OAAO,EAAE,oBAAoB,EAAE,MAAM,iBAAiB,CAAC;AACvD,OAAO,EAAE,oBAAoB,EAAE,MAAM,iBAAiB,CAAC;AACvD,OAAO,EAAE,oBAAoB,EAAE,MAAM,iBAAiB,CAAC;AACvD,OAAO,EAAE,uBAAuB,EAAE,MAAM,oBAAoB,CAAC;AAC7D,OAAO,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AACrD,OAAO,EAAE,sBAAsB,EAAE,MAAM,mBAAmB,CAAC;AAC3D,OAAO,EAAE,sBAAsB,EAAE,MAAM,mBAAmB,CAAC;AAC3D,OAAO,EAAE,qBAAqB,EAAE,MAAM,kBAAkB,CAAC;AACzD,OAAO,EAAE,uBAAuB,EAAE,MAAM,oBAAoB,CAAC;AAC7D,OAAO,EAAE,uBAAuB,EAAE,MAAM,oBAAoB,CAAC;AAC7D,OAAO,EAAE,sBAAsB,EAAE,MAAM,mBAAmB,CAAC;AAC3D,OAAO,EAAE,qBAAqB,EAAE,MAAM,kBAAkB,CAAC;AACzD,OAAO,EAAE,yBAAyB,EAAE,MAAM,sBAAsB,CAAC;AACjE,OAAO,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAC;AAC7C,OAAO,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AACvC,OAAO,EAAE,mBAAmB,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AACvE,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAElD,MAAM,CAAC,KAAK,UAAU,GAAG,CAAC,IAAc,EAAE,WAAqB;IAC7D,MAAM,GAAG,GAAG,GAAG,CAAC,SAAS,CAAC,CAAC;IAC3B,MAAM,GAAG,GAAG,WAAW,IAAI,CAAC,MAAM,gBAAgB,EAAE,CAAC,CAAC;IAEtD,oBAAoB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IAC/B,uBAAuB,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;IACxC,mBAAmB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IAC9B,sBAAsB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IACjC,oBAAoB,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;IACrC,oBAAoB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IAC/B,uBAAuB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IAClC,sBAAsB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IACjC,qBAAqB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IAChC,uBAAuB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IAClC,uBAAuB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IAClC,sBAAsB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IACjC,qBAAqB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IAChC,yBAAyB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IACpC,qBAAqB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IAEhC,GAAG,CAAC,IAAI,EAAE,CAAC;IACX,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IAErB,MAAM,OAAO,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC;IAElC,IAAI,CAAC;QACH,MAAM,mBAAmB,EAAE,CAAC;QAC5B,GAAG,CAAC,KAAK,CAAC,CAAC,SAAS,EAAE,SAAS,EAAE,GAAG,IAAI,CAAC,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC;QAC3D,mEAAmE;QACnE,4DAA4D;QAC5D,4DAA4D;QAC5D,+DAA+D;QAC/D,mEAAmE;QACnE,iEAAiE;QACjE,gEAAgE;QAChE,+DAA+D;QAC/D,gEAAgE;QAChE,MAAM,SAAS,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QAC1B,IAAI,GAAG,CAAC,cAAc,EAAE,CAAC;YACvB,MAAM,GAAG,CAAC,iBAAiB,EAAE,CAAC;QAChC,CAAC;aAAM,IAAI,SAAS,KAAK,SAAS,IAAI,SAAS,KAAK,MAAM,EAAE,CAAC;YAC3D,2DAA2D;YAC3D,GAAG,CAAC,UAAU,EAAE,CAAC;QACnB,CAAC;aAAM,IAAI,SAAS,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YACrC,6DAA6D;YAC7D,wDAAwD;QAC1D,CAAC;aAAM,IAAI,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC;YAChE,2DAA2D;YAC3D,iEAAiE;YACjE,+DAA+D;QACjE,CAAC;aAAM,CAAC;YACN,gEAAgE;YAChE,gEAAgE;YAChE,MAAM,mBAAmB,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;YAC1C,MAAM,IAAI,eAAe,CAAC,CAAC,CAAC,CAAC;QAC/B,CAAC;QACD,UAAU,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;QAC/B,MAAM,eAAe,EAAE,CAAC;QACxB,OAAO,CAAC,CAAC;IACX,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,yDAAyD;QACzD,IAAI,GAAG,YAAY,eAAe,EAAE,CAAC;YACnC,UAAU,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;YACtC,OAAO,GAAG,CAAC,QAAQ,CAAC;QACtB,CAAC;QACD,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;QACxE,UAAU,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;QACtC,MAAM,WAAW,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QACnC,OAAO,CAAC,CAAC;IACX,CAAC;AACH,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AACA,OAAO,GAAG,MAAM,KAAK,CAAC;AACtB,OAAO,EAAE,eAAe,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AACnE,OAAO,EAAE,uBAAuB,EAAE,MAAM,oBAAoB,CAAC;AAC7D,OAAO,EAAE,qBAAqB,EAAE,MAAM,kBAAkB,CAAC;AACzD,OAAO,EAAE,yBAAyB,EAAE,MAAM,sBAAsB,CAAC;AACjE,OAAO,EAAE,oBAAoB,EAAE,MAAM,iBAAiB,CAAC;AACvD,OAAO,EAAE,oBAAoB,EAAE,MAAM,iBAAiB,CAAC;AACvD,OAAO,EAAE,oBAAoB,EAAE,MAAM,iBAAiB,CAAC;AACvD,OAAO,EAAE,uBAAuB,EAAE,MAAM,oBAAoB,CAAC;AAC7D,OAAO,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AACrD,OAAO,EAAE,sBAAsB,EAAE,MAAM,mBAAmB,CAAC;AAC3D,OAAO,EAAE,sBAAsB,EAAE,MAAM,mBAAmB,CAAC;AAC3D,OAAO,EAAE,qBAAqB,EAAE,MAAM,kBAAkB,CAAC;AACzD,OAAO,EAAE,uBAAuB,EAAE,MAAM,oBAAoB,CAAC;AAC7D,OAAO,EAAE,uBAAuB,EAAE,MAAM,oBAAoB,CAAC;AAC7D,OAAO,EAAE,sBAAsB,EAAE,MAAM,mBAAmB,CAAC;AAC3D,OAAO,EAAE,qBAAqB,EAAE,MAAM,kBAAkB,CAAC;AACzD,OAAO,EAAE,yBAAyB,EAAE,MAAM,sBAAsB,CAAC;AACjE,OAAO,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAC;AAC7C,OAAO,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AACvC,OAAO,EAAE,mBAAmB,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AACvE,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAElD,MAAM,CAAC,KAAK,UAAU,GAAG,CAAC,IAAc,EAAE,WAAqB;IAC7D,MAAM,GAAG,GAAG,GAAG,CAAC,SAAS,CAAC,CAAC;IAC3B,MAAM,GAAG,GAAG,WAAW,IAAI,CAAC,MAAM,gBAAgB,EAAE,CAAC,CAAC;IAEtD,oBAAoB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IAC/B,yBAAyB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IACpC,uBAAuB,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;IACxC,mBAAmB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IAC9B,sBAAsB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IACjC,oBAAoB,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;IACrC,oBAAoB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IAC/B,uBAAuB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IAClC,sBAAsB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IACjC,qBAAqB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IAChC,uBAAuB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IAClC,uBAAuB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IAClC,sBAAsB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IACjC,qBAAqB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IAChC,yBAAyB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IACpC,qBAAqB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IAEhC,GAAG,CAAC,IAAI,EAAE,CAAC;IACX,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IAErB,MAAM,OAAO,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC;IAElC,IAAI,CAAC;QACH,MAAM,mBAAmB,EAAE,CAAC;QAC5B,GAAG,CAAC,KAAK,CAAC,CAAC,SAAS,EAAE,SAAS,EAAE,GAAG,IAAI,CAAC,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC;QAC3D,mEAAmE;QACnE,4DAA4D;QAC5D,4DAA4D;QAC5D,+DAA+D;QAC/D,mEAAmE;QACnE,iEAAiE;QACjE,gEAAgE;QAChE,+DAA+D;QAC/D,gEAAgE;QAChE,MAAM,SAAS,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QAC1B,IAAI,GAAG,CAAC,cAAc,EAAE,CAAC;YACvB,MAAM,GAAG,CAAC,iBAAiB,EAAE,CAAC;QAChC,CAAC;aAAM,IAAI,SAAS,KAAK,SAAS,IAAI,SAAS,KAAK,MAAM,EAAE,CAAC;YAC3D,2DAA2D;YAC3D,GAAG,CAAC,UAAU,EAAE,CAAC;QACnB,CAAC;aAAM,IAAI,SAAS,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YACrC,6DAA6D;YAC7D,wDAAwD;QAC1D,CAAC;aAAM,IAAI,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC;YAChE,2DAA2D;YAC3D,iEAAiE;YACjE,+DAA+D;QACjE,CAAC;aAAM,CAAC;YACN,gEAAgE;YAChE,gEAAgE;YAChE,MAAM,mBAAmB,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;YAC1C,MAAM,IAAI,eAAe,CAAC,CAAC,CAAC,CAAC;QAC/B,CAAC;QACD,UAAU,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;QAC/B,MAAM,eAAe,EAAE,CAAC;QACxB,OAAO,CAAC,CAAC;IACX,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,yDAAyD;QACzD,IAAI,GAAG,YAAY,eAAe,EAAE,CAAC;YACnC,UAAU,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;YACtC,OAAO,GAAG,CAAC,QAAQ,CAAC;QACtB,CAAC;QACD,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;QACxE,UAAU,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;QACtC,MAAM,WAAW,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QACnC,OAAO,CAAC,CAAC;IACX,CAAC;AACH,CAAC"}

package/dist/templates/capsule/src/lib/ai-client.ts

@@ -0,0 +1,193 @@
+export type ManagedInferenceOptions = {
+  model?: string;
+  maxTokens?: number;
+  signal?: AbortSignal;
+};
+
+export class ManagedInferenceError extends Error {
+  constructor(
+    message: string,
+    readonly status?: number,
+    readonly code?: string,
+    readonly retryAt?: string,
+  ) {
+    super(message);
+    this.name = "ManagedInferenceError";
+  }
+}
+
+export function createManagedInferenceClient(config: {
+  endpoint?: string;
+  getSession: () => { valid: boolean; token: string };
+  fetch?: typeof globalThis.fetch;
+}) {
+  const fetcher = config.fetch ?? globalThis.fetch;
+
+  function isConfigured(): boolean {
+    return Boolean(config.endpoint);
+  }
+
+  function assertReady(): string {
+    if (!config.endpoint) {
+      throw new ManagedInferenceError(
+        "Managed inference is not available for this deployment.",
+        503,
+        "INFERENCE_DISABLED",
+      );
+    }
+    const session = config.getSession();
+    if (!session.valid || !session.token) {
+      throw new ManagedInferenceError("Sign in to use AI.", 401, "INFERENCE_AUTH_REQUIRED");
+    }
+    return session.token;
+  }
+
+  async function safeError(response: Response): Promise<ManagedInferenceError> {
+    let code: string | undefined;
+    let resetAt: string | undefined;
+    try {
+      const body = (await response.json()) as {
+        error?: { code?: unknown; resetAt?: unknown; retryAfterSec?: unknown };
+      };
+      if (typeof body.error?.code === "string") code = body.error.code;
+      if (typeof body.error?.resetAt === "string") resetAt = body.error.resetAt;
+      if (!resetAt && typeof body.error?.retryAfterSec === "number") {
+        resetAt = new Date(Date.now() + body.error.retryAfterSec * 1000).toISOString();
+      }
+    } catch {
+      // Never show raw upstream/proxy response bodies to capsule users.
+    }
+
+    if (response.status === 401) {
+      return new ManagedInferenceError("Your session expired. Sign in again.", 401, code);
+    }
+    if (response.status === 403) {
+      return new ManagedInferenceError(
+        "Managed inference is not included for this app's plan.",
+        403,
+        code,
+      );
+    }
+    if (response.status === 429) {
+      return new ManagedInferenceError(
+        resetAt ? `AI usage is limited until ${resetAt}.` : "AI usage is temporarily limited.",
+        429,
+        code,
+        resetAt,
+      );
+    }
+    if (response.status === 503) {
+      return new ManagedInferenceError(
+        "Managed inference is currently unavailable.",
+        503,
+        code ?? "INFERENCE_DISABLED",
+      );
+    }
+    return new ManagedInferenceError(
+      "The AI request could not be completed. Try again.",
+      response.status,
+      code,
+    );
+  }
+
+  async function request(prompt: string, opts: ManagedInferenceOptions, stream: boolean) {
+    // Validate configuration/auth before the network-error wrapper so a local
+    // disabled or signed-out state keeps its precise user-facing error.
+    const authorization = `Bearer ${assertReady()}`;
+    let response: Response;
+    try {
+      response = await fetcher(config.endpoint!, {
+        method: "POST",
+        headers: {
+          "content-type": "application/json",
+          authorization,
+        },
+        body: JSON.stringify({
+          model: opts.model,
+          max_tokens: opts.maxTokens ?? 512,
+          messages: [{ role: "user", content: prompt }],
+          ...(stream ? { stream: true } : {}),
+        }),
+        signal: opts.signal,
+      });
+    } catch (error) {
+      if (opts.signal?.aborted) throw error;
+      throw new ManagedInferenceError("Managed inference could not be reached. Try again.");
+    }
+    if (!response.ok) throw await safeError(response);
+    return response;
+  }
+
+  async function complete(
+    prompt: string,
+    opts: ManagedInferenceOptions = {},
+  ): Promise<string> {
+    const response = await request(prompt, opts, false);
+    const data = (await response.json()) as {
+      choices?: Array<{ message?: { content?: unknown } }>;
+    };
+    const content = data.choices?.[0]?.message?.content;
+    if (typeof content !== "string") {
+      throw new ManagedInferenceError("The AI provider returned an invalid response.");
+    }
+    return content;
+  }
+
+  async function streamComplete(
+    prompt: string,
+    onToken: (delta: string) => void,
+    opts: ManagedInferenceOptions = {},
+  ): Promise<string> {
+    const response = await request(prompt, opts, true);
+    if (!response.body) throw new ManagedInferenceError("The AI stream could not be opened.");
+
+    const reader = response.body.getReader();
+    const decoder = new TextDecoder();
+    let buffer = "";
+    let full = "";
+    let sawDone = false;
+    try {
+      for (;;) {
+        const { done, value } = await reader.read();
+        if (done) break;
+        buffer += decoder.decode(value, { stream: true }).replaceAll("\r\n", "\n");
+        let separator = buffer.indexOf("\n\n");
+        while (separator !== -1) {
+          const event = buffer.slice(0, separator);
+          buffer = buffer.slice(separator + 2);
+          separator = buffer.indexOf("\n\n");
+          const payload = event
+            .split("\n")
+            .filter((line) => line.startsWith("data:"))
+            .map((line) => line.slice(5).trimStart())
+            .join("\n")
+            .trim();
+          if (!payload) continue;
+          if (payload === "[DONE]") {
+            sawDone = true;
+            continue;
+          }
+          try {
+            const chunk = JSON.parse(payload) as {
+              choices?: Array<{ delta?: { content?: unknown } }>;
+            };
+            const delta = chunk.choices?.[0]?.delta?.content;
+            if (typeof delta === "string" && delta) {
+              full += delta;
+              onToken(delta);
+            }
+          } catch {
+            // Ignore SSE comments/keep-alives and malformed non-data events.
+          }
+        }
+      }
+      if (!sawDone) throw new ManagedInferenceError("The AI stream ended unexpectedly.");
+      return full;
+    } finally {
+      if (opts.signal?.aborted) await reader.cancel().catch(() => undefined);
+      reader.releaseLock();
+    }
+  }
+
+  return { isConfigured, complete, streamComplete };
+}

package/dist/templates/capsule/src/lib/ai.ts

@@ -1,91 +1,15 @@
+import { createManagedInferenceClient } from "./ai-client";
 import { pb } from "./db";
 
-// Managed inference endpoint, injected at build time (a public URL, not a
-// secret). The Dockerfile declares ARG VITE_PERCHER_AI_URL.
-const AI_URL = import.meta.env.VITE_PERCHER_AI_URL;
-
-/**
- * Keyless managed inference — NO API key, billed to the app owner's Percher
- * plan. Only works for SIGNED-IN users (the proxy validates the current PB
- * session against this app's sidecar). Returns the completion text.
- *
- *   const reply = await complete("Summarize: " + text);
- */
-export async function complete(
-  prompt: string,
-  opts?: { model?: string; maxTokens?: number },
-): Promise<string> {
-  if (!AI_URL) throw new Error("Managed inference isn't configured for this app.");
-  if (!pb.authStore.isValid) throw new Error("Sign in to use AI.");
-  const res = await fetch(AI_URL, {
-    method: "POST",
-    headers: { "content-type": "application/json", authorization: pb.authStore.token },
-    body: JSON.stringify({
-      model: opts?.model,
-      max_tokens: opts?.maxTokens ?? 512,
-      messages: [{ role: "user", content: prompt }],
-    }),
-  });
-  if (!res.ok) throw new Error(`AI request failed (${res.status})`);
-  const data = (await res.json()) as { choices?: Array<{ message?: { content?: string } }> };
-  return data.choices?.[0]?.message?.content ?? "";
-}
-
-/**
- * Streaming variant of {@link complete} — calls `onToken` with each text delta
- * as it arrives and resolves with the full text. Same auth + billing as
- * `complete` (keyless, billed to the app owner). Use it for a typewriter UI:
- *
- *   const full = await streamComplete("Write a haiku", (t) => { output.value += t; });
- */
-export async function streamComplete(
-  prompt: string,
-  onToken: (delta: string) => void,
-  opts?: { model?: string; maxTokens?: number },
-): Promise<string> {
-  if (!AI_URL) throw new Error("Managed inference isn't configured for this app.");
-  if (!pb.authStore.isValid) throw new Error("Sign in to use AI.");
-  const res = await fetch(AI_URL, {
-    method: "POST",
-    headers: { "content-type": "application/json", authorization: pb.authStore.token },
-    body: JSON.stringify({
-      model: opts?.model,
-      max_tokens: opts?.maxTokens ?? 512,
-      messages: [{ role: "user", content: prompt }],
-      stream: true,
-    }),
-  });
-  if (!res.ok || !res.body) throw new Error(`AI request failed (${res.status})`);
-
-  const reader = res.body.getReader();
-  const decoder = new TextDecoder();
-  let buffer = "";
-  let full = "";
-  for (;;) {
-    const { done, value } = await reader.read();
-    if (done) break;
-    buffer += decoder.decode(value, { stream: true });
-    // SSE events are separated by a blank line; parse each complete one.
-    let sep = buffer.indexOf("\n\n");
-    while (sep !== -1) {
-      const event = buffer.slice(0, sep);
-      buffer = buffer.slice(sep + 2);
-      sep = buffer.indexOf("\n\n");
-      const line = event.startsWith("data:") ? event.slice(5).trim() : "";
-      if (!line || line === "[DONE]") continue;
-      try {
-        const chunk = JSON.parse(line) as {
-          choices?: Array<{ delta?: { content?: string } }>;
-        };
-        const delta = chunk.choices?.[0]?.delta?.content ?? "";
-        if (delta) {
-          full += delta;
-          onToken(delta);
-        }
-      } catch {
-        /* ignore keep-alive / non-JSON lines */
-      }
-    }
-  }
-  return full;
-}
+// This is a public URL, never a provider credential. Percher injects it only
+// when the shared server-side feature gate is operational.
+const client = createManagedInferenceClient({
+  endpoint: import.meta.env.VITE_PERCHER_AI_URL as string | undefined,
+  getSession: () => ({ valid: pb.authStore.isValid, token: pb.authStore.token }),
+});
+
+export { ManagedInferenceError } from "./ai-client";
+export type { ManagedInferenceOptions } from "./ai-client";
+export const isManagedInferenceConfigured = client.isConfigured;
+export const complete = client.complete;
+export const streamComplete = client.streamComplete;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "percher",
-  "version": "0.5.22",
+  "version": "0.5.23",
   "description": "CLI for the Percher hosting platform — publish apps with one command",
   "type": "module",
   "bin": {
@@ -27,8 +27,8 @@
     "typecheck": "tsc --noEmit"
   },
   "dependencies": {
-    "@percher/client": "^0.2.21",
-    "@percher/core": "^0.4.27",
+    "@percher/client": "^0.2.22",
+    "@percher/core": "^0.4.28",
     "@percher/toml": "^0.1.10",
     "cac": "^7.0.0",
     "picocolors": "^1.1.1"