percher 0.5.7 → 0.5.9

package/dist/bin/percher.js

@@ -3604,8 +3604,8 @@ var require_streamx = __commonJS((exports, module) => {
           return this;
         },
         next() {
-          return new Promise(function(resolve6, reject) {
-            promiseResolve = resolve6;
+          return new Promise(function(resolve7, reject) {
+            promiseResolve = resolve7;
             promiseReject = reject;
             const data2 = stream.read();
             if (data2 !== null)
@@ -3642,14 +3642,14 @@ var require_streamx = __commonJS((exports, module) => {
       }
       function destroy(err) {
         stream.destroy(err);
-        return new Promise((resolve6, reject) => {
+        return new Promise((resolve7, reject) => {
           if (stream._duplexState & DESTROYED)
-            return resolve6({ value: undefined, done: true });
+            return resolve7({ value: undefined, done: true });
           stream.once("close", function() {
             if (err)
               reject(err);
             else
-              resolve6({ value: undefined, done: true });
+              resolve7({ value: undefined, done: true });
           });
         });
       }
@@ -3701,8 +3701,8 @@ var require_streamx = __commonJS((exports, module) => {
         return Promise.resolve(true);
       if (state.drains === null)
         state.drains = [];
-      return new Promise((resolve6) => {
-        state.drains.push({ writes, resolve: resolve6 });
+      return new Promise((resolve7) => {
+        state.drains.push({ writes, resolve: resolve7 });
       });
     }
     write(data2) {
@@ -3816,11 +3816,11 @@ var require_streamx = __commonJS((exports, module) => {
     cb(null);
   }
   function pipelinePromise(...streams) {
-    return new Promise((resolve6, reject) => {
+    return new Promise((resolve7, reject) => {
       return pipeline(...streams, (err) => {
         if (err)
           return reject(err);
-        resolve6();
+        resolve7();
       });
     });
   }
@@ -4534,16 +4534,16 @@ var require_extract = __commonJS((exports, module) => {
         entryCallback = null;
         cb(err);
       }
-      function onnext(resolve6, reject) {
+      function onnext(resolve7, reject) {
         if (error48) {
           return reject(error48);
         }
         if (entryStream) {
-          resolve6({ value: entryStream, done: false });
+          resolve7({ value: entryStream, done: false });
           entryStream = null;
           return;
         }
-        promiseResolve = resolve6;
+        promiseResolve = resolve7;
         promiseReject = reject;
         consumeCallback(null);
         if (extract._finished && promiseResolve) {
@@ -4574,14 +4574,14 @@ var require_extract = __commonJS((exports, module) => {
       function destroy(err) {
         extract.destroy(err);
         consumeCallback(err);
-        return new Promise((resolve6, reject) => {
+        return new Promise((resolve7, reject) => {
           if (extract.destroyed)
-            return resolve6({ value: undefined, done: true });
+            return resolve7({ value: undefined, done: true });
           extract.once("close", function() {
             if (err)
               reject(err);
             else
-              resolve6({ value: undefined, done: true });
+              resolve7({ value: undefined, done: true });
           });
         });
       }
@@ -5069,11 +5069,11 @@ var require_tslib = __commonJS((exports, module) => {
     };
     __awaiter = function(thisArg, _arguments, P, generator) {
       function adopt(value) {
-        return value instanceof P ? value : new P(function(resolve6) {
-          resolve6(value);
+        return value instanceof P ? value : new P(function(resolve7) {
+          resolve7(value);
         });
       }
-      return new (P || (P = Promise))(function(resolve6, reject) {
+      return new (P || (P = Promise))(function(resolve7, reject) {
         function fulfilled(value) {
           try {
             step(generator.next(value));
@@ -5089,7 +5089,7 @@ var require_tslib = __commonJS((exports, module) => {
           }
         }
         function step(result) {
-          result.done ? resolve6(result.value) : adopt(result.value).then(fulfilled, rejected);
+          result.done ? resolve7(result.value) : adopt(result.value).then(fulfilled, rejected);
         }
         step((generator = generator.apply(thisArg, _arguments || [])).next());
       });
@@ -5318,14 +5318,14 @@ var require_tslib = __commonJS((exports, module) => {
       }, i);
       function verb(n) {
         i[n] = o[n] && function(v) {
-          return new Promise(function(resolve6, reject) {
-            v = o[n](v), settle(resolve6, reject, v.done, v.value);
+          return new Promise(function(resolve7, reject) {
+            v = o[n](v), settle(resolve7, reject, v.done, v.value);
           });
         };
       }
-      function settle(resolve6, reject, d, v) {
+      function settle(resolve7, reject, d, v) {
         Promise.resolve(v).then(function(v2) {
-          resolve6({ value: v2, done: d });
+          resolve7({ value: v2, done: d });
         }, reject);
       }
     };
@@ -8824,7 +8824,7 @@ var require_util = __commonJS((exports) => {
       }
       path = url2.path;
     }
-    var isAbsolute2 = exports.isAbsolute(path);
+    var isAbsolute3 = exports.isAbsolute(path);
     var parts = path.split(/\/+/);
     for (var part, up = 0, i = parts.length - 1;i >= 0; i--) {
       part = parts[i];
@@ -8844,7 +8844,7 @@ var require_util = __commonJS((exports) => {
     }
     path = parts.join("/");
     if (path === "") {
-      path = isAbsolute2 ? "/" : ".";
+      path = isAbsolute3 ? "/" : ".";
     }
     if (url2) {
       url2.path = path;
@@ -8853,7 +8853,7 @@ var require_util = __commonJS((exports) => {
     return path;
   }
   exports.normalize = normalize2;
-  function join17(aRoot, aPath) {
+  function join18(aRoot, aPath) {
     if (aRoot === "") {
       aRoot = ".";
     }
@@ -8885,11 +8885,11 @@ var require_util = __commonJS((exports) => {
     }
     return joined;
   }
-  exports.join = join17;
+  exports.join = join18;
   exports.isAbsolute = function(aPath) {
     return aPath.charAt(0) === "/" || urlRegexp.test(aPath);
   };
-  function relative3(aRoot, aPath) {
+  function relative4(aRoot, aPath) {
     if (aRoot === "") {
       aRoot = ".";
     }
@@ -8908,7 +8908,7 @@ var require_util = __commonJS((exports) => {
     }
     return Array(level + 1).join("../") + aPath.substr(aRoot.length + 1);
   }
-  exports.relative = relative3;
+  exports.relative = relative4;
   var supportsNullProto = function() {
     var obj = Object.create(null);
     return !("__proto__" in obj);
@@ -9058,7 +9058,7 @@ var require_util = __commonJS((exports) => {
           parsed.path = parsed.path.substring(0, index + 1);
         }
       }
-      sourceURL = join17(urlGenerate(parsed), sourceURL);
+      sourceURL = join18(urlGenerate(parsed), sourceURL);
     }
     return normalize2(sourceURL);
   }
@@ -19563,10 +19563,10 @@ else`, adjustClause(path.call(print, "alternate"), options));
       }
       case "ForStatement": {
         var init2 = path.call(print, "init");
-        var sep3 = init2.length > 1 ? `;
+        var sep4 = init2.length > 1 ? `;
 ` : "; ";
         var forParen = "for (";
-        var indented = (0, lines_1.fromString)(sep3).join([init2, path.call(print, "test"), path.call(print, "update")]).indentTail(forParen.length);
+        var indented = (0, lines_1.fromString)(sep4).join([init2, path.call(print, "test"), path.call(print, "update")]).indentTail(forParen.length);
         var head = (0, lines_1.concat)([forParen, indented, ")"]);
         var clause = adjustClause(path.call(print, "body"), options);
         parts.push(head);
@@ -85237,6 +85237,462 @@ var require_core3 = __commonJS((exports, module) => {
   module.exports = enrichCore(core2, getParser());
 });
 
+// ../../node_modules/.bun/isexe@2.0.0/node_modules/isexe/windows.js
+var require_windows = __commonJS((exports, module) => {
+  module.exports = isexe;
+  isexe.sync = sync;
+  var fs = __require("fs");
+  function checkPathExt(path, options) {
+    var pathext = options.pathExt !== undefined ? options.pathExt : process.env.PATHEXT;
+    if (!pathext) {
+      return true;
+    }
+    pathext = pathext.split(";");
+    if (pathext.indexOf("") !== -1) {
+      return true;
+    }
+    for (var i = 0;i < pathext.length; i++) {
+      var p = pathext[i].toLowerCase();
+      if (p && path.substr(-p.length).toLowerCase() === p) {
+        return true;
+      }
+    }
+    return false;
+  }
+  function checkStat(stat, path, options) {
+    if (!stat.isSymbolicLink() && !stat.isFile()) {
+      return false;
+    }
+    return checkPathExt(path, options);
+  }
+  function isexe(path, options, cb) {
+    fs.stat(path, function(er, stat) {
+      cb(er, er ? false : checkStat(stat, path, options));
+    });
+  }
+  function sync(path, options) {
+    return checkStat(fs.statSync(path), path, options);
+  }
+});
+
+// ../../node_modules/.bun/isexe@2.0.0/node_modules/isexe/mode.js
+var require_mode = __commonJS((exports, module) => {
+  module.exports = isexe;
+  isexe.sync = sync;
+  var fs = __require("fs");
+  function isexe(path, options, cb) {
+    fs.stat(path, function(er, stat) {
+      cb(er, er ? false : checkStat(stat, options));
+    });
+  }
+  function sync(path, options) {
+    return checkStat(fs.statSync(path), options);
+  }
+  function checkStat(stat, options) {
+    return stat.isFile() && checkMode(stat, options);
+  }
+  function checkMode(stat, options) {
+    var mod = stat.mode;
+    var uid = stat.uid;
+    var gid = stat.gid;
+    var myUid = options.uid !== undefined ? options.uid : process.getuid && process.getuid();
+    var myGid = options.gid !== undefined ? options.gid : process.getgid && process.getgid();
+    var u = parseInt("100", 8);
+    var g = parseInt("010", 8);
+    var o = parseInt("001", 8);
+    var ug = u | g;
+    var ret = mod & o || mod & g && gid === myGid || mod & u && uid === myUid || mod & ug && myUid === 0;
+    return ret;
+  }
+});
+
+// ../../node_modules/.bun/isexe@2.0.0/node_modules/isexe/index.js
+var require_isexe = __commonJS((exports, module) => {
+  var fs = __require("fs");
+  var core2;
+  if (process.platform === "win32" || global.TESTING_WINDOWS) {
+    core2 = require_windows();
+  } else {
+    core2 = require_mode();
+  }
+  module.exports = isexe;
+  isexe.sync = sync;
+  function isexe(path, options, cb) {
+    if (typeof options === "function") {
+      cb = options;
+      options = {};
+    }
+    if (!cb) {
+      if (typeof Promise !== "function") {
+        throw new TypeError("callback not provided");
+      }
+      return new Promise(function(resolve7, reject) {
+        isexe(path, options || {}, function(er, is) {
+          if (er) {
+            reject(er);
+          } else {
+            resolve7(is);
+          }
+        });
+      });
+    }
+    core2(path, options || {}, function(er, is) {
+      if (er) {
+        if (er.code === "EACCES" || options && options.ignoreErrors) {
+          er = null;
+          is = false;
+        }
+      }
+      cb(er, is);
+    });
+  }
+  function sync(path, options) {
+    try {
+      return core2.sync(path, options || {});
+    } catch (er) {
+      if (options && options.ignoreErrors || er.code === "EACCES") {
+        return false;
+      } else {
+        throw er;
+      }
+    }
+  }
+});
+
+// ../../node_modules/.bun/which@2.0.2/node_modules/which/which.js
+var require_which = __commonJS((exports, module) => {
+  var isWindows = process.platform === "win32" || process.env.OSTYPE === "cygwin" || process.env.OSTYPE === "msys";
+  var path = __require("path");
+  var COLON = isWindows ? ";" : ":";
+  var isexe = require_isexe();
+  var getNotFoundError = (cmd) => Object.assign(new Error(`not found: ${cmd}`), { code: "ENOENT" });
+  var getPathInfo = (cmd, opt) => {
+    const colon = opt.colon || COLON;
+    const pathEnv = cmd.match(/\//) || isWindows && cmd.match(/\\/) ? [""] : [
+      ...isWindows ? [process.cwd()] : [],
+      ...(opt.path || process.env.PATH || "").split(colon)
+    ];
+    const pathExtExe = isWindows ? opt.pathExt || process.env.PATHEXT || ".EXE;.CMD;.BAT;.COM" : "";
+    const pathExt = isWindows ? pathExtExe.split(colon) : [""];
+    if (isWindows) {
+      if (cmd.indexOf(".") !== -1 && pathExt[0] !== "")
+        pathExt.unshift("");
+    }
+    return {
+      pathEnv,
+      pathExt,
+      pathExtExe
+    };
+  };
+  var which = (cmd, opt, cb) => {
+    if (typeof opt === "function") {
+      cb = opt;
+      opt = {};
+    }
+    if (!opt)
+      opt = {};
+    const { pathEnv, pathExt, pathExtExe } = getPathInfo(cmd, opt);
+    const found = [];
+    const step = (i) => new Promise((resolve7, reject) => {
+      if (i === pathEnv.length)
+        return opt.all && found.length ? resolve7(found) : reject(getNotFoundError(cmd));
+      const ppRaw = pathEnv[i];
+      const pathPart = /^".*"$/.test(ppRaw) ? ppRaw.slice(1, -1) : ppRaw;
+      const pCmd = path.join(pathPart, cmd);
+      const p = !pathPart && /^\.[\\\/]/.test(cmd) ? cmd.slice(0, 2) + pCmd : pCmd;
+      resolve7(subStep(p, i, 0));
+    });
+    const subStep = (p, i, ii) => new Promise((resolve7, reject) => {
+      if (ii === pathExt.length)
+        return resolve7(step(i + 1));
+      const ext = pathExt[ii];
+      isexe(p + ext, { pathExt: pathExtExe }, (er, is) => {
+        if (!er && is) {
+          if (opt.all)
+            found.push(p + ext);
+          else
+            return resolve7(p + ext);
+        }
+        return resolve7(subStep(p, i, ii + 1));
+      });
+    });
+    return cb ? step(0).then((res) => cb(null, res), cb) : step(0);
+  };
+  var whichSync = (cmd, opt) => {
+    opt = opt || {};
+    const { pathEnv, pathExt, pathExtExe } = getPathInfo(cmd, opt);
+    const found = [];
+    for (let i = 0;i < pathEnv.length; i++) {
+      const ppRaw = pathEnv[i];
+      const pathPart = /^".*"$/.test(ppRaw) ? ppRaw.slice(1, -1) : ppRaw;
+      const pCmd = path.join(pathPart, cmd);
+      const p = !pathPart && /^\.[\\\/]/.test(cmd) ? cmd.slice(0, 2) + pCmd : pCmd;
+      for (let j = 0;j < pathExt.length; j++) {
+        const cur = p + pathExt[j];
+        try {
+          const is = isexe.sync(cur, { pathExt: pathExtExe });
+          if (is) {
+            if (opt.all)
+              found.push(cur);
+            else
+              return cur;
+          }
+        } catch (ex) {}
+      }
+    }
+    if (opt.all && found.length)
+      return found;
+    if (opt.nothrow)
+      return null;
+    throw getNotFoundError(cmd);
+  };
+  module.exports = which;
+  which.sync = whichSync;
+});
+
+// ../../node_modules/.bun/path-key@3.1.1/node_modules/path-key/index.js
+var require_path_key = __commonJS((exports, module) => {
+  var pathKey = (options = {}) => {
+    const environment = options.env || process.env;
+    const platform = options.platform || process.platform;
+    if (platform !== "win32") {
+      return "PATH";
+    }
+    return Object.keys(environment).reverse().find((key) => key.toUpperCase() === "PATH") || "Path";
+  };
+  module.exports = pathKey;
+  module.exports.default = pathKey;
+});
+
+// ../../node_modules/.bun/cross-spawn@7.0.6/node_modules/cross-spawn/lib/util/resolveCommand.js
+var require_resolveCommand = __commonJS((exports, module) => {
+  var path = __require("path");
+  var which = require_which();
+  var getPathKey = require_path_key();
+  function resolveCommandAttempt(parsed, withoutPathExt) {
+    const env = parsed.options.env || process.env;
+    const cwd = process.cwd();
+    const hasCustomCwd = parsed.options.cwd != null;
+    const shouldSwitchCwd = hasCustomCwd && process.chdir !== undefined && !process.chdir.disabled;
+    if (shouldSwitchCwd) {
+      try {
+        process.chdir(parsed.options.cwd);
+      } catch (err) {}
+    }
+    let resolved;
+    try {
+      resolved = which.sync(parsed.command, {
+        path: env[getPathKey({ env })],
+        pathExt: withoutPathExt ? path.delimiter : undefined
+      });
+    } catch (e) {} finally {
+      if (shouldSwitchCwd) {
+        process.chdir(cwd);
+      }
+    }
+    if (resolved) {
+      resolved = path.resolve(hasCustomCwd ? parsed.options.cwd : "", resolved);
+    }
+    return resolved;
+  }
+  function resolveCommand(parsed) {
+    return resolveCommandAttempt(parsed) || resolveCommandAttempt(parsed, true);
+  }
+  module.exports = resolveCommand;
+});
+
+// ../../node_modules/.bun/cross-spawn@7.0.6/node_modules/cross-spawn/lib/util/escape.js
+var require_escape = __commonJS((exports, module) => {
+  var metaCharsRegExp = /([()\][%!^"`<>&|;, *?])/g;
+  function escapeCommand(arg) {
+    arg = arg.replace(metaCharsRegExp, "^$1");
+    return arg;
+  }
+  function escapeArgument(arg, doubleEscapeMetaChars) {
+    arg = `${arg}`;
+    arg = arg.replace(/(?=(\\+?)?)\1"/g, "$1$1\\\"");
+    arg = arg.replace(/(?=(\\+?)?)\1$/, "$1$1");
+    arg = `"${arg}"`;
+    arg = arg.replace(metaCharsRegExp, "^$1");
+    if (doubleEscapeMetaChars) {
+      arg = arg.replace(metaCharsRegExp, "^$1");
+    }
+    return arg;
+  }
+  exports.command = escapeCommand;
+  exports.argument = escapeArgument;
+});
+
+// ../../node_modules/.bun/shebang-regex@3.0.0/node_modules/shebang-regex/index.js
+var require_shebang_regex = __commonJS((exports, module) => {
+  module.exports = /^#!(.*)/;
+});
+
+// ../../node_modules/.bun/shebang-command@2.0.0/node_modules/shebang-command/index.js
+var require_shebang_command = __commonJS((exports, module) => {
+  var shebangRegex = require_shebang_regex();
+  module.exports = (string4 = "") => {
+    const match = string4.match(shebangRegex);
+    if (!match) {
+      return null;
+    }
+    const [path, argument] = match[0].replace(/#! ?/, "").split(" ");
+    const binary = path.split("/").pop();
+    if (binary === "env") {
+      return argument;
+    }
+    return argument ? `${binary} ${argument}` : binary;
+  };
+});
+
+// ../../node_modules/.bun/cross-spawn@7.0.6/node_modules/cross-spawn/lib/util/readShebang.js
+var require_readShebang = __commonJS((exports, module) => {
+  var fs = __require("fs");
+  var shebangCommand = require_shebang_command();
+  function readShebang(command) {
+    const size = 150;
+    const buffer = Buffer.alloc(size);
+    let fd;
+    try {
+      fd = fs.openSync(command, "r");
+      fs.readSync(fd, buffer, 0, size, 0);
+      fs.closeSync(fd);
+    } catch (e) {}
+    return shebangCommand(buffer.toString());
+  }
+  module.exports = readShebang;
+});
+
+// ../../node_modules/.bun/cross-spawn@7.0.6/node_modules/cross-spawn/lib/parse.js
+var require_parse2 = __commonJS((exports, module) => {
+  var path = __require("path");
+  var resolveCommand = require_resolveCommand();
+  var escape = require_escape();
+  var readShebang = require_readShebang();
+  var isWin = process.platform === "win32";
+  var isExecutableRegExp = /\.(?:com|exe)$/i;
+  var isCmdShimRegExp = /node_modules[\\/].bin[\\/][^\\/]+\.cmd$/i;
+  function detectShebang(parsed) {
+    parsed.file = resolveCommand(parsed);
+    const shebang = parsed.file && readShebang(parsed.file);
+    if (shebang) {
+      parsed.args.unshift(parsed.file);
+      parsed.command = shebang;
+      return resolveCommand(parsed);
+    }
+    return parsed.file;
+  }
+  function parseNonShell(parsed) {
+    if (!isWin) {
+      return parsed;
+    }
+    const commandFile = detectShebang(parsed);
+    const needsShell = !isExecutableRegExp.test(commandFile);
+    if (parsed.options.forceShell || needsShell) {
+      const needsDoubleEscapeMetaChars = isCmdShimRegExp.test(commandFile);
+      parsed.command = path.normalize(parsed.command);
+      parsed.command = escape.command(parsed.command);
+      parsed.args = parsed.args.map((arg) => escape.argument(arg, needsDoubleEscapeMetaChars));
+      const shellCommand = [parsed.command].concat(parsed.args).join(" ");
+      parsed.args = ["/d", "/s", "/c", `"${shellCommand}"`];
+      parsed.command = process.env.comspec || "cmd.exe";
+      parsed.options.windowsVerbatimArguments = true;
+    }
+    return parsed;
+  }
+  function parse6(command, args, options) {
+    if (args && !Array.isArray(args)) {
+      options = args;
+      args = null;
+    }
+    args = args ? args.slice(0) : [];
+    options = Object.assign({}, options);
+    const parsed = {
+      command,
+      args,
+      options,
+      file: undefined,
+      original: {
+        command,
+        args
+      }
+    };
+    return options.shell ? parsed : parseNonShell(parsed);
+  }
+  module.exports = parse6;
+});
+
+// ../../node_modules/.bun/cross-spawn@7.0.6/node_modules/cross-spawn/lib/enoent.js
+var require_enoent = __commonJS((exports, module) => {
+  var isWin = process.platform === "win32";
+  function notFoundError(original, syscall) {
+    return Object.assign(new Error(`${syscall} ${original.command} ENOENT`), {
+      code: "ENOENT",
+      errno: "ENOENT",
+      syscall: `${syscall} ${original.command}`,
+      path: original.command,
+      spawnargs: original.args
+    });
+  }
+  function hookChildProcess(cp, parsed) {
+    if (!isWin) {
+      return;
+    }
+    const originalEmit = cp.emit;
+    cp.emit = function(name, arg1) {
+      if (name === "exit") {
+        const err = verifyENOENT(arg1, parsed);
+        if (err) {
+          return originalEmit.call(cp, "error", err);
+        }
+      }
+      return originalEmit.apply(cp, arguments);
+    };
+  }
+  function verifyENOENT(status, parsed) {
+    if (isWin && status === 1 && !parsed.file) {
+      return notFoundError(parsed.original, "spawn");
+    }
+    return null;
+  }
+  function verifyENOENTSync(status, parsed) {
+    if (isWin && status === 1 && !parsed.file) {
+      return notFoundError(parsed.original, "spawnSync");
+    }
+    return null;
+  }
+  module.exports = {
+    hookChildProcess,
+    verifyENOENT,
+    verifyENOENTSync,
+    notFoundError
+  };
+});
+
+// ../../node_modules/.bun/cross-spawn@7.0.6/node_modules/cross-spawn/index.js
+var require_cross_spawn = __commonJS((exports, module) => {
+  var cp = __require("child_process");
+  var parse6 = require_parse2();
+  var enoent = require_enoent();
+  function spawn(command, args, options) {
+    const parsed = parse6(command, args, options);
+    const spawned = cp.spawn(parsed.command, parsed.args, parsed.options);
+    enoent.hookChildProcess(spawned, parsed);
+    return spawned;
+  }
+  function spawnSync(command, args, options) {
+    const parsed = parse6(command, args, options);
+    const result = cp.spawnSync(parsed.command, parsed.args, parsed.options);
+    result.error = result.error || enoent.verifyENOENTSync(result.status, parsed);
+    return result;
+  }
+  module.exports = spawn;
+  module.exports.spawn = spawn;
+  module.exports.sync = spawnSync;
+  module.exports._parse = parse6;
+  module.exports._enoent = enoent;
+});
+
 // ../../node_modules/.bun/qrcode@1.5.4/node_modules/qrcode/lib/can-promise.js
 var require_can_promise = __commonJS((exports, module) => {
   module.exports = function() {
@@ -86112,7 +86568,7 @@ var require_regex = __commonJS((exports) => {
 });
 
 // ../../node_modules/.bun/qrcode@1.5.4/node_modules/qrcode/lib/core/mode.js
-var require_mode = __commonJS((exports) => {
+var require_mode2 = __commonJS((exports) => {
   var VersionCheck = require_version_check();
   var Regex = require_regex();
   exports.NUMERIC = {
@@ -86203,7 +86659,7 @@ var require_version = __commonJS((exports) => {
   var Utils = require_utils();
   var ECCode = require_error_correction_code();
   var ECLevel = require_error_correction_level();
-  var Mode = require_mode();
+  var Mode = require_mode2();
   var VersionCheck = require_version_check();
   var G18 = 1 << 12 | 1 << 11 | 1 << 10 | 1 << 9 | 1 << 8 | 1 << 5 | 1 << 2 | 1 << 0;
   var G18_BCH = Utils.getBCHDigit(G18);
@@ -86311,7 +86767,7 @@ var require_format_info = __commonJS((exports) => {
 
 // ../../node_modules/.bun/qrcode@1.5.4/node_modules/qrcode/lib/core/numeric-data.js
 var require_numeric_data = __commonJS((exports, module) => {
-  var Mode = require_mode();
+  var Mode = require_mode2();
   function NumericData(data2) {
     this.mode = Mode.NUMERIC;
     this.data = data2.toString();
@@ -86344,7 +86800,7 @@ var require_numeric_data = __commonJS((exports, module) => {
 
 // ../../node_modules/.bun/qrcode@1.5.4/node_modules/qrcode/lib/core/alphanumeric-data.js
 var require_alphanumeric_data = __commonJS((exports, module) => {
-  var Mode = require_mode();
+  var Mode = require_mode2();
   var ALPHA_NUM_CHARS = [
     "0",
     "1",
@@ -86421,7 +86877,7 @@ var require_alphanumeric_data = __commonJS((exports, module) => {
 
 // ../../node_modules/.bun/qrcode@1.5.4/node_modules/qrcode/lib/core/byte-data.js
 var require_byte_data = __commonJS((exports, module) => {
-  var Mode = require_mode();
+  var Mode = require_mode2();
   function ByteData(data2) {
     this.mode = Mode.BYTE;
     if (typeof data2 === "string") {
@@ -86449,7 +86905,7 @@ var require_byte_data = __commonJS((exports, module) => {
 
 // ../../node_modules/.bun/qrcode@1.5.4/node_modules/qrcode/lib/core/kanji-data.js
 var require_kanji_data = __commonJS((exports, module) => {
-  var Mode = require_mode();
+  var Mode = require_mode2();
   var Utils = require_utils();
   function KanjiData(data2) {
     this.mode = Mode.KANJI;
@@ -86570,7 +87026,7 @@ var require_dijkstra = __commonJS((exports, module) => {
 
 // ../../node_modules/.bun/qrcode@1.5.4/node_modules/qrcode/lib/core/segments.js
 var require_segments = __commonJS((exports) => {
-  var Mode = require_mode();
+  var Mode = require_mode2();
   var NumericData = require_numeric_data();
   var AlphanumericData = require_alphanumeric_data();
   var ByteData = require_byte_data();
@@ -86765,7 +87221,7 @@ var require_qrcode = __commonJS((exports) => {
   var ReedSolomonEncoder = require_reed_solomon_encoder();
   var Version = require_version();
   var FormatInfo = require_format_info();
-  var Mode = require_mode();
+  var Mode = require_mode2();
   var Segments = require_segments();
   function setupFinderPattern(matrix, version2) {
     const size = matrix.size;
@@ -89384,10 +89840,10 @@ var require_browser = __commonJS((exports) => {
         text = canvas;
         canvas = undefined;
       }
-      return new Promise(function(resolve9, reject) {
+      return new Promise(function(resolve11, reject) {
         try {
           const data2 = QRCode.create(text, opts);
-          resolve9(renderFunc(data2, canvas, opts));
+          resolve11(renderFunc(data2, canvas, opts));
         } catch (e) {
           reject(e);
         }
@@ -89466,11 +89922,11 @@ var require_server = __commonJS((exports) => {
   }
   function render(renderFunc, text, params) {
     if (!params.cb) {
-      return new Promise(function(resolve9, reject) {
+      return new Promise(function(resolve11, reject) {
         try {
           const data2 = QRCode.create(text, params.opts);
           return renderFunc(data2, params.opts, function(err, data3) {
-            return err ? reject(err) : resolve9(data3);
+            return err ? reject(err) : resolve11(data3);
           });
         } catch (e) {
           reject(e);
@@ -89543,462 +89999,6 @@ var init_qr = __esm(() => {
   import_qrcode = __toESM(require_server(), 1);
 });
 
-// ../../node_modules/.bun/isexe@2.0.0/node_modules/isexe/windows.js
-var require_windows = __commonJS((exports, module) => {
-  module.exports = isexe;
-  isexe.sync = sync;
-  var fs = __require("fs");
-  function checkPathExt(path, options) {
-    var pathext = options.pathExt !== undefined ? options.pathExt : process.env.PATHEXT;
-    if (!pathext) {
-      return true;
-    }
-    pathext = pathext.split(";");
-    if (pathext.indexOf("") !== -1) {
-      return true;
-    }
-    for (var i = 0;i < pathext.length; i++) {
-      var p = pathext[i].toLowerCase();
-      if (p && path.substr(-p.length).toLowerCase() === p) {
-        return true;
-      }
-    }
-    return false;
-  }
-  function checkStat(stat2, path, options) {
-    if (!stat2.isSymbolicLink() && !stat2.isFile()) {
-      return false;
-    }
-    return checkPathExt(path, options);
-  }
-  function isexe(path, options, cb) {
-    fs.stat(path, function(er, stat2) {
-      cb(er, er ? false : checkStat(stat2, path, options));
-    });
-  }
-  function sync(path, options) {
-    return checkStat(fs.statSync(path), path, options);
-  }
-});
-
-// ../../node_modules/.bun/isexe@2.0.0/node_modules/isexe/mode.js
-var require_mode2 = __commonJS((exports, module) => {
-  module.exports = isexe;
-  isexe.sync = sync;
-  var fs = __require("fs");
-  function isexe(path, options, cb) {
-    fs.stat(path, function(er, stat2) {
-      cb(er, er ? false : checkStat(stat2, options));
-    });
-  }
-  function sync(path, options) {
-    return checkStat(fs.statSync(path), options);
-  }
-  function checkStat(stat2, options) {
-    return stat2.isFile() && checkMode(stat2, options);
-  }
-  function checkMode(stat2, options) {
-    var mod = stat2.mode;
-    var uid = stat2.uid;
-    var gid = stat2.gid;
-    var myUid = options.uid !== undefined ? options.uid : process.getuid && process.getuid();
-    var myGid = options.gid !== undefined ? options.gid : process.getgid && process.getgid();
-    var u = parseInt("100", 8);
-    var g = parseInt("010", 8);
-    var o = parseInt("001", 8);
-    var ug = u | g;
-    var ret = mod & o || mod & g && gid === myGid || mod & u && uid === myUid || mod & ug && myUid === 0;
-    return ret;
-  }
-});
-
-// ../../node_modules/.bun/isexe@2.0.0/node_modules/isexe/index.js
-var require_isexe = __commonJS((exports, module) => {
-  var fs = __require("fs");
-  var core2;
-  if (process.platform === "win32" || global.TESTING_WINDOWS) {
-    core2 = require_windows();
-  } else {
-    core2 = require_mode2();
-  }
-  module.exports = isexe;
-  isexe.sync = sync;
-  function isexe(path, options, cb) {
-    if (typeof options === "function") {
-      cb = options;
-      options = {};
-    }
-    if (!cb) {
-      if (typeof Promise !== "function") {
-        throw new TypeError("callback not provided");
-      }
-      return new Promise(function(resolve9, reject) {
-        isexe(path, options || {}, function(er, is) {
-          if (er) {
-            reject(er);
-          } else {
-            resolve9(is);
-          }
-        });
-      });
-    }
-    core2(path, options || {}, function(er, is) {
-      if (er) {
-        if (er.code === "EACCES" || options && options.ignoreErrors) {
-          er = null;
-          is = false;
-        }
-      }
-      cb(er, is);
-    });
-  }
-  function sync(path, options) {
-    try {
-      return core2.sync(path, options || {});
-    } catch (er) {
-      if (options && options.ignoreErrors || er.code === "EACCES") {
-        return false;
-      } else {
-        throw er;
-      }
-    }
-  }
-});
-
-// ../../node_modules/.bun/which@2.0.2/node_modules/which/which.js
-var require_which = __commonJS((exports, module) => {
-  var isWindows = process.platform === "win32" || process.env.OSTYPE === "cygwin" || process.env.OSTYPE === "msys";
-  var path = __require("path");
-  var COLON = isWindows ? ";" : ":";
-  var isexe = require_isexe();
-  var getNotFoundError = (cmd) => Object.assign(new Error(`not found: ${cmd}`), { code: "ENOENT" });
-  var getPathInfo = (cmd, opt) => {
-    const colon = opt.colon || COLON;
-    const pathEnv = cmd.match(/\//) || isWindows && cmd.match(/\\/) ? [""] : [
-      ...isWindows ? [process.cwd()] : [],
-      ...(opt.path || process.env.PATH || "").split(colon)
-    ];
-    const pathExtExe = isWindows ? opt.pathExt || process.env.PATHEXT || ".EXE;.CMD;.BAT;.COM" : "";
-    const pathExt = isWindows ? pathExtExe.split(colon) : [""];
-    if (isWindows) {
-      if (cmd.indexOf(".") !== -1 && pathExt[0] !== "")
-        pathExt.unshift("");
-    }
-    return {
-      pathEnv,
-      pathExt,
-      pathExtExe
-    };
-  };
-  var which = (cmd, opt, cb) => {
-    if (typeof opt === "function") {
-      cb = opt;
-      opt = {};
-    }
-    if (!opt)
-      opt = {};
-    const { pathEnv, pathExt, pathExtExe } = getPathInfo(cmd, opt);
-    const found = [];
-    const step = (i) => new Promise((resolve9, reject) => {
-      if (i === pathEnv.length)
-        return opt.all && found.length ? resolve9(found) : reject(getNotFoundError(cmd));
-      const ppRaw = pathEnv[i];
-      const pathPart = /^".*"$/.test(ppRaw) ? ppRaw.slice(1, -1) : ppRaw;
-      const pCmd = path.join(pathPart, cmd);
-      const p = !pathPart && /^\.[\\\/]/.test(cmd) ? cmd.slice(0, 2) + pCmd : pCmd;
-      resolve9(subStep(p, i, 0));
-    });
-    const subStep = (p, i, ii) => new Promise((resolve9, reject) => {
-      if (ii === pathExt.length)
-        return resolve9(step(i + 1));
-      const ext = pathExt[ii];
-      isexe(p + ext, { pathExt: pathExtExe }, (er, is) => {
-        if (!er && is) {
-          if (opt.all)
-            found.push(p + ext);
-          else
-            return resolve9(p + ext);
-        }
-        return resolve9(subStep(p, i, ii + 1));
-      });
-    });
-    return cb ? step(0).then((res) => cb(null, res), cb) : step(0);
-  };
-  var whichSync = (cmd, opt) => {
-    opt = opt || {};
-    const { pathEnv, pathExt, pathExtExe } = getPathInfo(cmd, opt);
-    const found = [];
-    for (let i = 0;i < pathEnv.length; i++) {
-      const ppRaw = pathEnv[i];
-      const pathPart = /^".*"$/.test(ppRaw) ? ppRaw.slice(1, -1) : ppRaw;
-      const pCmd = path.join(pathPart, cmd);
-      const p = !pathPart && /^\.[\\\/]/.test(cmd) ? cmd.slice(0, 2) + pCmd : pCmd;
-      for (let j = 0;j < pathExt.length; j++) {
-        const cur = p + pathExt[j];
-        try {
-          const is = isexe.sync(cur, { pathExt: pathExtExe });
-          if (is) {
-            if (opt.all)
-              found.push(cur);
-            else
-              return cur;
-          }
-        } catch (ex) {}
-      }
-    }
-    if (opt.all && found.length)
-      return found;
-    if (opt.nothrow)
-      return null;
-    throw getNotFoundError(cmd);
-  };
-  module.exports = which;
-  which.sync = whichSync;
-});
-
-// ../../node_modules/.bun/path-key@3.1.1/node_modules/path-key/index.js
-var require_path_key = __commonJS((exports, module) => {
-  var pathKey = (options = {}) => {
-    const environment = options.env || process.env;
-    const platform = options.platform || process.platform;
-    if (platform !== "win32") {
-      return "PATH";
-    }
-    return Object.keys(environment).reverse().find((key) => key.toUpperCase() === "PATH") || "Path";
-  };
-  module.exports = pathKey;
-  module.exports.default = pathKey;
-});
-
-// ../../node_modules/.bun/cross-spawn@7.0.6/node_modules/cross-spawn/lib/util/resolveCommand.js
-var require_resolveCommand = __commonJS((exports, module) => {
-  var path = __require("path");
-  var which = require_which();
-  var getPathKey = require_path_key();
-  function resolveCommandAttempt(parsed, withoutPathExt) {
-    const env = parsed.options.env || process.env;
-    const cwd = process.cwd();
-    const hasCustomCwd = parsed.options.cwd != null;
-    const shouldSwitchCwd = hasCustomCwd && process.chdir !== undefined && !process.chdir.disabled;
-    if (shouldSwitchCwd) {
-      try {
-        process.chdir(parsed.options.cwd);
-      } catch (err) {}
-    }
-    let resolved;
-    try {
-      resolved = which.sync(parsed.command, {
-        path: env[getPathKey({ env })],
-        pathExt: withoutPathExt ? path.delimiter : undefined
-      });
-    } catch (e) {} finally {
-      if (shouldSwitchCwd) {
-        process.chdir(cwd);
-      }
-    }
-    if (resolved) {
-      resolved = path.resolve(hasCustomCwd ? parsed.options.cwd : "", resolved);
-    }
-    return resolved;
-  }
-  function resolveCommand(parsed) {
-    return resolveCommandAttempt(parsed) || resolveCommandAttempt(parsed, true);
-  }
-  module.exports = resolveCommand;
-});
-
-// ../../node_modules/.bun/cross-spawn@7.0.6/node_modules/cross-spawn/lib/util/escape.js
-var require_escape = __commonJS((exports, module) => {
-  var metaCharsRegExp = /([()\][%!^"`<>&|;, *?])/g;
-  function escapeCommand(arg) {
-    arg = arg.replace(metaCharsRegExp, "^$1");
-    return arg;
-  }
-  function escapeArgument(arg, doubleEscapeMetaChars) {
-    arg = `${arg}`;
-    arg = arg.replace(/(?=(\\+?)?)\1"/g, "$1$1\\\"");
-    arg = arg.replace(/(?=(\\+?)?)\1$/, "$1$1");
-    arg = `"${arg}"`;
-    arg = arg.replace(metaCharsRegExp, "^$1");
-    if (doubleEscapeMetaChars) {
-      arg = arg.replace(metaCharsRegExp, "^$1");
-    }
-    return arg;
-  }
-  exports.command = escapeCommand;
-  exports.argument = escapeArgument;
-});
-
-// ../../node_modules/.bun/shebang-regex@3.0.0/node_modules/shebang-regex/index.js
-var require_shebang_regex = __commonJS((exports, module) => {
-  module.exports = /^#!(.*)/;
-});
-
-// ../../node_modules/.bun/shebang-command@2.0.0/node_modules/shebang-command/index.js
-var require_shebang_command = __commonJS((exports, module) => {
-  var shebangRegex = require_shebang_regex();
-  module.exports = (string4 = "") => {
-    const match = string4.match(shebangRegex);
-    if (!match) {
-      return null;
-    }
-    const [path, argument] = match[0].replace(/#! ?/, "").split(" ");
-    const binary = path.split("/").pop();
-    if (binary === "env") {
-      return argument;
-    }
-    return argument ? `${binary} ${argument}` : binary;
-  };
-});
-
-// ../../node_modules/.bun/cross-spawn@7.0.6/node_modules/cross-spawn/lib/util/readShebang.js
-var require_readShebang = __commonJS((exports, module) => {
-  var fs = __require("fs");
-  var shebangCommand = require_shebang_command();
-  function readShebang(command) {
-    const size = 150;
-    const buffer = Buffer.alloc(size);
-    let fd;
-    try {
-      fd = fs.openSync(command, "r");
-      fs.readSync(fd, buffer, 0, size, 0);
-      fs.closeSync(fd);
-    } catch (e) {}
-    return shebangCommand(buffer.toString());
-  }
-  module.exports = readShebang;
-});
-
-// ../../node_modules/.bun/cross-spawn@7.0.6/node_modules/cross-spawn/lib/parse.js
-var require_parse2 = __commonJS((exports, module) => {
-  var path = __require("path");
-  var resolveCommand = require_resolveCommand();
-  var escape = require_escape();
-  var readShebang = require_readShebang();
-  var isWin = process.platform === "win32";
-  var isExecutableRegExp = /\.(?:com|exe)$/i;
-  var isCmdShimRegExp = /node_modules[\\/].bin[\\/][^\\/]+\.cmd$/i;
-  function detectShebang(parsed) {
-    parsed.file = resolveCommand(parsed);
-    const shebang = parsed.file && readShebang(parsed.file);
-    if (shebang) {
-      parsed.args.unshift(parsed.file);
-      parsed.command = shebang;
-      return resolveCommand(parsed);
-    }
-    return parsed.file;
-  }
-  function parseNonShell(parsed) {
-    if (!isWin) {
-      return parsed;
-    }
-    const commandFile = detectShebang(parsed);
-    const needsShell = !isExecutableRegExp.test(commandFile);
-    if (parsed.options.forceShell || needsShell) {
-      const needsDoubleEscapeMetaChars = isCmdShimRegExp.test(commandFile);
-      parsed.command = path.normalize(parsed.command);
-      parsed.command = escape.command(parsed.command);
-      parsed.args = parsed.args.map((arg) => escape.argument(arg, needsDoubleEscapeMetaChars));
-      const shellCommand = [parsed.command].concat(parsed.args).join(" ");
-      parsed.args = ["/d", "/s", "/c", `"${shellCommand}"`];
-      parsed.command = process.env.comspec || "cmd.exe";
-      parsed.options.windowsVerbatimArguments = true;
-    }
-    return parsed;
-  }
-  function parse6(command, args, options) {
-    if (args && !Array.isArray(args)) {
-      options = args;
-      args = null;
-    }
-    args = args ? args.slice(0) : [];
-    options = Object.assign({}, options);
-    const parsed = {
-      command,
-      args,
-      options,
-      file: undefined,
-      original: {
-        command,
-        args
-      }
-    };
-    return options.shell ? parsed : parseNonShell(parsed);
-  }
-  module.exports = parse6;
-});
-
-// ../../node_modules/.bun/cross-spawn@7.0.6/node_modules/cross-spawn/lib/enoent.js
-var require_enoent = __commonJS((exports, module) => {
-  var isWin = process.platform === "win32";
-  function notFoundError(original, syscall) {
-    return Object.assign(new Error(`${syscall} ${original.command} ENOENT`), {
-      code: "ENOENT",
-      errno: "ENOENT",
-      syscall: `${syscall} ${original.command}`,
-      path: original.command,
-      spawnargs: original.args
-    });
-  }
-  function hookChildProcess(cp, parsed) {
-    if (!isWin) {
-      return;
-    }
-    const originalEmit = cp.emit;
-    cp.emit = function(name, arg1) {
-      if (name === "exit") {
-        const err = verifyENOENT(arg1, parsed);
-        if (err) {
-          return originalEmit.call(cp, "error", err);
-        }
-      }
-      return originalEmit.apply(cp, arguments);
-    };
-  }
-  function verifyENOENT(status, parsed) {
-    if (isWin && status === 1 && !parsed.file) {
-      return notFoundError(parsed.original, "spawn");
-    }
-    return null;
-  }
-  function verifyENOENTSync(status, parsed) {
-    if (isWin && status === 1 && !parsed.file) {
-      return notFoundError(parsed.original, "spawnSync");
-    }
-    return null;
-  }
-  module.exports = {
-    hookChildProcess,
-    verifyENOENT,
-    verifyENOENTSync,
-    notFoundError
-  };
-});
-
-// ../../node_modules/.bun/cross-spawn@7.0.6/node_modules/cross-spawn/index.js
-var require_cross_spawn = __commonJS((exports, module) => {
-  var cp = __require("child_process");
-  var parse6 = require_parse2();
-  var enoent = require_enoent();
-  function spawn(command, args, options) {
-    const parsed = parse6(command, args, options);
-    const spawned = cp.spawn(parsed.command, parsed.args, parsed.options);
-    enoent.hookChildProcess(spawned, parsed);
-    return spawned;
-  }
-  function spawnSync(command, args, options) {
-    const parsed = parse6(command, args, options);
-    const result = cp.spawnSync(parsed.command, parsed.args, parsed.options);
-    result.error = result.error || enoent.verifyENOENTSync(result.status, parsed);
-    return result;
-  }
-  module.exports = spawn;
-  module.exports.spawn = spawn;
-  module.exports.sync = spawnSync;
-  module.exports._parse = parse6;
-  module.exports._enoent = enoent;
-});
-
 // ../../node_modules/.bun/picocolors@1.1.1/node_modules/picocolors/picocolors.js
 var require_picocolors = __commonJS((exports, module) => {
   var p = process || {};
@@ -90181,7 +90181,7 @@ __export(exports_prompt_hidden, {
 });
 import { stdin, stdout } from "node:process";
 function promptHiddenWithStreams(question, input, output) {
-  return new Promise((resolve9, reject) => {
+  return new Promise((resolve11, reject) => {
     output.write(`${question} `);
     let buf = "";
     let done = false;
@@ -90197,7 +90197,7 @@ function promptHiddenWithStreams(question, input, output) {
           input.removeListener("error", onError);
           output.write(`
 `);
-          resolve9(buf.replace(/\r$/, ""));
+          resolve11(buf.replace(/\r$/, ""));
           return;
         }
         buf += ch;
@@ -90219,7 +90219,7 @@ function promptHiddenWithStreams(question, input, output) {
       input.removeListener("error", onError);
       output.write(`
 `);
-      resolve9(buf.replace(/\r$/, ""));
+      resolve11(buf.replace(/\r$/, ""));
     };
     input.on("data", onData);
     input.on("error", onError);
@@ -90237,7 +90237,7 @@ async function promptHidden(question) {
   ttyStdin.resume();
   ttyStdin.setEncoding("utf8");
   try {
-    return await new Promise((resolve9, reject) => {
+    return await new Promise((resolve11, reject) => {
       stdout.write(`${question} `);
       let buf = "";
       const onData = (key) => {
@@ -90247,7 +90247,7 @@ async function promptHidden(question) {
             ttyStdin.removeListener("data", onData);
             stdout.write(`
 `);
-            resolve9(buf);
+            resolve11(buf);
             return;
           }
           if (ch === "\x03") {
@@ -105399,6 +105399,181 @@ var appResourcesInputSchema = exports_external.object({
 var appTopologyInputSchema = exports_external.object({
   app: exports_external.string().optional()
 });
+// ../core/dist/commands/appstore-kit.js
+import { existsSync as existsSync3, mkdirSync as mkdirSync3, writeFileSync as writeFileSync3 } from "node:fs";
+import { basename, dirname as dirname3, isAbsolute, join as join5, relative, resolve as resolve3, sep } from "node:path";
+
+// ../core/dist/appstore-artifacts.js
+var BRAND_GREEN = "#2d6a4f";
+var ICON_COLOUR_HEX = {
+  green: BRAND_GREEN,
+  terracotta: "#d0653a",
+  blue: "#4a6fa4",
+  purple: "#6e4dba",
+  olive: "#b8923a"
+};
+function themeColorForToken(token) {
+  if (token && token in ICON_COLOUR_HEX)
+    return ICON_COLOUR_HEX[token] ?? BRAND_GREEN;
+  return BRAND_GREEN;
+}
+function hostFromUrl(url2) {
+  try {
+    return new URL(url2).host;
+  } catch {
+    return url2.replace(/^https?:\/\//, "").replace(/\/.*$/, "");
+  }
+}
+function shortName(name) {
+  const cleaned = name.replace(/[^A-Za-z0-9]/g, "");
+  return (cleaned || "App").slice(0, 12);
+}
+function manifestStarter({ name, themeColorHex }) {
+  return JSON.stringify({
+    name,
+    short_name: shortName(name),
+    start_url: "/",
+    display: "standalone",
+    background_color: "#ffffff",
+    theme_color: themeColorHex
+  }, null, 2);
+}
+function serviceWorkerStarter() {
+  return `// sw.js — minimal offline shell. Drop in at your app root and serve from /sw.js.
+const CACHE = "app-shell-v1";
+const SHELL = ["/"];
+
+self.addEventListener("install", (event) => {
+  event.waitUntil(caches.open(CACHE).then((cache) => cache.addAll(SHELL)));
+  self.skipWaiting();
+});
+
+self.addEventListener("activate", (event) => {
+  event.waitUntil(
+    caches.keys().then((keys) =>
+      Promise.all(keys.filter((k) => k !== CACHE).map((k) => caches.delete(k))),
+    ),
+  );
+  self.clients.claim();
+});
+
+self.addEventListener("fetch", (event) => {
+  if (event.request.method !== "GET") return;
+  event.respondWith(
+    caches.match(event.request).then((cached) => cached || fetch(event.request)),
+  );
+});`;
+}
+function swRegistrationSnippet() {
+  return `if ("serviceWorker" in navigator) {
+  navigator.serviceWorker.register("/sw.js");
+}`;
+}
+function bubblewrapCommand({ url: url2 }) {
+  const host = hostFromUrl(url2);
+  return `# generate the Android project, pointed at your manifest
+npx @bubblewrap/cli init --manifest https://${host}/manifest.json
+npx @bubblewrap/cli build`;
+}
+function capacitorConfig({ name, url: url2 }) {
+  const host = hostFromUrl(url2);
+  return `import type { CapacitorConfig } from "@capacitor/cli";
+const config: CapacitorConfig = {
+  appId: "app.percher.yourapp",
+  appName: ${JSON.stringify(name)},
+  webDir: "dist",
+  server: { url: "https://${host}", cleartext: false },
+};
+export default config;`;
+}
+function assetlinksJson({ packageName, sha256Fingerprint }) {
+  const pkg = packageName.trim() || "app.percher.yourapp";
+  const fp = sha256Fingerprint.trim() || "<your signing cert SHA-256>";
+  return `[{
+  "relation": ["delegate_permission/common.handle_all_urls"],
+  "target": {
+    "namespace": "android_app",
+    "package_name": ${JSON.stringify(pkg)},
+    "sha256_cert_fingerprints": [${JSON.stringify(fp)}]
+  }
+}]`;
+}
+function appleAppSiteAssociation({ teamId, bundleId }) {
+  const team = teamId.trim() || "TEAMID";
+  const bundle = bundleId.trim() || "app.percher.yourapp";
+  return `{
+  "applinks": {
+    "apps": [],
+    "details": [{ "appID": ${JSON.stringify(`${team}.${bundle}`)}, "paths": ["*"] }]
+  }
+}`;
+}
+
+// ../core/dist/commands/appstore-kit.js
+var appstoreKitInputSchema = exports_external.object({
+  name: exports_external.string().optional(),
+  url: exports_external.string().optional(),
+  packageName: exports_external.string().optional(),
+  fingerprint: exports_external.string().optional(),
+  teamId: exports_external.string().optional(),
+  bundleId: exports_external.string().optional(),
+  force: exports_external.boolean().optional(),
+  outDir: exports_external.string().optional()
+});
+async function appstoreKit(ctx, input = {}) {
+  const name = (input.name ?? readPercherTomlAppName(ctx.cwd) ?? basename(ctx.cwd) ?? "app").trim() || "app";
+  const url2 = input.url?.trim() || `https://${name}.percher.run`;
+  const themeHex = themeColorForToken(null);
+  const base = resolve3(ctx.cwd, input.outDir ?? ".");
+  const baseRel = relative(ctx.cwd, base);
+  if (baseRel.startsWith("..") || isAbsolute(baseRel)) {
+    throw new PercherCoreError("Output directory must stay inside the project", {
+      code: "appstore-kit.bad-out-dir",
+      hint: "Pass a path inside the current project (e.g. --out public), not an absolute or parent path."
+    });
+  }
+  const files = [
+    { rel: "manifest.json", content: manifestStarter({ name, themeColorHex: themeHex }) },
+    { rel: "sw.js", content: serviceWorkerStarter() },
+    { rel: "capacitor.config.ts", content: capacitorConfig({ name, url: url2 }) },
+    {
+      rel: ".well-known/assetlinks.json",
+      content: assetlinksJson({
+        packageName: input.packageName ?? "",
+        sha256Fingerprint: input.fingerprint ?? ""
+      })
+    },
+    {
+      rel: ".well-known/apple-app-site-association",
+      content: appleAppSiteAssociation({
+        teamId: input.teamId ?? "",
+        bundleId: input.bundleId ?? ""
+      })
+    }
+  ];
+  const written = [];
+  const skipped = [];
+  for (const f of files) {
+    const abs = join5(base, ...f.rel.split("/"));
+    const display = relative(ctx.cwd, abs).split(sep).join("/");
+    if (existsSync3(abs) && !input.force) {
+      skipped.push(display);
+      continue;
+    }
+    mkdirSync3(dirname3(abs), { recursive: true });
+    writeFileSync3(abs, `${f.content}
+`, "utf8");
+    written.push(display);
+  }
+  return {
+    appName: name,
+    appUrl: url2,
+    written,
+    skipped,
+    bubblewrapCommand: bubblewrapCommand({ url: url2 }),
+    swRegistration: swRegistrationSnippet()
+  };
+}
 // ../core/dist/commands/billing.js
 var billingUpgradeInputSchema = exports_external.object({
   plan: exports_external.enum(["starter", "maker", "pro"])
@@ -105422,22 +105597,22 @@ async function cacheReset(ctx, input = {}) {
 var capabilitiesInputSchema = exports_external.object({});
 // ../client/dist/abortable-sleep.js
 function abortableSleep(ms, signal) {
-  return new Promise((resolve3) => {
+  return new Promise((resolve4) => {
     if (!signal) {
-      setTimeout(resolve3, ms);
+      setTimeout(resolve4, ms);
       return;
     }
     if (signal.aborted) {
-      resolve3();
+      resolve4();
       return;
     }
     const onAbort = () => {
       clearTimeout(t);
-      resolve3();
+      resolve4();
     };
     const t = setTimeout(() => {
       signal.removeEventListener("abort", onAbort);
-      resolve3();
+      resolve4();
     }, ms);
     signal.addEventListener("abort", onAbort, { once: true });
   });
@@ -105456,9 +105631,9 @@ function isAutoForwardedBuildKey(name) {
   return AUTO_FORWARD_PREFIXES.some((p) => name.startsWith(p));
 }
 // ../client/dist/config.js
-import { existsSync as existsSync3, mkdirSync as mkdirSync3, readFileSync as readFileSync4, renameSync, writeFileSync as writeFileSync3 } from "node:fs";
+import { existsSync as existsSync4, mkdirSync as mkdirSync4, readFileSync as readFileSync4, renameSync, writeFileSync as writeFileSync4 } from "node:fs";
 import { homedir } from "node:os";
-import { dirname as dirname3, join as join5 } from "node:path";
+import { dirname as dirname4, join as join6 } from "node:path";
 var DEFAULT_API_URL = "https://api.percher.run";
 function home() {
   return process.env.HOME ?? process.env.USERPROFILE ?? homedir();
@@ -105466,12 +105641,12 @@ function home() {
 function configPath() {
   const xdg = process.env.XDG_CONFIG_HOME;
   if (xdg)
-    return join5(xdg, "percher", "config.json");
-  return join5(home(), ".percher", "config.json");
+    return join6(xdg, "percher", "config.json");
+  return join6(home(), ".percher", "config.json");
 }
 function readFile2() {
   const p = configPath();
-  if (!existsSync3(p))
+  if (!existsSync4(p))
     return {};
   try {
     const parsed = JSON.parse(readFileSync4(p, "utf8"));
@@ -105499,11 +105674,11 @@ function readAnonClaims() {
 }
 function saveConfig(partial2) {
   const p = configPath();
-  mkdirSync3(dirname3(p), { recursive: true });
+  mkdirSync4(dirname4(p), { recursive: true });
   const current = readFile2();
   const merged = { ...current, ...partial2 };
   const tmp = `${p}.tmp-${process.pid}-${Date.now()}`;
-  writeFileSync3(tmp, JSON.stringify(merged, null, 2), "utf8");
+  writeFileSync4(tmp, JSON.stringify(merged, null, 2), "utf8");
   renameSync(tmp, p);
 }
 function getAnonClaim(app) {
@@ -105907,6 +106082,15 @@ class AppsResource {
   unsetPreviewBranch(appRef) {
     return this.http.deleteJson(`/apps/${encodeURIComponent(appRef)}/preview-branch`);
   }
+  listWellKnown(appRef) {
+    return this.http.get(`/apps/${encodeURIComponent(appRef)}/well-known`);
+  }
+  setWellKnown(appRef, kind, content) {
+    return this.http.put(`/apps/${encodeURIComponent(appRef)}/well-known/${encodeURIComponent(kind)}`, { content });
+  }
+  clearWellKnown(appRef, kind) {
+    return this.http.deleteJson(`/apps/${encodeURIComponent(appRef)}/well-known/${encodeURIComponent(kind)}`);
+  }
   setDescription(appRef, description) {
     return this.http.patch(`/apps/${encodeURIComponent(appRef)}/description`, {
       description
@@ -106582,17 +106766,17 @@ async function claim(ctx, input = {}) {
   };
 }
 // ../core/dist/commands/create.js
-import { join as join7, resolve as resolve4 } from "node:path";
+import { join as join8, resolve as resolve5 } from "node:path";
 
 // ../core/dist/templates.js
-import { existsSync as existsSync4, mkdirSync as mkdirSync4, readdirSync, readFileSync as readFileSync5, statSync, writeFileSync as writeFileSync4 } from "node:fs";
-import { basename, join as join6, normalize, relative, resolve as resolve3 } from "node:path";
+import { existsSync as existsSync5, mkdirSync as mkdirSync5, readdirSync, readFileSync as readFileSync5, statSync, writeFileSync as writeFileSync5 } from "node:fs";
+import { basename as basename2, join as join7, normalize, relative as relative2, resolve as resolve4 } from "node:path";
 var __dirname = "C:\\dev\\Percher\\packages\\core\\dist";
-var TEMPLATES_DIR = resolve3(import.meta.dirname ?? __dirname, "../templates");
+var TEMPLATES_DIR = resolve4(import.meta.dirname ?? __dirname, "../templates");
 var PLACEHOLDER = "__APP_NAME__";
 function listTemplates() {
   return readdirSync(TEMPLATES_DIR).filter((name) => {
-    const full = join6(TEMPLATES_DIR, name);
+    const full = join7(TEMPLATES_DIR, name);
     return statSync(full).isDirectory();
   });
 }
@@ -106602,36 +106786,36 @@ function scaffoldTemplate(input) {
   if (!available.includes(template)) {
     throw new Error(`Unknown template "${template}". Available: ${available.join(", ")}`);
   }
-  const absTarget = resolve3(targetDir);
-  if (existsSync4(absTarget)) {
+  const absTarget = resolve4(targetDir);
+  if (existsSync5(absTarget)) {
     const entries = readdirSync(absTarget);
     if (entries.length > 0 && !force) {
       throw new Error(`Target directory "${absTarget}" is not empty. Use --force to overwrite.`);
     }
   }
-  const srcDir = join6(TEMPLATES_DIR, template);
+  const srcDir = join7(TEMPLATES_DIR, template);
   const files = [];
   function copyDir(src, dest) {
-    mkdirSync4(dest, { recursive: true });
+    mkdirSync5(dest, { recursive: true });
     for (const entry of readdirSync(src)) {
-      const srcPath = join6(src, entry);
-      const destPath = join6(dest, entry);
-      const rel = relative(absTarget, normalize(destPath));
-      if (rel.startsWith("..") || resolve3(destPath) === resolve3(absTarget, "..", basename(absTarget))) {
+      const srcPath = join7(src, entry);
+      const destPath = join7(dest, entry);
+      const rel = relative2(absTarget, normalize(destPath));
+      if (rel.startsWith("..") || resolve4(destPath) === resolve4(absTarget, "..", basename2(absTarget))) {
         throw new Error(`Template contains path traversal: ${entry}`);
       }
       if (statSync(srcPath).isDirectory()) {
         copyDir(srcPath, destPath);
       } else {
-        if (existsSync4(destPath) && !force) {
+        if (existsSync5(destPath) && !force) {
           continue;
         }
         let content = readFileSync5(srcPath, "utf-8");
         content = content.replaceAll(PLACEHOLDER, appName);
         content = content.replace(/\r\n/g, `
 `);
-        writeFileSync4(destPath, content, "utf-8");
-        files.push(relative(absTarget, destPath).replace(/\\/g, "/"));
+        writeFileSync5(destPath, content, "utf-8");
+        files.push(relative2(absTarget, destPath).replace(/\\/g, "/"));
       }
     }
   }
@@ -106656,14 +106840,14 @@ async function create(ctx, input) {
   }
   let targetDir;
   if (input.directory) {
-    targetDir = resolve4(ctx.cwd, input.directory);
-    if (!targetDir.startsWith(resolve4(ctx.cwd))) {
+    targetDir = resolve5(ctx.cwd, input.directory);
+    if (!targetDir.startsWith(resolve5(ctx.cwd))) {
       throw new PercherCoreError("Directory must be within the current workspace", {
         code: "create.failed"
       });
     }
   } else {
-    targetDir = join7(ctx.cwd, input.name);
+    targetDir = join8(ctx.cwd, input.name);
   }
   try {
     const result = scaffoldTemplate({
@@ -106759,7 +106943,7 @@ async function data(ctx, input = {}) {
   };
 }
 // ../core/dist/commands/data-export.js
-import { resolve as resolve5 } from "node:path";
+import { resolve as resolve6 } from "node:path";
 var dataExportInputSchema = exports_external.object({
   app: exports_external.string().optional().describe("App name or id. Defaults to the app in percher.toml."),
   out: exports_external.string().optional().describe("Output file path. Defaults to ./<app>-pb-<timestamp>.tar.gz in the current directory.")
@@ -106775,7 +106959,7 @@ async function dataExport(ctx, input) {
   ctx.status?.(`Exporting ${appName} data...`);
   const stamp = new Date().toISOString().replace(/[:.]/g, "-").slice(0, 19);
   const fileName = input.out ?? `${appName}-pb-${stamp}.tar.gz`;
-  const path = resolve5(ctx.cwd, fileName);
+  const path = resolve6(ctx.cwd, fileName);
   const res = await ctx.client.apps.streamDataExport(appName);
   const bytes = await writeResponseToFile(res, path);
   return {
@@ -106871,14 +107055,14 @@ async function deploysInspect(ctx, input) {
   return { deploy, buildLog };
 }
 // ../core/dist/commands/dev.js
-import { existsSync as existsSync7 } from "node:fs";
-import { join as join10 } from "node:path";
+import { existsSync as existsSync8 } from "node:fs";
+import { join as join11 } from "node:path";
 
 // ../core/dist/tarball.js
 var import_ignore = __toESM(require_ignore(), 1);
 import { createHash as createHash2 } from "node:crypto";
-import { existsSync as existsSync5, readdirSync as readdirSync2, readFileSync as readFileSync6, statSync as statSync2 } from "node:fs";
-import { join as join8, relative as relative2, sep } from "node:path";
+import { existsSync as existsSync6, readdirSync as readdirSync2, readFileSync as readFileSync6, statSync as statSync2 } from "node:fs";
+import { join as join9, relative as relative3, sep as sep2 } from "node:path";
 import { Readable } from "node:stream";
 import { createGzip } from "node:zlib";
 
@@ -106904,8 +107088,8 @@ var DEFAULT_IGNORE = [
 function* walk(dir, baseDir, ig) {
   const entries = readdirSync2(dir);
   for (const name of entries) {
-    const full = join8(dir, name);
-    const rel = relative2(baseDir, full).split(sep).join("/");
+    const full = join9(dir, name);
+    const rel = relative3(baseDir, full).split(sep2).join("/");
     if (ig.ignores(rel))
       continue;
     const stats = statSync2(full);
@@ -106921,15 +107105,15 @@ function* walk(dir, baseDir, ig) {
 async function createTarball(options) {
   const ig = import_ignore.default();
   ig.add(DEFAULT_IGNORE);
-  const gitignorePath = join8(options.cwd, ".gitignore");
-  if (existsSync5(gitignorePath)) {
+  const gitignorePath = join9(options.cwd, ".gitignore");
+  if (existsSync6(gitignorePath)) {
     ig.add(readFileSync6(gitignorePath, "utf8"));
   }
   if (options.extraIgnore)
     ig.add(options.extraIgnore);
   const fileBuffers = [];
   for (const rel of walk(options.cwd, options.cwd, ig)) {
-    const data2 = readFileSync6(join8(options.cwd, rel));
+    const data2 = readFileSync6(join9(options.cwd, rel));
     fileBuffers.push({ path: rel, size: data2.length, data: data2 });
   }
   fileBuffers.sort((a, b) => a.path < b.path ? -1 : a.path > b.path ? 1 : 0);
@@ -106948,8 +107132,8 @@ async function createTarball(options) {
   const pack = $pack();
   (async () => {
     for (const file2 of fileBuffers) {
-      await new Promise((resolve6, reject) => {
-        pack.entry({ name: file2.path, size: file2.data.length }, file2.data, (err) => err ? reject(err) : resolve6());
+      await new Promise((resolve7, reject) => {
+        pack.entry({ name: file2.path, size: file2.data.length }, file2.data, (err) => err ? reject(err) : resolve7());
       });
     }
     pack.finalize();
@@ -106969,8 +107153,8 @@ async function createTarball(options) {
 
 // ../core/dist/watcher.js
 var import_ignore2 = __toESM(require_ignore(), 1);
-import { existsSync as existsSync6, readFileSync as readFileSync7, watch } from "node:fs";
-import { join as join9, sep as sep2 } from "node:path";
+import { existsSync as existsSync7, readFileSync as readFileSync7, watch } from "node:fs";
+import { join as join10, sep as sep3 } from "node:path";
 var DEFAULT_IGNORE2 = [
   "node_modules",
   ".git",
@@ -106990,8 +107174,8 @@ function createWatcher(options) {
   const debounceMs = options.debounceMs ?? 500;
   const ig = import_ignore2.default();
   ig.add(DEFAULT_IGNORE2);
-  const gitignorePath = join9(options.cwd, ".gitignore");
-  if (existsSync6(gitignorePath)) {
+  const gitignorePath = join10(options.cwd, ".gitignore");
+  if (existsSync7(gitignorePath)) {
     ig.add(readFileSync7(gitignorePath, "utf8"));
   }
   if (options.extraIgnore)
@@ -107001,7 +107185,7 @@ function createWatcher(options) {
   const fsWatcher = watch(options.cwd, { recursive: true }, (_event, filename) => {
     if (!filename)
       return;
-    const rel = filename.split(sep2).join("/");
+    const rel = filename.split(sep3).join("/");
     if (ig.ignores(rel))
       return;
     pending.add(rel);
@@ -107030,8 +107214,8 @@ var devInputSchema = exports_external.object({
   app: exports_external.string().optional()
 });
 async function loadConfig2(ctx, appOverride) {
-  const tomlPath = join10(ctx.cwd, "percher.toml");
-  if (!existsSync7(tomlPath)) {
+  const tomlPath = join11(ctx.cwd, "percher.toml");
+  if (!existsSync8(tomlPath)) {
     throw new PercherCoreError("No percher.toml found. Run: percher init", {
       code: "dev.no-app",
       hint: "Create a percher.toml first with `percher init`."
@@ -107185,12 +107369,12 @@ async function dev(ctx, input, callbacks) {
     }
   });
   try {
-    await new Promise((resolve6) => {
+    await new Promise((resolve7) => {
       if (callbacks.signal.aborted) {
-        resolve6();
+        resolve7();
         return;
       }
-      callbacks.signal.addEventListener("abort", () => resolve6(), { once: true });
+      callbacks.signal.addEventListener("abort", () => resolve7(), { once: true });
     });
   } finally {
     logStream.ctrl?.abort();
@@ -107225,8 +107409,8 @@ async function diff(ctx, input = {}) {
   });
 }
 // ../core/dist/commands/doctor.js
-import { existsSync as existsSync8 } from "node:fs";
-import { join as join12 } from "node:path";
+import { existsSync as existsSync9 } from "node:fs";
+import { join as join13 } from "node:path";
 
 // ../core/dist/error-classifier.js
 function extractEnvVarsFromLog(combined) {
@@ -107771,7 +107955,7 @@ function recoveryFromErrorClass(errorClass, failure = {}) {
 }
 
 // ../core/dist/commands/publish-failure.js
-import { join as join11 } from "node:path";
+import { join as join12 } from "node:path";
 
 // ../core/dist/structured-error-codes.js
 var MAPPINGS = {
@@ -107849,7 +108033,7 @@ function trimMessage(raw) {
 
 // ../core/dist/commands/publish-failure.js
 function tomlPathFor(cwd) {
-  return join11(cwd, "percher.toml");
+  return join12(cwd, "percher.toml");
 }
 async function buildFailureError(ctx, app, deployment, signal) {
   let buildLogTail;
@@ -108192,8 +108376,8 @@ async function doctor(ctx, input = {}) {
     });
     return summarize(checks3, { appProvided: !!input.app });
   }
-  const tomlPath = join12(ctx.cwd, "percher.toml");
-  const tomlExists = existsSync8(tomlPath);
+  const tomlPath = join13(ctx.cwd, "percher.toml");
+  const tomlExists = existsSync9(tomlPath);
   let tomlValid = false;
   if (!tomlExists) {
     checks3.push({
@@ -108973,7 +109157,7 @@ async function envList(ctx, input = {}) {
 import { randomUUID } from "node:crypto";
 import { createWriteStream } from "node:fs";
 import { rename, unlink } from "node:fs/promises";
-import { isAbsolute, resolve as resolvePath } from "node:path";
+import { isAbsolute as isAbsolute2, resolve as resolvePath } from "node:path";
 var exportInputSchema = exports_external.object({
   app: exports_external.string().optional(),
   out: exports_external.string().optional(),
@@ -108997,7 +109181,7 @@ async function streamToFile(outPath, source) {
   const tmpPath = `${outPath}.part-${randomUUID()}`;
   const out = createWriteStream(tmpPath);
   const reader = source.getReader();
-  const closed = new Promise((resolve6) => out.once("close", () => resolve6()));
+  const closed = new Promise((resolve7) => out.once("close", () => resolve7()));
   let onWriteError;
   const writeFailed = new Promise((_, reject) => {
     onWriteError = reject;
@@ -109014,14 +109198,14 @@ async function streamToFile(outPath, source) {
         bytes += value.byteLength;
         if (!out.write(value)) {
           await Promise.race([
-            new Promise((resolve6) => out.once("drain", resolve6)),
+            new Promise((resolve7) => out.once("drain", resolve7)),
             writeFailed
           ]);
         }
       }
     }
-    await new Promise((resolve6, reject) => {
-      out.end((err) => err ? reject(err) : resolve6());
+    await new Promise((resolve7, reject) => {
+      out.end((err) => err ? reject(err) : resolve7());
     });
     await closed;
   } catch (err) {
@@ -109039,7 +109223,7 @@ async function streamToFile(outPath, source) {
   return { bytes };
 }
 function resolveOutPath(ctxCwd, filename) {
-  if (isAbsolute(filename))
+  if (isAbsolute2(filename))
     return filename;
   return resolvePath(ctxCwd, filename);
 }
@@ -109100,8 +109284,8 @@ var forgejoSetupWebhookInputSchema = exports_external.object({
   app: exports_external.string().optional().describe("App name (overrides percher.toml)")
 });
 // ../core/dist/commands/generate.js
-import { existsSync as existsSync9, mkdirSync as mkdirSync5, writeFileSync as writeFileSync5 } from "node:fs";
-import { join as join13 } from "node:path";
+import { existsSync as existsSync10, mkdirSync as mkdirSync6, writeFileSync as writeFileSync6 } from "node:fs";
+import { join as join14 } from "node:path";
 var generateInputSchema = exports_external.object({
   cwd: exports_external.string().optional()
 });
@@ -109187,8 +109371,8 @@ function generateTypeScript(config2) {
 }
 async function generate(ctx, input = {}) {
   const cwd = input.cwd ?? ctx.cwd;
-  const tomlPath = join13(cwd, "percher.toml");
-  if (!existsSync9(tomlPath)) {
+  const tomlPath = join14(cwd, "percher.toml");
+  if (!existsSync10(tomlPath)) {
     throw new PercherCoreError("No percher.toml found", {
       code: "dev.no-app",
       hint: "Run percher init first."
@@ -109197,14 +109381,14 @@ async function generate(ctx, input = {}) {
   const config2 = await parseFile(tomlPath);
   const files = [];
   const envExample = generateEnvExample(config2);
-  writeFileSync5(join13(cwd, ".env.example"), envExample);
+  writeFileSync6(join14(cwd, ".env.example"), envExample);
   files.push(".env.example");
   const tsTypes = generateTypeScript(config2);
-  writeFileSync5(join13(cwd, "percher.generated.d.ts"), tsTypes);
+  writeFileSync6(join14(cwd, "percher.generated.d.ts"), tsTypes);
   files.push("percher.generated.d.ts");
   const agentInstructions = generateAgentInstructions(config2);
-  mkdirSync5(join13(cwd, ".percher"), { recursive: true });
-  writeFileSync5(join13(cwd, ".percher", "agent-instructions.md"), agentInstructions);
+  mkdirSync6(join14(cwd, ".percher"), { recursive: true });
+  writeFileSync6(join14(cwd, ".percher", "agent-instructions.md"), agentInstructions);
   files.push(".percher/agent-instructions.md");
   return { files };
 }
@@ -109353,8 +109537,8 @@ async function githubSetupWebhook(ctx, input) {
   };
 }
 // ../core/dist/commands/import-project.js
-import { existsSync as existsSync10, readFileSync as readFileSync8, writeFileSync as writeFileSync6 } from "node:fs";
-import { join as join14 } from "node:path";
+import { existsSync as existsSync11, readFileSync as readFileSync8, writeFileSync as writeFileSync7 } from "node:fs";
+import { join as join15 } from "node:path";
 
 // ../core/dist/static-docker.js
 var STATIC_DOCKER_PORT = 8080;
@@ -109415,9 +109599,9 @@ var importInputSchema = exports_external.object({
   app: exports_external.string().optional().describe("App name to import into")
 });
 function detectProvider(cwd) {
-  if (existsSync10(join14(cwd, "vercel.json")))
+  if (existsSync11(join15(cwd, "vercel.json")))
     return "vercel";
-  if (existsSync10(join14(cwd, "netlify.toml")))
+  if (existsSync11(join15(cwd, "netlify.toml")))
     return "netlify";
   return null;
 }
@@ -109435,7 +109619,7 @@ function mapVercelFramework(framework) {
   return map2[framework ?? ""] ?? { runtime: "node" };
 }
 function parseVercelJson(cwd) {
-  const raw = readFileSync8(join14(cwd, "vercel.json"), "utf-8");
+  const raw = readFileSync8(join15(cwd, "vercel.json"), "utf-8");
   const config2 = JSON.parse(raw);
   const warnings = [];
   const envVars = [];
@@ -109489,12 +109673,12 @@ health = "/api/health"
   return { toml, warnings, envVars, staticBuild };
 }
 function parseNetlifyToml(cwd) {
-  const raw = readFileSync8(join14(cwd, "netlify.toml"), "utf-8");
+  const raw = readFileSync8(join15(cwd, "netlify.toml"), "utf-8");
   const warnings = [];
   const envVars = [];
   const buildCommand = raw.match(/command\s*=\s*"([^"]+)"/)?.[1] ?? "bun run build";
   const publishDir = raw.match(/publish\s*=\s*"([^"]+)"/)?.[1] ?? "dist";
-  const hasPackageJson = existsSync10(join14(cwd, "package.json"));
+  const hasPackageJson = existsSync11(join15(cwd, "package.json"));
   const looksLikeStaticOutput = publishDir === "dist" || publishDir === "build" || publishDir === "public";
   let toml = `[app]
 name = "imported-app"
@@ -109565,11 +109749,11 @@ async function importProject(ctx, input = {}) {
       hint: "Supported providers: vercel, netlify"
     });
   }
-  const tomlPath = join14(ctx.cwd, "percher.toml");
-  if (existsSync10(tomlPath)) {
+  const tomlPath = join15(ctx.cwd, "percher.toml");
+  if (existsSync11(tomlPath)) {
     result.warnings.unshift("percher.toml already exists — overwriting with imported config");
   }
-  writeFileSync6(tomlPath, result.toml);
+  writeFileSync7(tomlPath, result.toml);
   const scaffoldedFiles = [];
   if (result.staticBuild) {
     const targets = [
@@ -109583,12 +109767,12 @@ async function importProject(ctx, input = {}) {
       }
     ];
     for (const { name, content } of targets) {
-      const target = join14(ctx.cwd, name);
-      if (existsSync10(target)) {
+      const target = join15(ctx.cwd, name);
+      if (existsSync11(target)) {
         result.warnings.push(`${name} already exists — left untouched. The imported config expects a multi-stage static build; merge by hand if needed.`);
         continue;
       }
-      writeFileSync6(target, content, "utf-8");
+      writeFileSync7(target, content, "utf-8");
       scaffoldedFiles.push(name);
     }
   }
@@ -109601,14 +109785,14 @@ async function importProject(ctx, input = {}) {
   };
 }
 // ../core/dist/commands/init.js
-import { existsSync as existsSync12, writeFileSync as writeFileSync7 } from "node:fs";
-import { basename as basename2, join as join16 } from "node:path";
+import { existsSync as existsSync13, writeFileSync as writeFileSync8 } from "node:fs";
+import { basename as basename3, join as join17 } from "node:path";
 
 // ../core/dist/detect.js
-import { existsSync as existsSync11, readFileSync as readFileSync9 } from "node:fs";
-import { join as join15 } from "node:path";
+import { existsSync as existsSync12, readFileSync as readFileSync9 } from "node:fs";
+import { join as join16 } from "node:path";
 function exists(dir, ...names) {
-  return names.some((n) => existsSync11(join15(dir, n)));
+  return names.some((n) => existsSync12(join16(dir, n)));
 }
 function readJson(path) {
   try {
@@ -109637,8 +109821,8 @@ function detectDataMode(pkg, cwd) {
   return { mode: "none" };
 }
 async function detectFramework(cwd) {
-  const pkgPath = join15(cwd, "package.json");
-  const pkg = existsSync11(pkgPath) ? readJson(pkgPath) : null;
+  const pkgPath = join16(cwd, "package.json");
+  const pkg = existsSync12(pkgPath) ? readJson(pkgPath) : null;
   if (exists(cwd, "Dockerfile")) {
     return {
       runtime: "docker",
@@ -109740,7 +109924,7 @@ async function detectFramework(cwd) {
   }
   const hasPython = exists(cwd, "requirements.txt", "pyproject.toml");
   if (hasPython) {
-    if (existsSync11(join15(cwd, "manage.py"))) {
+    if (existsSync12(join16(cwd, "manage.py"))) {
       return {
         runtime: "python",
         framework: "django",
@@ -109748,7 +109932,7 @@ async function detectFramework(cwd) {
         data: detectDataMode(pkg, cwd)
       };
     }
-    const mainPy = existsSync11(join15(cwd, "main.py")) ? readFileSync9(join15(cwd, "main.py"), "utf8") : "";
+    const mainPy = existsSync12(join16(cwd, "main.py")) ? readFileSync9(join16(cwd, "main.py"), "utf8") : "";
     if (/FastAPI\s*\(/.test(mainPy) || /from\s+fastapi/.test(mainPy)) {
       return {
         runtime: "python",
@@ -109757,7 +109941,7 @@ async function detectFramework(cwd) {
         data: detectDataMode(pkg, cwd)
       };
     }
-    const appPy = existsSync11(join15(cwd, "app.py")) ? readFileSync9(join15(cwd, "app.py"), "utf8") : "";
+    const appPy = existsSync12(join16(cwd, "app.py")) ? readFileSync9(join16(cwd, "app.py"), "utf8") : "";
     if (/Flask\s*\(/.test(appPy) || /from\s+flask/.test(appPy)) {
       return {
         runtime: "python",
@@ -109772,7 +109956,7 @@ async function detectFramework(cwd) {
       data: detectDataMode(pkg, cwd)
     };
   }
-  if (existsSync11(join15(cwd, "index.html"))) {
+  if (existsSync12(join16(cwd, "index.html"))) {
     return { runtime: "static" };
   }
   return null;
@@ -109822,8 +110006,8 @@ function scanEnvVars(_cwd) {
   return {};
 }
 async function init(ctx, input = {}) {
-  const path = join16(ctx.cwd, "percher.toml");
-  const exists2 = existsSync12(path);
+  const path = join17(ctx.cwd, "percher.toml");
+  const exists2 = existsSync13(path);
   if (exists2 && !input.force) {
     throw new PercherCoreError("percher.toml already exists", {
       code: "init.exists",
@@ -109836,7 +110020,7 @@ async function init(ctx, input = {}) {
   if (input.name) {
     name = input.name;
   } else {
-    const suggestion = generateName(basename2(ctx.cwd));
+    const suggestion = generateName(basename3(ctx.cwd));
     const interactive = input.interactive ?? detectInteractive();
     if (isSuspiciousAutoName(suggestion) && interactive) {
       const answer = (await ctx.prompt(`Suggested app name: '${suggestion}'. Press Enter to accept, or type a different name: `, { default: suggestion })).trim();
@@ -109870,7 +110054,7 @@ async function init(ctx, input = {}) {
   if (Object.keys(envVars).length > 0) {
     config2.env = envVars;
   }
-  writeFileSync7(path, serialize(config2), "utf8");
+  writeFileSync8(path, serialize(config2), "utf8");
   const scaffoldedFiles = [];
   if (detected?.staticBuild) {
     const targets = [
@@ -109886,10 +110070,10 @@ async function init(ctx, input = {}) {
       }
     ];
     for (const { name: name2, content } of targets) {
-      const target = join16(ctx.cwd, name2);
-      if (existsSync12(target) && !input.force)
+      const target = join17(ctx.cwd, name2);
+      if (existsSync13(target) && !input.force)
         continue;
-      writeFileSync7(target, content, "utf8");
+      writeFileSync8(target, content, "utf8");
       scaffoldedFiles.push(name2);
     }
   }
@@ -109973,7 +110157,7 @@ async function login(ctx, input = {}) {
       return validateAndPersist(ctx, input.apiUrl, result.token);
     }
     if (code.interval > 0) {
-      await new Promise((resolve6) => setTimeout(resolve6, code.interval * 1000));
+      await new Promise((resolve7) => setTimeout(resolve7, code.interval * 1000));
     }
   }
   throw new PercherCoreError("Login timed out. Re-run `percher login`.", {
@@ -110890,16 +111074,277 @@ function collectWarnings2(collections, rlsPolicies, unsupported) {
 }
 // ../core/dist/commands/migrate-supabase-rewrite.js
 import { mkdir as mkdir3, writeFile as writeFile3 } from "node:fs/promises";
-import { dirname as dirname5, join as join18, relative as relative4, resolve as resolve7 } from "node:path";
+import { dirname as dirname6, join as join20, relative as relative6, resolve as resolve9, sep as sep5 } from "node:path";
 
-// ../core/dist/commands/migrate-supabase-walker.js
-var import_ignore3 = __toESM(require_ignore(), 1);
-import { mkdir as mkdir2, readdir, readFile as readFile3, stat, writeFile as writeFile2 } from "node:fs/promises";
-import { dirname as dirname4, isAbsolute as isAbsolute2, join as join17, relative as relative3, resolve as resolve6, sep as sep3 } from "node:path";
+// ../core/dist/commands/migrate-supabase-recipes.js
+var AUTH_RECIPES = {
+  "auth.getSession": {
+    title: "getSession → pb.authStore",
+    recipe: "PocketBase keeps the session in `pb.authStore` (local, synchronous — no await). Replace `const { data: { session } } = await supabase.auth.getSession()` with `pb.authStore.isValid` (logged in?), `pb.authStore.record` (the user record), and `pb.authStore.token` (the JWT)."
+  },
+  "auth.getClaims": {
+    title: "getClaims → pb.authStore.record",
+    recipe: "PocketBase has no separate claims endpoint. The authenticated user's fields live on `pb.authStore.record`; use `pb.authStore.isValid` for the logged-in check. Read them directly — no await, no token decode."
+  },
+  "auth.getUser": {
+    title: "getUser → pb.authStore.record",
+    recipe: "`pb.authStore.record` is the current user record (or null), read synchronously. Supabase's `getUser()` returns `Promise<{ data: { user } }>`, so drop the await and the `.data.user` unwrap."
+  },
+  "auth.signInWithOtp": {
+    title: "signInWithOtp → requestOTP + authWithOTP",
+    recipe: "PocketBase email-OTP is two steps: `const req = await pb.collection('users').requestOTP(email)` sends the code, then on a second screen `await pb.collection('users').authWithOTP(req.otpId, code)` verifies it. Supabase's single magic-link `signInWithOtp` maps to the first step — you'll add a code-entry screen for the second."
+  },
+  "auth.verifyOtp": {
+    title: "verifyOtp → authWithOTP",
+    recipe: "Pairs with requestOTP: `await pb.collection('users').authWithOTP(otpId, code)` (otpId comes from the requestOTP response, not from the email link). Supabase's `token_hash` / `type` model doesn't carry over — keep the otpId from step one in component state."
+  },
+  "auth.resetPasswordForEmail": {
+    title: "resetPasswordForEmail → requestPasswordReset",
+    recipe: "`await pb.collection('users').requestPasswordReset(email)` sends the reset email. The confirm step lives on your reset page: `await pb.collection('users').confirmPasswordReset(token, newPassword, newPasswordConfirm)` (token comes from the email link)."
+  },
+  "auth.updateUser": {
+    title: "updateUser → collection('users').update",
+    recipe: "PocketBase updates by record id: `await pb.collection('users').update(pb.authStore.record.id, { ... })`. There's no implicit current-user update — pass the id explicitly. Email/password changes use the dedicated `requestEmailChange` / `confirmEmailChange` flows."
+  },
+  "auth.refreshSession": {
+    title: "refreshSession → authRefresh",
+    recipe: "`await pb.collection('users').authRefresh()` re-validates the stored token and refreshes `pb.authStore`. There's no refresh-token rotation to manage — PocketBase reissues the JWT in place."
+  },
+  "auth.onAuthStateChange": {
+    title: "onAuthStateChange → pb.authStore.onChange",
+    recipe: "`const unsubscribe = pb.authStore.onChange((token, record) => { ... })`. The callback receives `(token, record)`, NOT Supabase's `(event, session)` — there's no event-type string, so branch on `pb.authStore.isValid` inside the callback. It returns an unsubscribe function; call it on teardown."
+  }
+};
+function recipeFor(pattern) {
+  return AUTH_RECIPES[pattern] ?? null;
+}
+var GENERAL_AUTH_RECIPES = [
+  {
+    title: "Route guards → pb.authStore.isValid",
+    recipe: "Gate protected routes on `pb.authStore.isValid` instead of inspecting a session object, e.g. `if (!pb.authStore.isValid) redirect('/login')`. `pb.authStore` is restored from storage on load, so the check works on the first render."
+  }
+];
+function renderRecipesSection(patterns2) {
+  const seen = new Set;
+  const recipes = [];
+  for (const pattern of patterns2) {
+    const recipe = recipeFor(pattern);
+    if (recipe && !seen.has(recipe.title)) {
+      seen.add(recipe.title);
+      recipes.push(recipe);
+    }
+  }
+  if (recipes.length === 0)
+    return [];
+  const lines = [];
+  lines.push("## Recipes — Supabase auth → PocketBase");
+  lines.push("");
+  lines.push("Concrete PocketBase equivalents for the auth calls above. These are NOT auto-applied — the Supabase call is left in place so the app keeps working until you migrate it deliberately. See https://pocketbase.io/docs/authentication/.");
+  lines.push("");
+  for (const recipe of [...recipes, ...GENERAL_AUTH_RECIPES]) {
+    lines.push(`### ${recipe.title}`);
+    lines.push("");
+    lines.push(recipe.recipe);
+    lines.push("");
+  }
+  return lines;
+}
 
-// ../core/dist/commands/migrate-supabase-sdk.js
+// ../core/dist/commands/migrate-supabase-scaffold.js
 var import_jscodeshift = __toESM(require_core3(), 1);
+import { posix } from "node:path";
 var tsx = import_jscodeshift.default.withParser("tsx");
+var CLIENT_FACTORIES = new Set(["createClient", "createBrowserClient", "createServerClient"]);
+function scaffoldPocketBaseClient(input) {
+  const pbName = input.pbIdentifier ?? "pb";
+  const codeFiles = input.files.filter((f) => f.kind === "code");
+  const flags = [];
+  for (const file2 of codeFiles) {
+    if (isSupabaseClientModule(file2.source)) {
+      flags.push({
+        file: file2.relativePath,
+        kind: "manual_review",
+        pattern: "supabase.client_module",
+        note: "This module sets up the Supabase client. It's kept while any Supabase call remains; once everything is migrated to PocketBase, delete it and the imports that reference it."
+      });
+    }
+  }
+  const existing = codeFiles.find((f) => exportsBinding(f.rewritten, pbName));
+  let targetRelNoExt;
+  let clientModule = null;
+  let skippedReason;
+  if (existing) {
+    targetRelNoExt = stripExt(existing.relativePath);
+    skippedReason = "pb_client_exists";
+  } else {
+    const ext = pickExtension(codeFiles);
+    const baseNoExt = pickModuleBase(codeFiles);
+    const targetRel = `${baseNoExt}.${ext}`;
+    if (input.files.some((f) => f.relativePath === targetRel)) {
+      flags.push({
+        file: targetRel,
+        kind: "manual_review",
+        pattern: "scaffold.path_taken",
+        note: `Couldn't auto-create a PocketBase client — \`${targetRel}\` already exists. Create one that exports \`${pbName}\` and import it in the rewritten files.`
+      });
+      return {
+        clientModule: null,
+        importInsertions: new Map,
+        flags,
+        skippedReason: "target_path_taken"
+      };
+    }
+    targetRelNoExt = baseNoExt;
+    clientModule = { relativePath: targetRel, content: renderClientModule(pbName, codeFiles) };
+  }
+  const importInsertions = new Map;
+  const changed = new Set(input.changedRelPaths);
+  for (const file2 of codeFiles) {
+    if (!changed.has(file2.relativePath))
+      continue;
+    if (file2.relativePath === clientModule?.relativePath)
+      continue;
+    if (!referencesUnboundIdentifier(file2.rewritten, pbName))
+      continue;
+    const importPath = computeImportPath(file2.relativePath, targetRelNoExt);
+    const next = insertNamedImport(file2.rewritten, pbName, importPath);
+    if (next !== null)
+      importInsertions.set(file2.relativePath, next);
+  }
+  return { clientModule, importInsertions, flags, ...skippedReason ? { skippedReason } : {} };
+}
+function renderClientModule(pbName, codeFiles) {
+  const usesViteEnv = codeFiles.some((f) => f.source.includes("import.meta.env"));
+  const accessor = usesViteEnv ? "import.meta.env.VITE_POCKETBASE_URL" : "process.env.POCKETBASE_URL";
+  return [
+    'import PocketBase from "pocketbase";',
+    "",
+    "// Percher injects the PocketBase URL at deploy time. This is a working",
+    "// default — adjust the URL accessor to match your framework if needed.",
+    `export const ${pbName} = new PocketBase(${accessor});`,
+    ""
+  ].join(`
+`);
+}
+function pickExtension(codeFiles) {
+  return codeFiles.some((f) => f.relativePath.endsWith(".ts") || f.relativePath.endsWith(".tsx")) ? "ts" : "js";
+}
+function pickModuleBase(codeFiles) {
+  const hasSrc = codeFiles.some((f) => f.relativePath.startsWith("src/"));
+  return hasSrc ? "src/lib/pocketbase" : "lib/pocketbase";
+}
+function stripExt(relPath) {
+  const dot = relPath.lastIndexOf(".");
+  return dot > relPath.lastIndexOf("/") ? relPath.slice(0, dot) : relPath;
+}
+function computeImportPath(fromFileRel, targetRelNoExt) {
+  let rel = posix.relative(posix.dirname(fromFileRel), targetRelNoExt);
+  if (!rel.startsWith("."))
+    rel = `./${rel}`;
+  return rel;
+}
+function insertNamedImport(source, name, spec) {
+  let root;
+  try {
+    root = tsx(source);
+  } catch {
+    return null;
+  }
+  const decl = import_jscodeshift.default.importDeclaration([import_jscodeshift.default.importSpecifier(import_jscodeshift.default.identifier(name))], import_jscodeshift.default.literal(spec));
+  const program = root.get().node.program;
+  program.body.unshift(decl);
+  return root.toSource({ quote: "double" });
+}
+function referencesUnboundIdentifier(source, name) {
+  let root;
+  try {
+    root = tsx(source);
+  } catch {
+    return false;
+  }
+  let declared = false;
+  root.find(import_jscodeshift.default.ImportDeclaration).forEach((p) => {
+    for (const spec of p.node.specifiers ?? []) {
+      if (spec.local?.name === name)
+        declared = true;
+    }
+  });
+  root.find(import_jscodeshift.default.VariableDeclarator).forEach((p) => {
+    if (p.node.id.type === "Identifier" && p.node.id.name === name) {
+      declared = true;
+    }
+  });
+  let used = false;
+  root.find(import_jscodeshift.default.MemberExpression).forEach((p) => {
+    const obj = p.node.object;
+    if (obj.type === "Identifier" && obj.name === name)
+      used = true;
+  });
+  return used && !declared;
+}
+function exportsBinding(source, name) {
+  if (!source.includes(`export`) || !source.includes(name))
+    return false;
+  let root;
+  try {
+    root = tsx(source);
+  } catch {
+    return false;
+  }
+  let found = false;
+  root.find(import_jscodeshift.default.ExportNamedDeclaration).forEach((p) => {
+    const node = p.node;
+    if (node.declaration?.type === "VariableDeclaration") {
+      for (const d of node.declaration.declarations) {
+        if (d.type === "VariableDeclarator" && d.id.type === "Identifier" && d.id.name === name) {
+          found = true;
+        }
+      }
+    }
+    for (const spec of node.specifiers ?? []) {
+      const exported = spec.exported;
+      if (exported?.type === "Identifier" && exported.name === name) {
+        found = true;
+      }
+    }
+  });
+  return found;
+}
+function isSupabaseClientModule(source) {
+  if (!source.includes("@supabase/"))
+    return false;
+  let root;
+  try {
+    root = tsx(source);
+  } catch {
+    return false;
+  }
+  let importsSupabase = false;
+  root.find(import_jscodeshift.default.ImportDeclaration).forEach((p) => {
+    const src = p.node.source.value;
+    if (typeof src === "string" && src.startsWith("@supabase/"))
+      importsSupabase = true;
+  });
+  if (!importsSupabase)
+    return false;
+  let callsFactory = false;
+  root.find(import_jscodeshift.default.CallExpression).forEach((p) => {
+    const callee = p.node.callee;
+    if (callee.type === "Identifier" && CLIENT_FACTORIES.has(callee.name)) {
+      callsFactory = true;
+    }
+  });
+  return callsFactory;
+}
+
+// ../core/dist/commands/migrate-supabase-status.js
+var import_cross_spawn = __toESM(require_cross_spawn(), 1);
+import { readFile as readFile4 } from "node:fs/promises";
+import { join as join19, relative as relative5, resolve as resolve8 } from "node:path";
+
+// ../core/dist/commands/migrate-supabase-sdk.js
+var import_jscodeshift2 = __toESM(require_core3(), 1);
+var tsx2 = import_jscodeshift2.default.withParser("tsx");
 function rewriteSupabaseSdk(input) {
   const pbName = input.pbIdentifier ?? "pb";
   const supabaseNames = new Set(input.supabaseIdentifiers ?? ["supabase"]);
@@ -110908,7 +111353,7 @@ function rewriteSupabaseSdk(input) {
   }
   let root;
   try {
-    root = tsx(input.source);
+    root = tsx2(input.source);
   } catch (err) {
     return {
       rewritten: input.source,
@@ -110991,7 +111436,7 @@ function sourceMentionsSupabase(source, supabaseNames) {
   return false;
 }
 function rewriteAuthCalls(root, supabaseNames, pbName, flags, state) {
-  root.find(import_jscodeshift.default.CallExpression).filter((path) => isSupabaseAuthCall(path, supabaseNames)).forEach((path) => {
+  root.find(import_jscodeshift2.default.CallExpression).filter((path) => isSupabaseAuthCall(path, supabaseNames)).forEach((path) => {
     const callee = path.node.callee;
     const method = callee.property.name;
     switch (method) {
@@ -111010,6 +111455,12 @@ function rewriteAuthCalls(root, supabaseNames, pbName, flags, state) {
       case "onAuthStateChange":
         replaceAuthOnChange(path, pbName, flags, state);
         return;
+      default: {
+        const recipe = recipeFor(`auth.${method}`);
+        const note = recipe ? `supabase.auth.${method}(...) isn't auto-translated (the PB equivalent diverges) — it still calls Supabase. ${recipe.recipe}` : `supabase.auth.${method}(...) isn't auto-translated — it still calls Supabase. Map it to PocketBase's auth API by hand (https://pocketbase.io/docs/authentication/).`;
+        flags.push(makeFlag(path, "unsupported", `auth.${method}`, note));
+        return;
+      }
     }
   });
 }
@@ -111019,7 +111470,7 @@ function replaceAuthOnChange(path, pbName, flags, state) {
     flags.push(makeFlag(path, "manual_review", "auth.onAuthStateChange", "onAuthStateChange called with no args — manual review."));
     return;
   }
-  const replacement = import_jscodeshift.default.callExpression(import_jscodeshift.default.memberExpression(import_jscodeshift.default.memberExpression(import_jscodeshift.default.identifier(pbName), import_jscodeshift.default.identifier("authStore")), import_jscodeshift.default.identifier("onChange")), [callback]);
+  const replacement = import_jscodeshift2.default.callExpression(import_jscodeshift2.default.memberExpression(import_jscodeshift2.default.memberExpression(import_jscodeshift2.default.identifier(pbName), import_jscodeshift2.default.identifier("authStore")), import_jscodeshift2.default.identifier("onChange")), [callback]);
   applyRewrite(path, replacement, "manual_review", "auth.onAuthStateChange", "onAuthStateChange → pb.authStore.onChange — the callback signature changes: Supabase passes `(event, session)`, PB passes `(token, model)`. Rewrite the callback body.", flags, state);
 }
 function isSupabaseAuthCall(path, supabaseNames) {
@@ -111053,7 +111504,7 @@ function replaceAuthSignIn(path, pbName, flags, state) {
     flagEnvelopeManualReview(path, "auth.signInWithPassword", flags);
     return;
   }
-  const replacement = import_jscodeshift.default.callExpression(import_jscodeshift.default.memberExpression(import_jscodeshift.default.callExpression(import_jscodeshift.default.memberExpression(import_jscodeshift.default.identifier(pbName), import_jscodeshift.default.identifier("collection")), [import_jscodeshift.default.literal("users")]), import_jscodeshift.default.identifier("authWithPassword")), [emailExpr, passwordExpr]);
+  const replacement = import_jscodeshift2.default.callExpression(import_jscodeshift2.default.memberExpression(import_jscodeshift2.default.callExpression(import_jscodeshift2.default.memberExpression(import_jscodeshift2.default.identifier(pbName), import_jscodeshift2.default.identifier("collection")), [import_jscodeshift2.default.literal("users")]), import_jscodeshift2.default.identifier("authWithPassword")), [emailExpr, passwordExpr]);
   applyRewrite(path, replacement, "rewritten", "auth.signInWithPassword", 'signInWithPassword → pb.collection("users").authWithPassword', flags, state);
 }
 function replaceAuthSignUp(path, pbName, flags, state) {
@@ -111072,11 +111523,11 @@ function replaceAuthSignUp(path, pbName, flags, state) {
     flagEnvelopeManualReview(path, "auth.signUp", flags);
     return;
   }
-  const replacement = import_jscodeshift.default.callExpression(import_jscodeshift.default.memberExpression(import_jscodeshift.default.callExpression(import_jscodeshift.default.memberExpression(import_jscodeshift.default.identifier(pbName), import_jscodeshift.default.identifier("collection")), [import_jscodeshift.default.literal("users")]), import_jscodeshift.default.identifier("create")), [
-    import_jscodeshift.default.objectExpression([
-      import_jscodeshift.default.property("init", import_jscodeshift.default.identifier("email"), emailExpr),
-      import_jscodeshift.default.property("init", import_jscodeshift.default.identifier("password"), passwordExpr),
-      import_jscodeshift.default.property("init", import_jscodeshift.default.identifier("passwordConfirm"), passwordExpr)
+  const replacement = import_jscodeshift2.default.callExpression(import_jscodeshift2.default.memberExpression(import_jscodeshift2.default.callExpression(import_jscodeshift2.default.memberExpression(import_jscodeshift2.default.identifier(pbName), import_jscodeshift2.default.identifier("collection")), [import_jscodeshift2.default.literal("users")]), import_jscodeshift2.default.identifier("create")), [
+    import_jscodeshift2.default.objectExpression([
+      import_jscodeshift2.default.property("init", import_jscodeshift2.default.identifier("email"), emailExpr),
+      import_jscodeshift2.default.property("init", import_jscodeshift2.default.identifier("password"), passwordExpr),
+      import_jscodeshift2.default.property("init", import_jscodeshift2.default.identifier("passwordConfirm"), passwordExpr)
     ])
   ]);
   applyRewrite(path, replacement, "rewritten", "auth.signUp", 'signUp → pb.collection("users").create({...passwordConfirm})', flags, state);
@@ -111086,7 +111537,7 @@ function replaceAuthSignOut(path, pbName, flags, state) {
     flagEnvelopeManualReview(path, "auth.signOut", flags);
     return;
   }
-  const replacement = import_jscodeshift.default.callExpression(import_jscodeshift.default.memberExpression(import_jscodeshift.default.memberExpression(import_jscodeshift.default.identifier(pbName), import_jscodeshift.default.identifier("authStore")), import_jscodeshift.default.identifier("clear")), []);
+  const replacement = import_jscodeshift2.default.callExpression(import_jscodeshift2.default.memberExpression(import_jscodeshift2.default.memberExpression(import_jscodeshift2.default.identifier(pbName), import_jscodeshift2.default.identifier("authStore")), import_jscodeshift2.default.identifier("clear")), []);
   applyRewrite(path, replacement, "rewritten", "auth.signOut", "signOut → pb.authStore.clear()", flags, state);
 }
 function replaceAuthGetUser(path, pbName, flags, state) {
@@ -111094,11 +111545,11 @@ function replaceAuthGetUser(path, pbName, flags, state) {
     flagEnvelopeManualReview(path, "auth.getUser", flags);
     return;
   }
-  const replacement = import_jscodeshift.default.memberExpression(import_jscodeshift.default.memberExpression(import_jscodeshift.default.identifier(pbName), import_jscodeshift.default.identifier("authStore")), import_jscodeshift.default.identifier("model"));
+  const replacement = import_jscodeshift2.default.memberExpression(import_jscodeshift2.default.memberExpression(import_jscodeshift2.default.identifier(pbName), import_jscodeshift2.default.identifier("authStore")), import_jscodeshift2.default.identifier("model"));
   applyRewrite(path, replacement, "manual_review", "auth.getUser", "getUser → pb.authStore.model — note Supabase returned Promise<{ data: { user } }>, PB returns the record sync; remove awaits + .data.user access.", flags, state);
 }
 function rewriteFromCalls(root, supabaseNames, pbName, flags, state) {
-  root.find(import_jscodeshift.default.CallExpression).filter((path) => isSupabaseFromTerminal(path, supabaseNames)).forEach((path) => {
+  root.find(import_jscodeshift2.default.CallExpression).filter((path) => isSupabaseFromTerminal(path, supabaseNames)).forEach((path) => {
     rewriteFromChain(path, supabaseNames, pbName, flags, state);
   });
 }
@@ -111204,7 +111655,7 @@ function rewriteSelect(path, pbName, table, steps, flags, state) {
   let paginationPerPage = 0;
   const fieldsValue = extractSelectFields(select);
   if (fieldsValue !== null)
-    opts.fields = import_jscodeshift.default.literal(fieldsValue);
+    opts.fields = import_jscodeshift2.default.literal(fieldsValue);
   for (const step of tail) {
     switch (step.method) {
       case "eq": {
@@ -111228,7 +111679,7 @@ function rewriteSelect(path, pbName, table, steps, flags, state) {
           reviewNotes.push(`.order() arguments not in the recognised shape — manual review.`);
           continue;
         }
-        opts.sort = import_jscodeshift.default.literal(opts.sort ? `${literalString(opts.sort)},${sortFrag}` : sortFrag);
+        opts.sort = import_jscodeshift2.default.literal(opts.sort ? `${literalString(opts.sort)},${sortFrag}` : sortFrag);
         break;
       }
       case "limit": {
@@ -111289,7 +111740,7 @@ function rewriteSelect(path, pbName, table, steps, flags, state) {
   if (usePagination) {
     methodName = "getList";
     const trailingOpts = buildOptionsObject(opts);
-    methodArgs = [import_jscodeshift.default.literal(paginationPage), import_jscodeshift.default.literal(paginationPerPage)];
+    methodArgs = [import_jscodeshift2.default.literal(paginationPage), import_jscodeshift2.default.literal(paginationPerPage)];
     if (trailingOpts)
       methodArgs.push(trailingOpts);
   } else {
@@ -111297,7 +111748,7 @@ function rewriteSelect(path, pbName, table, steps, flags, state) {
     const optsObj = buildOptionsObject(opts);
     methodArgs = optsObj ? [optsObj] : [];
   }
-  const replacement = import_jscodeshift.default.callExpression(import_jscodeshift.default.memberExpression(import_jscodeshift.default.callExpression(import_jscodeshift.default.memberExpression(import_jscodeshift.default.identifier(pbName), import_jscodeshift.default.identifier("collection")), [import_jscodeshift.default.literal(table)]), import_jscodeshift.default.identifier(methodName)), methodArgs);
+  const replacement = import_jscodeshift2.default.callExpression(import_jscodeshift2.default.memberExpression(import_jscodeshift2.default.callExpression(import_jscodeshift2.default.memberExpression(import_jscodeshift2.default.identifier(pbName), import_jscodeshift2.default.identifier("collection")), [import_jscodeshift2.default.literal(table)]), import_jscodeshift2.default.identifier(methodName)), methodArgs);
   const kind = needsReview ? "manual_review" : "rewritten";
   const baseNote = `from(${JSON.stringify(table)}).select(...) → pb.collection(...).${methodName}(...)`;
   const note = needsReview ? `${baseNote} — ${reviewNotes.join(" · ")}` : baseNote;
@@ -111328,23 +111779,23 @@ function buildEqFilter(step) {
     const v = valArg.value;
     if (typeof v === "string") {
       return {
-        expression: import_jscodeshift.default.literal(`${column} = "${escapeFilterString(v)}"`),
+        expression: import_jscodeshift2.default.literal(`${column} = "${escapeFilterString(v)}"`),
         column,
         identifierValue: false
       };
     }
     if (typeof v === "number" || typeof v === "boolean") {
       return {
-        expression: import_jscodeshift.default.literal(`${column} = ${v}`),
+        expression: import_jscodeshift2.default.literal(`${column} = ${v}`),
         column,
         identifierValue: false
       };
     }
     return null;
   }
-  const template = import_jscodeshift.default.templateLiteral([
-    import_jscodeshift.default.templateElement({ raw: `${column} = "`, cooked: `${column} = "` }, false),
-    import_jscodeshift.default.templateElement({ raw: `"`, cooked: `"` }, true)
+  const template = import_jscodeshift2.default.templateLiteral([
+    import_jscodeshift2.default.templateElement({ raw: `${column} = "`, cooked: `${column} = "` }, false),
+    import_jscodeshift2.default.templateElement({ raw: `"`, cooked: `"` }, true)
   ], [valArg]);
   return {
     expression: template,
@@ -111361,17 +111812,17 @@ function combineFilterStatic(current, next) {
   const a = literalString(current);
   const b = literalString(next);
   if (a !== null && b !== null) {
-    return import_jscodeshift.default.literal(`(${a}) && (${b})`);
+    return import_jscodeshift2.default.literal(`(${a}) && (${b})`);
   }
   return combineFilterDynamic(current, next);
 }
 function combineFilterDynamic(current, next) {
   if (!current)
     return next;
-  return import_jscodeshift.default.templateLiteral([
-    import_jscodeshift.default.templateElement({ raw: "(", cooked: "(" }, false),
-    import_jscodeshift.default.templateElement({ raw: ") && (", cooked: ") && (" }, false),
-    import_jscodeshift.default.templateElement({ raw: ")", cooked: ")" }, true)
+  return import_jscodeshift2.default.templateLiteral([
+    import_jscodeshift2.default.templateElement({ raw: "(", cooked: "(" }, false),
+    import_jscodeshift2.default.templateElement({ raw: ") && (", cooked: ") && (" }, false),
+    import_jscodeshift2.default.templateElement({ raw: ")", cooked: ")" }, true)
   ], [current, next]);
 }
 function literalString(node) {
@@ -111425,17 +111876,17 @@ function extractNumber(node) {
 function buildOptionsObject(opts) {
   const props = [];
   if (opts.fields !== undefined) {
-    props.push(import_jscodeshift.default.property("init", import_jscodeshift.default.identifier("fields"), opts.fields));
+    props.push(import_jscodeshift2.default.property("init", import_jscodeshift2.default.identifier("fields"), opts.fields));
   }
   if (opts.filter !== undefined) {
-    props.push(import_jscodeshift.default.property("init", import_jscodeshift.default.identifier("filter"), opts.filter));
+    props.push(import_jscodeshift2.default.property("init", import_jscodeshift2.default.identifier("filter"), opts.filter));
   }
   if (opts.sort !== undefined) {
-    props.push(import_jscodeshift.default.property("init", import_jscodeshift.default.identifier("sort"), opts.sort));
+    props.push(import_jscodeshift2.default.property("init", import_jscodeshift2.default.identifier("sort"), opts.sort));
   }
   if (props.length === 0)
     return null;
-  return import_jscodeshift.default.objectExpression(props);
+  return import_jscodeshift2.default.objectExpression(props);
 }
 function rewriteInsert(path, pbName, table, insert, flags, state) {
   if (consumesDataErrorEnvelope(path)) {
@@ -111451,7 +111902,7 @@ function rewriteInsert(path, pbName, table, insert, flags, state) {
     flags.push(makeFlag(path, "manual_review", "from.insert.array", `from(${JSON.stringify(table)}).insert([...]) — PB's create takes one record at a time; wrap in a loop.`));
     return;
   }
-  const replacement = import_jscodeshift.default.callExpression(import_jscodeshift.default.memberExpression(import_jscodeshift.default.callExpression(import_jscodeshift.default.memberExpression(import_jscodeshift.default.identifier(pbName), import_jscodeshift.default.identifier("collection")), [import_jscodeshift.default.literal(table)]), import_jscodeshift.default.identifier("create")), [arg]);
+  const replacement = import_jscodeshift2.default.callExpression(import_jscodeshift2.default.memberExpression(import_jscodeshift2.default.callExpression(import_jscodeshift2.default.memberExpression(import_jscodeshift2.default.identifier(pbName), import_jscodeshift2.default.identifier("collection")), [import_jscodeshift2.default.literal(table)]), import_jscodeshift2.default.identifier("create")), [arg]);
   applyRewrite(path, replacement, "rewritten", "from.insert", `from(${JSON.stringify(table)}).insert({...}) → pb.collection(...).create({...})`, flags, state);
 }
 function rewriteUpdate(path, pbName, table, steps, flags, state) {
@@ -111480,7 +111931,7 @@ function rewriteUpdate(path, pbName, table, steps, flags, state) {
     flags.push(makeFlag(path, "manual_review", "from.update", "update() called with no args — manual review."));
     return;
   }
-  const replacement = import_jscodeshift.default.callExpression(import_jscodeshift.default.memberExpression(import_jscodeshift.default.callExpression(import_jscodeshift.default.memberExpression(import_jscodeshift.default.identifier(pbName), import_jscodeshift.default.identifier("collection")), [import_jscodeshift.default.literal(table)]), import_jscodeshift.default.identifier("update")), [eqVal, updateArg]);
+  const replacement = import_jscodeshift2.default.callExpression(import_jscodeshift2.default.memberExpression(import_jscodeshift2.default.callExpression(import_jscodeshift2.default.memberExpression(import_jscodeshift2.default.identifier(pbName), import_jscodeshift2.default.identifier("collection")), [import_jscodeshift2.default.literal(table)]), import_jscodeshift2.default.identifier("update")), [eqVal, updateArg]);
   applyRewrite(path, replacement, "rewritten", "from.update", `from(${JSON.stringify(table)}).update({...}).eq("id", v) → pb.collection(...).update(v, {...})`, flags, state);
 }
 function rewriteDelete(path, pbName, table, steps, flags, state) {
@@ -111503,11 +111954,11 @@ function rewriteDelete(path, pbName, table, steps, flags, state) {
     flags.push(makeFlag(path, "manual_review", "from.delete.eq_non_id", `from(${JSON.stringify(table)}).delete().eq() filters on a non-id column — PB's delete needs an id; chunk 2 will handle filter-based deletes.`));
     return;
   }
-  const replacement = import_jscodeshift.default.callExpression(import_jscodeshift.default.memberExpression(import_jscodeshift.default.callExpression(import_jscodeshift.default.memberExpression(import_jscodeshift.default.identifier(pbName), import_jscodeshift.default.identifier("collection")), [import_jscodeshift.default.literal(table)]), import_jscodeshift.default.identifier("delete")), [eqVal]);
+  const replacement = import_jscodeshift2.default.callExpression(import_jscodeshift2.default.memberExpression(import_jscodeshift2.default.callExpression(import_jscodeshift2.default.memberExpression(import_jscodeshift2.default.identifier(pbName), import_jscodeshift2.default.identifier("collection")), [import_jscodeshift2.default.literal(table)]), import_jscodeshift2.default.identifier("delete")), [eqVal]);
   applyRewrite(path, replacement, "rewritten", "from.delete", `from(${JSON.stringify(table)}).delete().eq("id", v) → pb.collection(...).delete(v)`, flags, state);
 }
 function flagUnsupportedPatterns(root, supabaseNames, flags) {
-  root.find(import_jscodeshift.default.CallExpression).forEach((path) => {
+  root.find(import_jscodeshift2.default.CallExpression).forEach((path) => {
     flagOneUnsupported(path, supabaseNames, flags);
   });
 }
@@ -111646,11 +112097,148 @@ function readFirstStringArg(call) {
   }
   return null;
 }
+var EMPTY_SCAN = {
+  importsSupabase: false,
+  authCalls: 0,
+  fromCalls: 0,
+  storage: 0,
+  rpc: 0,
+  realtime: 0,
+  edgeFunctions: 0,
+  usesPb: false,
+  danglingPb: false
+};
+function scanSupabaseUsage(input) {
+  const supabaseNames = new Set(input.supabaseIdentifiers ?? ["supabase"]);
+  const pbName = input.pbIdentifier ?? "pb";
+  const mentionsSupabase = sourceMentionsSupabase(input.source, supabaseNames);
+  const mentionsPb = input.source.includes(pbName);
+  if (!mentionsSupabase && !mentionsPb)
+    return { ...EMPTY_SCAN };
+  let root;
+  try {
+    root = tsx2(input.source);
+  } catch (err) {
+    return { ...EMPTY_SCAN, parseError: err instanceof Error ? err.message : String(err) };
+  }
+  const scan = { ...EMPTY_SCAN };
+  scan.importsSupabase = importsSupabasePackage(root);
+  root.find(import_jscodeshift2.default.CallExpression).forEach((path) => {
+    const chainRoot = findChainRoot(path.node);
+    if (chainRoot?.type !== "Identifier")
+      return;
+    if (!supabaseNames.has(chainRoot.name))
+      return;
+    const parent = path.parent?.node;
+    if (parent?.type === "MemberExpression" && parent.object === path.node) {
+      return;
+    }
+    const steps = readChainSteps(path.node);
+    const first = steps[0];
+    if (!first)
+      return;
+    switch (first.method) {
+      case "auth":
+        scan.authCalls += 1;
+        break;
+      case "from":
+        scan.fromCalls += 1;
+        break;
+      case "storage":
+        scan.storage += 1;
+        break;
+      case "rpc":
+        scan.rpc += 1;
+        break;
+      case "channel":
+        scan.realtime += 1;
+        break;
+      case "functions":
+        if (steps[1]?.method === "invoke")
+          scan.edgeFunctions += 1;
+        break;
+    }
+  });
+  const pb = analyzePbBinding(root, pbName);
+  scan.usesPb = pb.usesPb;
+  scan.danglingPb = pb.usesPb && !pb.declared;
+  return scan;
+}
+function importsSupabasePackage(root) {
+  let found = false;
+  root.find(import_jscodeshift2.default.ImportDeclaration).forEach((p) => {
+    const src = p.node.source.value;
+    if (typeof src === "string" && src.startsWith("@supabase/"))
+      found = true;
+  });
+  if (found)
+    return true;
+  root.find(import_jscodeshift2.default.CallExpression).forEach((p) => {
+    const callee = p.node.callee;
+    const isRequire = callee.type === "Identifier" && callee.name === "require";
+    const isDynImport = callee.type === "Import";
+    if (!isRequire && !isDynImport)
+      return;
+    const arg = p.node.arguments[0];
+    if ((arg?.type === "Literal" || arg?.type === "StringLiteral") && typeof arg.value === "string" && arg.value.startsWith("@supabase/")) {
+      found = true;
+    }
+  });
+  return found;
+}
+function analyzePbBinding(root, pbName) {
+  let declared = false;
+  root.find(import_jscodeshift2.default.ImportDeclaration).forEach((p) => {
+    for (const spec of p.node.specifiers ?? []) {
+      if (spec.local?.name === pbName)
+        declared = true;
+    }
+  });
+  root.find(import_jscodeshift2.default.VariableDeclarator).forEach((p) => {
+    const id = p.node.id;
+    if (id.type === "Identifier" && id.name === pbName)
+      declared = true;
+    if (id.type === "ObjectPattern" && objectPatternBindsName(id, pbName)) {
+      declared = true;
+    }
+  });
+  const checkParams = (params) => {
+    for (const param of params) {
+      if (param.type === "Identifier" && param.name === pbName) {
+        declared = true;
+      }
+    }
+  };
+  root.find(import_jscodeshift2.default.FunctionDeclaration).forEach((p) => {
+    checkParams(p.node.params);
+  });
+  root.find(import_jscodeshift2.default.FunctionExpression).forEach((p) => {
+    checkParams(p.node.params);
+  });
+  root.find(import_jscodeshift2.default.ArrowFunctionExpression).forEach((p) => {
+    checkParams(p.node.params);
+  });
+  let usedAsObject = false;
+  root.find(import_jscodeshift2.default.MemberExpression).forEach((p) => {
+    const obj = p.node.object;
+    if (obj.type === "Identifier" && obj.name === pbName)
+      usedAsObject = true;
+  });
+  return { usesPb: usedAsObject, declared };
+}
+function objectPatternBindsName(pattern, name) {
+  for (const prop of pattern.properties) {
+    if ((prop.type === "Property" || prop.type === "ObjectProperty") && "value" in prop && prop.value.type === "Identifier" && prop.value.name === name) {
+      return true;
+    }
+  }
+  return false;
+}
 function findObjectProp(obj, name) {
   for (const prop of obj.properties) {
     if ((prop.type === "Property" || prop.type === "ObjectProperty") && "key" in prop && prop.key.type === "Identifier" && prop.key.name === name) {
       if (prop.shorthand === true) {
-        return import_jscodeshift.default.identifier(name);
+        return import_jscodeshift2.default.identifier(name);
       }
       if ("value" in prop) {
         const val = prop.value;
@@ -111687,6 +112275,9 @@ function applyRewrite(path, replacement, kind, pattern, note, flags, state) {
 }
 
 // ../core/dist/commands/migrate-supabase-walker.js
+var import_ignore3 = __toESM(require_ignore(), 1);
+import { mkdir as mkdir2, readdir, readFile as readFile3, stat, writeFile as writeFile2 } from "node:fs/promises";
+import { dirname as dirname5, isAbsolute as isAbsolute3, join as join18, relative as relative4, resolve as resolve7, sep as sep4 } from "node:path";
 var REWRITABLE_EXTENSIONS = new Set([".ts", ".tsx", ".js", ".jsx", ".mjs", ".cjs"]);
 var DEFAULT_EXCLUDES = [
   "node_modules",
@@ -111707,15 +112298,16 @@ var DEFAULT_EXCLUDES = [
   "pb_migrations"
 ];
 async function walkSupabaseProject(input) {
-  const rootAbs = resolve6(input.rootDir);
+  const rootAbs = resolve7(input.rootDir);
   const ig = import_ignore3.default().add(DEFAULT_EXCLUDES);
   if (input.extraExcludes && input.extraExcludes.length > 0) {
     ig.add(input.extraExcludes);
   }
   const files = [];
   const skipped = [];
+  const pendingConfig = [];
   for await (const absPath of walkTree(rootAbs, rootAbs, ig)) {
-    const rel = relative3(rootAbs, absPath).split(sep3).join("/");
+    const rel = relative4(rootAbs, absPath).split(sep4).join("/");
     const kind = classifyFile2(rel);
     if (kind === null)
       continue;
@@ -111759,11 +112351,38 @@ async function walkSupabaseProject(input) {
       });
       continue;
     }
-    const configResult = kind === "package_json" ? rewritePackageJson(source) : rewriteEnvFile(source);
+    pendingConfig.push({ relativePath: rel, kind, source });
+  }
+  let supabaseUsageRemaining = 0;
+  for (const file2 of files) {
+    if (file2.kind !== "code")
+      continue;
+    const scan = scanSupabaseUsage({
+      source: file2.rewritten,
+      supabaseIdentifiers: input.supabaseIdentifiers
+    });
+    supabaseUsageRemaining += scan.authCalls + scan.storage + scan.rpc + scan.realtime + scan.edgeFunctions;
+    if (scan.importsSupabase)
+      supabaseUsageRemaining += 1;
+  }
+  const migrationComplete = supabaseUsageRemaining === 0;
+  for (const cfg of pendingConfig) {
+    if (!migrationComplete) {
+      files.push({
+        relativePath: cfg.relativePath,
+        kind: cfg.kind,
+        source: cfg.source,
+        rewritten: cfg.source,
+        changed: false,
+        flags: []
+      });
+      continue;
+    }
+    const configResult = cfg.kind === "package_json" ? rewritePackageJson(cfg.source) : rewriteEnvFile(cfg.source);
     files.push({
-      relativePath: rel,
-      kind,
-      source,
+      relativePath: cfg.relativePath,
+      kind: cfg.kind,
+      source: cfg.source,
       rewritten: configResult.rewritten,
       changed: configResult.changed,
       flags: configResult.flags
@@ -111796,7 +112415,9 @@ async function walkSupabaseProject(input) {
       changedFiles,
       flagCount,
       packageJsonChanged,
-      envFilesChanged
+      envFilesChanged,
+      migrationComplete,
+      supabaseUsageRemaining
     }
   };
 }
@@ -111808,8 +112429,8 @@ async function* walkTree(dir, rootAbs, ig) {
     return;
   }
   for (const name of entries) {
-    const abs = join17(dir, name);
-    const rel = relative3(rootAbs, abs).split(sep3).join("/");
+    const abs = join18(dir, name);
+    const rel = relative4(rootAbs, abs).split(sep4).join("/");
     if (rel.length > 0 && ig.ignores(rel))
       continue;
     let st;
@@ -111958,38 +112579,420 @@ function extractPublicPrefix(key) {
   return "";
 }
 async function writeWalkResult(input) {
-  const targetAbs = resolve6(input.targetDir);
+  const targetAbs = resolve7(input.targetDir);
   const changedOnly = input.changedOnly !== false;
   const written = [];
   for (const file2 of input.result.files) {
     if (changedOnly && !file2.changed)
       continue;
-    const abs = resolve6(targetAbs, file2.relativePath);
-    const rel = relative3(targetAbs, abs);
-    const isParentTraversal = rel === ".." || rel.startsWith(`..${sep3}`) || rel.startsWith("../");
-    if (rel.length === 0 || isParentTraversal || isAbsolute2(rel)) {
+    const abs = resolve7(targetAbs, file2.relativePath);
+    const rel = relative4(targetAbs, abs);
+    const isParentTraversal = rel === ".." || rel.startsWith(`..${sep4}`) || rel.startsWith("../");
+    if (rel.length === 0 || isParentTraversal || isAbsolute3(rel)) {
       throw new Error(`writeWalkResult refused path-traversing file "${file2.relativePath}" → "${abs}" (would escape targetDir "${targetAbs}").`);
     }
-    await mkdir2(dirname4(abs), { recursive: true });
+    await mkdir2(dirname5(abs), { recursive: true });
     await writeFile2(abs, file2.rewritten, "utf8");
     written.push(file2.relativePath);
   }
   return { written };
 }
 
+// ../core/dist/commands/migrate-supabase-status.js
+var migrationStatusInputSchema = exports_external.object({
+  rootDir: exports_external.string().optional().describe("Project root to scan. Relative paths resolve against ctx.cwd. Defaults to ctx.cwd."),
+  build: exports_external.boolean().optional().describe("Also run the project's build as a final gate. Off by default — a half-migrated project legitimately fails to build, so the noise is opt-in."),
+  pbIdentifier: exports_external.string().optional().describe("PocketBase client identifier the rewrite used (defaults to `pb`). Pass the same value here that `rewrite_client` used, or the undefined-reference check can't see a custom identifier (e.g. `db`)."),
+  supabaseIdentifiers: exports_external.array(exports_external.string()).optional().describe("Supabase client variable names to recognise (beyond `supabase`).")
+});
+function analyzeMigration(files, opts = {}) {
+  const pbName = opts.pbIdentifier ?? "pb";
+  const supabaseImportFiles = [];
+  const danglingPbFiles = [];
+  let authCalls = 0;
+  let storage = 0;
+  let rpc = 0;
+  let realtime = 0;
+  let edgeFunctions = 0;
+  let anyPbUsage = false;
+  let pocketbaseDepDeclared = false;
+  let supabaseDepDeclared = false;
+  let pocketbaseUrlEnv = false;
+  let supabaseEnvPresent = false;
+  for (const file2 of files) {
+    if (file2.kind === "code") {
+      const scan = scanSupabaseUsage({
+        source: file2.source,
+        supabaseIdentifiers: opts.supabaseIdentifiers,
+        pbIdentifier: pbName
+      });
+      if (scan.importsSupabase)
+        supabaseImportFiles.push(file2.relativePath);
+      if (scan.danglingPb)
+        danglingPbFiles.push(file2.relativePath);
+      if (scan.usesPb)
+        anyPbUsage = true;
+      authCalls += scan.authCalls;
+      storage += scan.storage;
+      rpc += scan.rpc;
+      realtime += scan.realtime;
+      edgeFunctions += scan.edgeFunctions;
+      continue;
+    }
+    if (file2.kind === "package_json") {
+      const deps = readDeps(file2.source);
+      if ("pocketbase" in deps)
+        pocketbaseDepDeclared = true;
+      if ("@supabase/supabase-js" in deps || "@supabase/ssr" in deps)
+        supabaseDepDeclared = true;
+      continue;
+    }
+    if (/^\s*[A-Z][A-Z0-9_]*POCKETBASE_URL\s*=/m.test(file2.source))
+      pocketbaseUrlEnv = true;
+    if (/^\s*[A-Z][A-Z0-9_]*SUPABASE[A-Z0-9_]*\s*=/m.test(file2.source))
+      supabaseEnvPresent = true;
+  }
+  const remaining = supabaseImportFiles.length + authCalls + storage + rpc + realtime + edgeFunctions;
+  const migrationComplete = remaining === 0;
+  const checks3 = [];
+  checks3.push({
+    id: "supabaseImportsRemaining",
+    label: "Supabase imports removed",
+    status: supabaseImportFiles.length === 0 ? "pass" : "warn",
+    count: supabaseImportFiles.length,
+    detail: supabaseImportFiles.length === 0 ? "No files import @supabase/*." : `${supabaseImportFiles.length} file(s) still import @supabase/* — migrate them, or keep them if this is intentionally hybrid.`,
+    ...supabaseImportFiles.length > 0 ? { files: supabaseImportFiles } : {}
+  });
+  checks3.push({
+    id: "undefinedPbReferences",
+    label: "PocketBase client wired",
+    status: danglingPbFiles.length === 0 ? "pass" : "fail",
+    count: danglingPbFiles.length,
+    detail: danglingPbFiles.length === 0 ? `Every \`${pbName}\` reference resolves to an imported client.` : `${danglingPbFiles.length} file(s) use \`${pbName}\` with no import in scope — the app won't run. Scaffold + import a client: percher migrate-from-supabase --rewrite-client --scaffold-client.`,
+    ...danglingPbFiles.length > 0 ? { files: danglingPbFiles } : {}
+  });
+  checks3.push(usageCheck("authCallsRemaining", "Auth calls migrated", authCalls, "supabase.auth.* call(s) still to map — see the auth recipes in REWRITE_NOTES.md."));
+  checks3.push(usageCheck("storageUsage", "Storage migrated", storage, "supabase.storage.* call(s) remain — PocketBase models files as record fields; rewrite by hand."));
+  checks3.push(usageCheck("rpcUsage", "RPC migrated", rpc, "supabase.rpc(...) call(s) remain — move the logic into app code or a PB hook."));
+  checks3.push(usageCheck("realtimeUsage", "Realtime migrated", realtime, "supabase.channel(...) call(s) remain — PB realtime uses pb.collection(c).subscribe(); the event shape differs."));
+  checks3.push(usageCheck("edgeFunctionUsage", "Edge functions migrated", edgeFunctions, "supabase.functions.invoke(...) call(s) remain — host the function elsewhere and fetch it."));
+  checks3.push({
+    id: "pocketbaseDepDeclared",
+    label: "pocketbase dependency declared",
+    status: pocketbaseDepDeclared ? "pass" : anyPbUsage ? "warn" : "n/a",
+    count: 0,
+    detail: pocketbaseDepDeclared ? "package.json depends on pocketbase." : anyPbUsage ? "Your code uses `pb` but package.json has no `pocketbase` dependency — add it." : "No PocketBase client in use yet."
+  });
+  checks3.push(cleanupCheck({ migrationComplete, supabaseDepDeclared, remaining, anyPbUsage }));
+  checks3.push({
+    id: "envWired",
+    label: "POCKETBASE_URL in env",
+    status: pocketbaseUrlEnv ? "pass" : anyPbUsage ? "warn" : "n/a",
+    count: 0,
+    detail: pocketbaseUrlEnv ? "POCKETBASE_URL is set for local dev." : anyPbUsage ? "No POCKETBASE_URL in your env files. Percher injects it automatically in production; add it to .env for local dev." : "No PocketBase env needed yet."
+  });
+  const rls = opts.rlsManualCount ?? null;
+  checks3.push({
+    id: "rlsRulesToWrite",
+    label: "RLS → PB API rules",
+    status: rls === null ? "n/a" : rls === 0 ? "pass" : "warn",
+    count: rls ?? 0,
+    detail: rls === null ? "No migration-preview/MIGRATION_NOTES.md — run migrate-from-supabase to generate the schema + RLS report." : rls === 0 ? "No RLS policies need manual translation." : `${rls} RLS policy/policies still need PB API rules — see migration-preview/MIGRATION_NOTES.md.`
+  });
+  let supabaseEnvNote = "";
+  if (!migrationComplete && !supabaseEnvPresent && supabaseDepDeclared) {
+    supabaseEnvNote = " Note: Supabase calls remain but no SUPABASE_* env was found — make sure those keys are still set.";
+  }
+  if (supabaseEnvNote) {
+    const envCheck = checks3.find((c) => c.id === "envWired");
+    if (envCheck)
+      envCheck.detail += supabaseEnvNote;
+  }
+  const state = deriveState(checks3, migrationComplete, anyPbUsage, remaining);
+  return { checks: checks3, migrationComplete, state };
+}
+function usageCheck(id, label, count, remainingDetail) {
+  return {
+    id,
+    label,
+    status: count === 0 ? "pass" : "warn",
+    count,
+    detail: count === 0 ? "None remaining." : `${count} ${remainingDetail}`
+  };
+}
+function cleanupCheck(args) {
+  const base = { id: "supabaseCleanup", label: "Supabase removed", count: args.remaining };
+  if (args.migrationComplete) {
+    if (args.supabaseDepDeclared) {
+      return {
+        ...base,
+        status: "warn",
+        detail: "Migration looks complete — you can now drop @supabase/supabase-js and the Supabase env keys."
+      };
+    }
+    return { ...base, status: "pass", detail: "Supabase fully removed." };
+  }
+  if (!args.supabaseDepDeclared && args.remaining > 0) {
+    return {
+      ...base,
+      status: "fail",
+      detail: `@supabase/supabase-js was dropped but ${args.remaining} Supabase reference(s) still need it — restore the dependency or finish migrating them.`
+    };
+  }
+  return {
+    ...base,
+    status: "warn",
+    detail: `Hybrid: ${args.remaining} Supabase reference(s) remain (storage/rpc/realtime/edge/un-mapped auth or @supabase imports). Keep @supabase/supabase-js + Supabase env until they're migrated.`
+  };
+}
+function deriveState(checks3, migrationComplete, anyPbUsage, remaining) {
+  if (checks3.some((c) => c.status === "fail"))
+    return "broken";
+  if (migrationComplete)
+    return "complete";
+  if (anyPbUsage)
+    return "hybrid";
+  return remaining > 0 ? "not_started" : "complete";
+}
+function readDeps(source) {
+  let pkg;
+  try {
+    pkg = JSON.parse(source);
+  } catch {
+    return {};
+  }
+  const out = {};
+  for (const section of [
+    "dependencies",
+    "devDependencies",
+    "peerDependencies",
+    "optionalDependencies"
+  ]) {
+    const deps = pkg[section];
+    if (deps && typeof deps === "object" && !Array.isArray(deps)) {
+      Object.assign(out, deps);
+    }
+  }
+  return out;
+}
+var STATUS_GLYPH = {
+  pass: "✓",
+  fail: "✗",
+  warn: "⚠",
+  "n/a": "•"
+};
+function renderMigrationChecklist(checks3) {
+  const lines = [];
+  for (const check2 of checks3) {
+    const glyph = STATUS_GLYPH[check2.status];
+    const countSuffix = check2.count > 0 ? ` (${check2.count})` : "";
+    lines.push(`${glyph} ${check2.label}${countSuffix} — ${check2.detail}`);
+    if (check2.files && check2.files.length > 0) {
+      for (const f of check2.files.slice(0, 10))
+        lines.push(`    - ${f}`);
+      if (check2.files.length > 10)
+        lines.push(`    …and ${check2.files.length - 10} more`);
+    }
+  }
+  return lines.join(`
+`);
+}
+var STATE_SUMMARY = {
+  broken: "Migration is in a broken state — fix the ✗ items before deploying.",
+  hybrid: "Hybrid migration — some calls are on PocketBase, some still on Supabase (both SDKs needed).",
+  not_started: "Supabase is still in use — nothing migrated to PocketBase yet.",
+  complete: "Migration looks complete — no Supabase usage remains."
+};
+async function migrationStatus(ctx, input) {
+  const rootAbs = input.rootDir ? resolve8(ctx.cwd, input.rootDir) : resolve8(ctx.cwd);
+  ctx.status(`Scanning ${relative5(ctx.cwd, rootAbs) || "."} for migration status...`);
+  let files;
+  try {
+    const walk2 = await walkSupabaseProject({ rootDir: rootAbs });
+    files = walk2.files.map((f) => ({
+      relativePath: f.relativePath,
+      kind: f.kind,
+      source: f.source
+    }));
+  } catch (err) {
+    return failure2(rootAbs, err);
+  }
+  const rlsManualCount = await readManualRlsCount(rootAbs);
+  const analysis = analyzeMigration(files, {
+    rlsManualCount,
+    pbIdentifier: input.pbIdentifier,
+    supabaseIdentifiers: input.supabaseIdentifiers
+  });
+  let build;
+  if (input.build === true) {
+    build = await runProjectBuild(rootAbs);
+  }
+  const checklist = renderMigrationChecklist(analysis.checks);
+  const failing = analysis.checks.filter((c) => c.status === "fail");
+  const warning = analysis.checks.filter((c) => c.status === "warn");
+  const buildFailed = build?.ran === true && !build.passed;
+  const allGreen = failing.length === 0 && warning.length === 0 && !buildFailed;
+  const recovery = allGreen ? recoveryNone() : recoveryAsk({
+    prompt: buildPrompt(analysis.state, failing, warning, build),
+    reasonCode: "unknown"
+  });
+  const summary = `${STATE_SUMMARY[analysis.state]}${build ? ` Build: ${build.ran ? build.passed ? "passed" : "FAILED" : "skipped"}.` : ""}`;
+  return {
+    status: "ok",
+    rootDir: rootAbs,
+    state: analysis.state,
+    migrationComplete: analysis.migrationComplete,
+    checks: analysis.checks,
+    ...build ? { build } : {},
+    recovery,
+    summary,
+    checklist
+  };
+}
+function buildPrompt(state, failing, warning, build) {
+  const bits = [];
+  if (failing.length > 0) {
+    bits.push(`fix first: ${failing.map((c) => `${c.label} — ${c.detail}`).join("; ")}`);
+  }
+  if (warning.length > 0) {
+    bits.push(`still to do: ${warning.map((c) => `${c.label} (${c.count || "n/a"})`).join(", ")}`);
+  }
+  if (build?.ran && !build.passed) {
+    bits.push(`the build failed: ${build.detail}`);
+  }
+  const lead = state === "broken" ? "The migration is in a broken state." : "The migration isn't finished.";
+  return `${lead} ${bits.join(". ")}. Work through migration-preview/REWRITE_NOTES.md, then re-run --status.`;
+}
+async function readManualRlsCount(rootAbs) {
+  for (const dir of ["migration-preview", "."]) {
+    try {
+      const notes = await readFile4(join19(rootAbs, dir, "MIGRATION_NOTES.md"), "utf8");
+      const m = notes.match(/\*\*RLS policies:\*\*\s*\d+\s*\((\d+)\s*need manual review\)/);
+      if (m?.[1] !== undefined)
+        return Number.parseInt(m[1], 10);
+      return 0;
+    } catch {}
+  }
+  return null;
+}
+async function runProjectBuild(rootAbs) {
+  let hasBuildScript = false;
+  try {
+    const pkg = JSON.parse(await readFile4(join19(rootAbs, "package.json"), "utf8"));
+    hasBuildScript = typeof pkg.scripts?.build === "string";
+  } catch {
+    return { ran: false, passed: false, detail: "No readable package.json — nothing to build." };
+  }
+  if (!hasBuildScript) {
+    return { ran: false, passed: false, detail: "No `build` script in package.json." };
+  }
+  const pm = await detectPackageManager(rootAbs);
+  const result = await spawnCapture(pm, ["run", "build"], rootAbs, 300000);
+  if (result.timedOut) {
+    return { ran: true, passed: false, detail: `\`${pm} run build\` timed out after 5 min.` };
+  }
+  if (result.spawnError) {
+    return {
+      ran: false,
+      passed: false,
+      detail: `Couldn't run \`${pm} run build\` (${result.spawnError}). Is ${pm} installed?`
+    };
+  }
+  const passed = result.code === 0;
+  const tail = lastLines(result.output, 12);
+  return {
+    ran: true,
+    passed,
+    detail: passed ? `\`${pm} run build\` succeeded.` : `\`${pm} run build\` exited ${result.code}.${tail ? `
+${tail}` : ""}`
+  };
+}
+async function detectPackageManager(rootAbs) {
+  const has = async (name) => {
+    try {
+      await readFile4(join19(rootAbs, name), "utf8");
+      return true;
+    } catch {
+      return false;
+    }
+  };
+  if (await has("bun.lock") || await has("bun.lockb"))
+    return "bun";
+  if (await has("pnpm-lock.yaml"))
+    return "pnpm";
+  if (await has("yarn.lock"))
+    return "yarn";
+  return "npm";
+}
+function spawnCapture(cmd, args, cwd, timeoutMs) {
+  return new Promise((resolve9) => {
+    const child = import_cross_spawn.default(cmd, args, { cwd, stdio: ["ignore", "pipe", "pipe"] });
+    let output = "";
+    const onData = (chunk) => {
+      output += chunk.toString();
+      if (output.length > 64000)
+        output = output.slice(-64000);
+    };
+    child.stdout?.on("data", onData);
+    child.stderr?.on("data", onData);
+    let timedOut = false;
+    const timer = setTimeout(() => {
+      timedOut = true;
+      child.kill("SIGTERM");
+    }, timeoutMs);
+    child.on("error", (err) => {
+      clearTimeout(timer);
+      resolve9({ code: 1, output, timedOut, spawnError: err.message });
+    });
+    child.on("close", (code) => {
+      clearTimeout(timer);
+      resolve9({ code: code ?? 1, output, timedOut });
+    });
+  });
+}
+function lastLines(text, n) {
+  const lines = text.split(/\r?\n/).filter((l) => l.trim().length > 0);
+  return lines.slice(-n).join(`
+`);
+}
+function failure2(rootAbs, err) {
+  const message = err instanceof Error ? err.message : String(err);
+  return {
+    status: "failed",
+    rootDir: rootAbs,
+    state: "broken",
+    migrationComplete: false,
+    checks: [],
+    recovery: recoveryAsk({
+      prompt: `Couldn't scan the project for migration status (${message}). Check the path exists and is readable, then re-run.`,
+      reasonCode: "unknown",
+      retryable: true
+    }),
+    summary: `Migration status scan failed: ${message}`,
+    checklist: "",
+    error: {
+      code: "status_failed",
+      title: "Migration status scan failed",
+      explanation: message,
+      suggestion: "Check the project path exists and is readable, then re-run."
+    }
+  };
+}
+
 // ../core/dist/commands/migrate-supabase-rewrite.js
 var rewriteSupabaseClientInputSchema = exports_external.object({
   rootDir: exports_external.string().optional().describe("Project root to rewrite. Relative paths resolve against ctx.cwd. Defaults to ctx.cwd."),
   outputDir: exports_external.string().optional().describe("Where preview-mode writes the rewritten tree. Ignored when `apply` is true. Defaults to `<root>/migration-preview/rewritten`."),
   apply: exports_external.boolean().optional().describe("When true, overwrite changed files in place (originals backed up to `migration-preview/backup/` first). Default false = preview only."),
   pbIdentifier: exports_external.string().optional().describe("PocketBase client variable name to emit. Defaults to `pb`."),
-  supabaseIdentifiers: exports_external.array(exports_external.string()).optional().describe("Extra Supabase client variable names to recognise (beyond `supabase`).")
+  supabaseIdentifiers: exports_external.array(exports_external.string()).optional().describe("Extra Supabase client variable names to recognise (beyond `supabase`)."),
+  scaffoldClient: exports_external.boolean().optional().describe("Generate a PocketBase client module (src/lib/pocketbase.<ext>) and insert `import { pb }` into rewritten files. Default true when there are rewrites; pass false to opt out. Skips silently if a pb client already exists.")
 });
 async function rewriteSupabaseClient(ctx, input) {
-  const rootAbs = input.rootDir ? resolve7(ctx.cwd, input.rootDir) : resolve7(ctx.cwd);
+  const rootAbs = input.rootDir ? resolve9(ctx.cwd, input.rootDir) : resolve9(ctx.cwd);
   const apply = input.apply === true;
   const mode = apply ? "apply" : "preview";
-  ctx.status(`Scanning ${relative4(ctx.cwd, rootAbs) || "."} for Supabase SDK calls...`);
+  ctx.status(`Scanning ${relative6(ctx.cwd, rootAbs) || "."} for Supabase SDK calls...`);
   let walk2;
   try {
     walk2 = await walkSupabaseProject({
@@ -111998,7 +113001,7 @@ async function rewriteSupabaseClient(ctx, input) {
       supabaseIdentifiers: input.supabaseIdentifiers
     });
   } catch (err) {
-    return failure2(rootAbs, mode, err, `Couldn't scan ${relative4(ctx.cwd, rootAbs) || "."}: check the path exists and is readable, then re-run.`);
+    return failure3(rootAbs, mode, err, `Couldn't scan ${relative6(ctx.cwd, rootAbs) || "."}: check the path exists and is readable, then re-run.`);
   }
   const changed = walk2.files.filter((f) => f.changed);
   const flags = collectManualFlags(walk2);
@@ -112015,15 +113018,32 @@ async function rewriteSupabaseClient(ctx, input) {
       flagsByPattern: {},
       packageJsonChanged: false,
       envFilesChanged: 0,
+      clientModule: null,
       skipped: [],
       recovery: recoveryNone(),
       summary: "No Supabase SDK calls found to rewrite. If you intend to keep Supabase as your backend, " + 'set `[data] mode = "supabase"` in percher.toml instead.'
     };
   }
-  const reportNeeded = flags.length > 0 || walk2.skipped.length > 0;
-  const backupDir = apply && changed.length > 0 ? join18(rootAbs, "migration-preview", "backup") : null;
-  const rewriteTarget = apply ? rootAbs : input.outputDir ? resolve7(ctx.cwd, input.outputDir) : join18(rootAbs, "migration-preview", "rewritten");
+  const hadRewrites = changed.length > 0;
+  const scaffoldEnabled = input.scaffoldClient !== false && hadRewrites;
+  const scaffold = scaffoldEnabled ? scaffoldPocketBaseClient({
+    files: walk2.files,
+    changedRelPaths: changed.map((f) => f.relativePath),
+    pbIdentifier: input.pbIdentifier
+  }) : null;
+  if (scaffold) {
+    for (const [rel, content] of scaffold.importInsertions) {
+      const file2 = walk2.files.find((f) => f.relativePath === rel);
+      if (file2)
+        file2.rewritten = content;
+    }
+    flags.push(...scaffold.flags);
+  }
+  const reportNeeded = hadRewrites || flags.length > 0 || walk2.skipped.length > 0;
+  const backupDir = apply && changed.length > 0 ? join20(rootAbs, "migration-preview", "backup") : null;
+  const rewriteTarget = apply ? rootAbs : input.outputDir ? resolve9(ctx.cwd, input.outputDir) : join20(rootAbs, "migration-preview", "rewritten");
   const filesWritten = [];
+  let clientModuleWritten = null;
   try {
     if (changed.length > 0) {
       if (apply && backupDir) {
@@ -112041,23 +113061,47 @@ async function rewriteSupabaseClient(ctx, input) {
         changedOnly: true
       });
       for (const rel of out.written) {
-        filesWritten.push(relative4(ctx.cwd, join18(rewriteTarget, rel)));
+        filesWritten.push(relative6(ctx.cwd, join20(rewriteTarget, rel)));
+      }
+      if (scaffold?.clientModule) {
+        const moduleAbs = join20(rewriteTarget, scaffold.clientModule.relativePath);
+        await mkdir3(dirname6(moduleAbs), { recursive: true });
+        await writeFile3(moduleAbs, scaffold.clientModule.content, "utf8");
+        clientModuleWritten = relative6(ctx.cwd, moduleAbs).split(sep5).join("/");
+        filesWritten.push(clientModuleWritten);
       }
     }
     if (reportNeeded) {
-      const reportAbs = join18(rootAbs, "migration-preview", "REWRITE_NOTES.md");
-      await mkdir3(dirname5(reportAbs), { recursive: true });
-      await writeFile3(reportAbs, renderReport({ flags, skipped: walk2.skipped }), "utf8");
-      filesWritten.push(relative4(ctx.cwd, reportAbs));
+      const reportAbs = join20(rootAbs, "migration-preview", "REWRITE_NOTES.md");
+      await mkdir3(dirname6(reportAbs), { recursive: true });
+      const analysis = analyzeMigration(walk2.files.map((f) => ({
+        relativePath: f.relativePath,
+        kind: f.kind,
+        source: f.rewritten
+      })), { supabaseIdentifiers: input.supabaseIdentifiers, pbIdentifier: input.pbIdentifier });
+      await writeFile3(reportAbs, renderReport({
+        flags,
+        skipped: walk2.skipped,
+        hadRewrites,
+        migrationComplete: walk2.summary.migrationComplete,
+        supabaseUsageRemaining: walk2.summary.supabaseUsageRemaining,
+        checklist: renderMigrationChecklist(analysis.checks),
+        scaffoldedClient: scaffold?.clientModule?.relativePath ?? null,
+        scaffoldSkippedExisting: scaffold?.skippedReason === "pb_client_exists"
+      }), "utf8");
+      filesWritten.push(relative6(ctx.cwd, reportAbs));
     }
   } catch (err) {
-    return failure2(rootAbs, mode, err, apply ? "The in-place rewrite failed partway. Your originals are safe — restore from `migration-preview/backup/` and re-run." : "Couldn't write the rewritten preview. Check the output directory is writeable and re-run.");
+    return failure3(rootAbs, mode, err, apply ? "The in-place rewrite failed partway. Your originals are safe — restore from `migration-preview/backup/` and re-run." : "Couldn't write the rewritten preview. Check the output directory is writeable and re-run.");
   }
   const flagsByPattern = {};
   for (const flag of flags) {
     flagsByPattern[flag.pattern] = (flagsByPattern[flag.pattern] ?? 0) + 1;
   }
-  const recovery = reportNeeded ? recoveryAsk({ prompt: buildPrompt(flags, walk2.skipped.length), reasonCode: "unknown" }) : recoveryNone();
+  const recovery = reportNeeded ? recoveryAsk({
+    prompt: buildPrompt2(flags, walk2.skipped.length, hadRewrites, clientModuleWritten),
+    reasonCode: "unknown"
+  }) : recoveryNone();
   return {
     status: "ok",
     mode,
@@ -112070,11 +113114,21 @@ async function rewriteSupabaseClient(ctx, input) {
     flagsByPattern,
     packageJsonChanged: walk2.summary.packageJsonChanged,
     envFilesChanged: walk2.summary.envFilesChanged,
+    clientModule: clientModuleWritten,
     skipped: walk2.skipped,
     recovery,
-    summary: renderSummary2({ mode, changed: changed.length, walk: walk2, flagCount: flags.length })
+    summary: renderSummary2({
+      mode,
+      changed: changed.length,
+      walk: walk2,
+      flagCount: flags.length,
+      clientModule: clientModuleWritten
+    })
   };
 }
+function isHybrid(walk2) {
+  return !walk2.summary.migrationComplete && walk2.summary.supabaseUsageRemaining > 0;
+}
 function collectManualFlags(walk2) {
   const out = [];
   for (const file2 of walk2.files) {
@@ -112093,10 +113147,15 @@ function collectManualFlags(walk2) {
   }
   return out;
 }
-function buildPrompt(flags, skippedCount) {
+function buildPrompt2(flags, skippedCount, hadRewrites, clientModule) {
   const rewritten = flags.filter((f) => f.kind === "manual_review").length;
   const untouched = flags.filter((f) => f.kind === "unsupported").length;
   const bits = [];
+  if (clientModule) {
+    bits.push(`review the scaffolded PocketBase client at \`${clientModule}\``);
+  } else if (hadRewrites) {
+    bits.push("create the `pb` PocketBase client the rewritten code now uses (it isn't created for you)");
+  }
   if (rewritten > 0) {
     bits.push(`${rewritten} rewritten to PocketBase but with semantics that differ from Supabase`);
   }
@@ -112106,7 +113165,7 @@ function buildPrompt(flags, skippedCount) {
   if (skippedCount > 0) {
     bits.push(`${skippedCount} file${skippedCount === 1 ? "" : "s"} couldn't be parsed`);
   }
-  return `Some locations need review: ${bits.join("; ")}. Each is listed with its file and line in migration-preview/REWRITE_NOTES.md — check them before deploying.`;
+  return `Before deploying, work through migration-preview/REWRITE_NOTES.md: ${bits.join("; ")}.`;
 }
 function renderSummary2(args) {
   const parts = [];
@@ -112116,12 +113175,18 @@ function renderSummary2(args) {
   } else {
     parts.push("No files needed automatic rewriting.");
   }
+  if (args.clientModule) {
+    parts.push(`Scaffolded a PocketBase client at \`${args.clientModule}\` and imported it.`);
+  }
   if (args.walk.summary.packageJsonChanged) {
     parts.push("`package.json` swapped `@supabase/supabase-js` → `pocketbase`.");
   }
   if (args.walk.summary.envFilesChanged > 0) {
     parts.push(`${args.walk.summary.envFilesChanged} .env file${args.walk.summary.envFilesChanged === 1 ? "" : "s"} stubbed with PocketBase keys.`);
   }
+  if (isHybrid(args.walk)) {
+    parts.push(`Hybrid migration — ${args.walk.summary.supabaseUsageRemaining} Supabase reference${args.walk.summary.supabaseUsageRemaining === 1 ? "" : "s"} still need${args.walk.summary.supabaseUsageRemaining === 1 ? "s" : ""} \`@supabase/supabase-js\`, so the dependency + Supabase env were kept. Drop them once the rest is migrated.`);
+  }
   if (args.flagCount > 0) {
     parts.push(`${args.flagCount} pattern${args.flagCount === 1 ? "" : "s"} need manual review — see \`migration-preview/REWRITE_NOTES.md\`.`);
   }
@@ -112134,8 +113199,51 @@ function renderReport(args) {
   const lines = [];
   lines.push("# Supabase → PocketBase — review notes");
   lines.push("");
-  lines.push("The automated rewrite handled auth and CRUD. The locations below still need a human: some were rewritten but their semantics differ from Supabase, others have no PocketBase equivalent and were left untouched. There are no inline markers — work from this list.");
+  lines.push("The automated rewrite converted the high-confidence auth and CRUD call sites. It does NOT create your PocketBase client, and the items below still need a human. There are no inline markers — work from this list.");
   lines.push("");
+  if (args.checklist) {
+    lines.push("## Status checklist");
+    lines.push("");
+    lines.push("Same scoreboard as `percher migrate-from-supabase --status`:");
+    lines.push("");
+    lines.push("```");
+    lines.push(args.checklist);
+    lines.push("```");
+    lines.push("");
+  }
+  if (!args.migrationComplete && args.supabaseUsageRemaining > 0) {
+    lines.push("## Hybrid state — Supabase kept on purpose");
+    lines.push("");
+    lines.push(`${args.supabaseUsageRemaining} Supabase reference${args.supabaseUsageRemaining === 1 ? "" : "s"} (storage / realtime / rpc / edge functions / un-mapped auth, or files still importing \`@supabase/*\`) ${args.supabaseUsageRemaining === 1 ? "was" : "were"} left in place because ${args.supabaseUsageRemaining === 1 ? "it has" : "they have"} no clean PocketBase equivalent. While they remain, your app needs **both** SDKs:`);
+    lines.push("");
+    lines.push("- `package.json` still depends on `@supabase/supabase-js` (and `pocketbase` once you add it) — **this is correct**, don't remove the Supabase dep yet.");
+    lines.push("- your Supabase env vars (`SUPABASE_*` / `VITE_SUPABASE_*` / …) were **kept** — they're still needed by the calls below.");
+    lines.push("");
+    lines.push("Once you've migrated every item in this report, drop `@supabase/supabase-js` and the Supabase env keys. Run `percher migrate-from-supabase --status` to check what's left.");
+    lines.push("");
+  }
+  if (args.scaffoldedClient) {
+    lines.push("## PocketBase client (scaffolded for you)");
+    lines.push("");
+    lines.push(`A PocketBase client was generated at \`${args.scaffoldedClient}\` and \`import { pb } from "…"\` was inserted into the rewritten files. Review the URL accessor — it's a working default, adjust it to match your framework if needed.`);
+    lines.push("");
+  } else if (args.hadRewrites) {
+    lines.push("## Wire the PocketBase client (required first)");
+    lines.push("");
+    lines.push(args.scaffoldSkippedExisting ? "The rewritten call sites use a `pb` client. Your project already exports one, so no module was generated — make sure each rewritten file imports `pb` from it." : "The rewritten call sites now use a `pb` client this tool did not create — until you add it, they reference an undefined `pb` and the app won't run.");
+    lines.push("");
+    lines.push("1. Replace your Supabase client setup with a PocketBase one, exported under the same name the rewrites use (`pb`):");
+    lines.push("");
+    lines.push("```js");
+    lines.push('import PocketBase from "pocketbase";');
+    lines.push("// Percher injects POCKETBASE_URL / VITE_POCKETBASE_URL at deploy time.");
+    lines.push("export const pb = new PocketBase(import.meta.env.VITE_POCKETBASE_URL ?? process.env.POCKETBASE_URL);");
+    lines.push("```");
+    lines.push("");
+    lines.push("2. Import `pb` in the rewritten files from wherever you export it.");
+    lines.push("3. Remove the leftover `@supabase/*` imports (the `createClient(...)` setup, `@supabase/ssr` helpers, etc.) once nothing else needs them.");
+    lines.push("");
+  }
   const rewritten = args.flags.filter((f) => f.kind === "manual_review");
   const untouched = args.flags.filter((f) => f.kind === "unsupported");
   if (rewritten.length > 0) {
@@ -112152,6 +113260,9 @@ function renderReport(args) {
     lines.push("");
     appendFlagsByFile(lines, untouched);
   }
+  const recipeLines = renderRecipesSection(args.flags.map((f) => f.pattern));
+  for (const line of recipeLines)
+    lines.push(line);
   if (args.skipped.length > 0) {
     lines.push("## Files that couldn't be parsed");
     lines.push("");
@@ -112182,7 +113293,7 @@ function appendFlagsByFile(lines, flags) {
     lines.push("");
   }
 }
-function failure2(rootAbs, mode, err, suggestion) {
+function failure3(rootAbs, mode, err, suggestion) {
   const message = err instanceof Error ? err.message : String(err);
   return {
     status: "failed",
@@ -112196,6 +113307,7 @@ function failure2(rootAbs, mode, err, suggestion) {
     flagsByPattern: {},
     packageJsonChanged: false,
     envFilesChanged: 0,
+    clientModule: null,
     skipped: [],
     recovery: recoveryAsk({
       prompt: `${suggestion} (${message})`,
@@ -112213,7 +113325,7 @@ function failure2(rootAbs, mode, err, suggestion) {
 }
 // ../core/dist/commands/migrate-supabase-schema.js
 import { mkdir as mkdir4, writeFile as writeFile4 } from "node:fs/promises";
-import { isAbsolute as isAbsolute3, join as join19, relative as relative5, resolve as resolve8 } from "node:path";
+import { isAbsolute as isAbsolute4, join as join21, relative as relative7, resolve as resolve10 } from "node:path";
 
 // ../core/dist/commands/migrate-supabase-scripts.js
 function generateDataImportScripts(preview) {
@@ -112661,7 +113773,7 @@ var migrateSupabaseSchemaInputSchema = exports_external.object({
 });
 async function migrateSupabaseSchema(ctx, input) {
   const outputDirAbs = resolveOutputDir(ctx.cwd, input.outputDir);
-  const outputDirRel = relative5(ctx.cwd, outputDirAbs) || ".";
+  const outputDirRel = relative7(ctx.cwd, outputDirAbs) || ".";
   ctx.status(`Inspecting Supabase project ${input.projectRef}...`);
   const inspection = await inspectSupabase(ctx, {
     projectRef: input.projectRef,
@@ -112725,28 +113837,28 @@ async function migrateSupabaseSchema(ctx, input) {
 }
 function resolveOutputDir(cwd, requested) {
   const raw = requested ?? "./migration-preview";
-  return isAbsolute3(raw) ? raw : resolve8(cwd, raw);
+  return isAbsolute4(raw) ? raw : resolve10(cwd, raw);
 }
 async function writePreviewFiles(ctx, outputDir, preview) {
   await mkdir4(outputDir, { recursive: true });
   const schemaJson = renderSchemaJson(preview);
   const notesMd = renderMigrationNotes(preview);
   const scripts = generateDataImportScripts(preview);
-  const schemaPath = join19(outputDir, "pb_schema.json");
-  const notesPath = join19(outputDir, "MIGRATION_NOTES.md");
-  const migratePath = join19(outputDir, "pb_migrate.js");
-  const storagePath = join19(outputDir, "pb_migrate_storage.js");
+  const schemaPath = join21(outputDir, "pb_schema.json");
+  const notesPath = join21(outputDir, "MIGRATION_NOTES.md");
+  const migratePath = join21(outputDir, "pb_migrate.js");
+  const storagePath = join21(outputDir, "pb_migrate_storage.js");
   await writeFile4(schemaPath, schemaJson, "utf8");
   await writeFile4(notesPath, notesMd, "utf8");
   await writeFile4(migratePath, scripts.pbMigrate, "utf8");
   const written = [
-    relative5(ctx.cwd, schemaPath),
-    relative5(ctx.cwd, notesPath),
-    relative5(ctx.cwd, migratePath)
+    relative7(ctx.cwd, schemaPath),
+    relative7(ctx.cwd, notesPath),
+    relative7(ctx.cwd, migratePath)
   ];
   if (scripts.pbMigrateStorage !== null) {
     await writeFile4(storagePath, scripts.pbMigrateStorage, "utf8");
-    written.push(relative5(ctx.cwd, storagePath));
+    written.push(relative7(ctx.cwd, storagePath));
   }
   return written;
 }
@@ -112961,8 +114073,8 @@ async function previewBranchShow(ctx, input = {}) {
   };
 }
 // ../core/dist/commands/publish.js
-import { existsSync as existsSync14 } from "node:fs";
-import { join as join22 } from "node:path";
+import { existsSync as existsSync15 } from "node:fs";
+import { join as join24 } from "node:path";
 
 // ../shared/dist/pow.js
 import { createHash as createHash3 } from "node:crypto";
@@ -113339,7 +114451,7 @@ async function runDeployWithRetry(opts) {
 
 // ../core/dist/commands/env-scan.js
 import { readdirSync as readdirSync3, readFileSync as readFileSync10, statSync as statSync3 } from "node:fs";
-import { join as join20 } from "node:path";
+import { join as join22 } from "node:path";
 var SOURCE_EXTS = new Set([
   ".ts",
   ".tsx",
@@ -113376,7 +114488,7 @@ function scanForMissingBuildEnvRefs(cwd, existingKeys) {
       continue;
     let content;
     try {
-      content = readFileSync10(join20(cwd, rel), "utf8");
+      content = readFileSync10(join22(cwd, rel), "utf8");
     } catch {
       continue;
     }
@@ -113408,7 +114520,7 @@ function* walkDir(dir, base) {
   for (const name of entries) {
     if (SKIP_DIRS.has(name))
       continue;
-    const full = join20(dir, name);
+    const full = join22(dir, name);
     let st;
     try {
       st = statSync3(full);
@@ -113768,19 +114880,19 @@ function titleFromCode(code) {
 }
 
 // ../core/dist/commands/publish-node.js
-import { existsSync as existsSync13, readFileSync as readFileSync11 } from "node:fs";
-import { join as join21 } from "node:path";
+import { existsSync as existsSync14, readFileSync as readFileSync11 } from "node:fs";
+import { join as join23 } from "node:path";
 function resolveNodeVersion(cwd) {
-  const nvmrc = join21(cwd, ".nvmrc");
-  if (existsSync13(nvmrc)) {
+  const nvmrc = join23(cwd, ".nvmrc");
+  if (existsSync14(nvmrc)) {
     try {
       const v = readFileSync11(nvmrc, "utf8").trim();
       if (v)
         return { value: v, source: ".nvmrc" };
     } catch {}
   }
-  const pkgPath = join21(cwd, "package.json");
-  if (!existsSync13(pkgPath))
+  const pkgPath = join23(cwd, "package.json");
+  if (!existsSync14(pkgPath))
     return null;
   try {
     const pkg = JSON.parse(readFileSync11(pkgPath, "utf8"));
@@ -113805,7 +114917,7 @@ var publishInputSchema = exports_external.object({
 var SUSPICIOUS_BYTES = 50 * 1024 * 1024;
 var SUSPICIOUS_FILES = 1e4;
 function tomlPathFor2(cwd) {
-  return join22(cwd, "percher.toml");
+  return join24(cwd, "percher.toml");
 }
 async function buildReplacedResult2(opts) {
   const { ctx, app, deployment, tarball, cwd } = opts;
@@ -114470,8 +115582,8 @@ async function handleAnonymousPublish(ctx, config2, input, tarball) {
   };
 }
 async function loadOrGenerate(ctx) {
-  const tomlPath = join22(ctx.cwd, "percher.toml");
-  if (!existsSync14(tomlPath)) {
+  const tomlPath = join24(ctx.cwd, "percher.toml");
+  if (!existsSync15(tomlPath)) {
     ctx.status("No percher.toml found — detecting framework...");
     await init(ctx);
   }
@@ -114520,8 +115632,8 @@ function emitPreflight(ctx, config2, tarball) {
   }
 }
 // ../core/dist/commands/push.js
-import { existsSync as existsSync15 } from "node:fs";
-import { join as join23 } from "node:path";
+import { existsSync as existsSync16 } from "node:fs";
+import { join as join25 } from "node:path";
 var pushInputSchema = exports_external.object({
   dryRun: exports_external.boolean().optional(),
   force: exports_external.boolean().optional(),
@@ -114532,8 +115644,8 @@ var SUSPICIOUS_BYTES2 = 50 * 1024 * 1024;
 var SUSPICIOUS_FILES2 = 1e4;
 var PLACEHOLDER_PREFIXES = ["add-your-", "your-key-here"];
 async function loadOrGenerate2(ctx) {
-  const tomlPath = join23(ctx.cwd, "percher.toml");
-  if (!existsSync15(tomlPath)) {
+  const tomlPath = join25(ctx.cwd, "percher.toml");
+  if (!existsSync16(tomlPath)) {
     ctx.status("No percher.toml found — detecting framework...");
     const result = await init(ctx);
     const answer = await ctx.prompt(`Generated percher.toml for ${result.detected?.framework ?? result.detected?.runtime ?? "node"}. Continue? [Y/n]`, { default: "y" });
@@ -114644,7 +115756,7 @@ async function push(ctx, input = {}, internals = {}) {
       fileCount: tarball.fileCount,
       recovery: RECOVERY_NONE,
       summary: `Dry run for ${config2.app.name}: ${tarball.fileCount} files, ${(tarball.bytes / 1024).toFixed(1)} KB — no deploy performed.`,
-      configPath: join23(ctx.cwd, "percher.toml"),
+      configPath: join25(ctx.cwd, "percher.toml"),
       bundle: { fileCount: tarball.fileCount, bytes: tarball.bytes }
     };
   }
@@ -114827,7 +115939,7 @@ ${deployment.errorMessage}` : "";
     fileCount: tarball.fileCount,
     recovery: RECOVERY_NONE,
     summary,
-    configPath: join23(ctx.cwd, "percher.toml"),
+    configPath: join25(ctx.cwd, "percher.toml"),
     bundle: { fileCount: tarball.fileCount, bytes: tarball.bytes }
   };
 }
@@ -115156,8 +116268,8 @@ function failureResult(error48) {
   };
 }
 // ../core/dist/commands/rename.js
-import { existsSync as existsSync16, readFileSync as readFileSync12, writeFileSync as writeFileSync8 } from "node:fs";
-import { join as join24 } from "node:path";
+import { existsSync as existsSync17, readFileSync as readFileSync12, writeFileSync as writeFileSync9 } from "node:fs";
+import { join as join26 } from "node:path";
 var renameInputSchema = exports_external.object({
   app: exports_external.string().optional(),
   name: exports_external.string().min(3).max(40)
@@ -115177,8 +116289,8 @@ async function rename2(ctx, input) {
   };
 }
 function updateLocalTomlName(cwd, oldName, newName) {
-  const p = join24(cwd, "percher.toml");
-  if (!existsSync16(p))
+  const p = join26(cwd, "percher.toml");
+  if (!existsSync17(p))
     return false;
   try {
     const src = readFileSync12(p, "utf8");
@@ -115187,25 +116299,25 @@ function updateLocalTomlName(cwd, oldName, newName) {
     const next = src.replace(new RegExp(`(name\\s*=\\s*")${oldName}(")`), `$1${newName}$2`);
     if (next === src || parse5(next).app.name !== newName)
       return false;
-    writeFileSync8(p, next);
+    writeFileSync9(p, next);
     return true;
   } catch {
     return false;
   }
 }
 // ../core/dist/commands/reproduce.js
-import { mkdtempSync, writeFileSync as writeFileSync9 } from "node:fs";
+import { mkdtempSync, writeFileSync as writeFileSync10 } from "node:fs";
 import { tmpdir } from "node:os";
-import { join as join25 } from "node:path";
-var import_cross_spawn = __toESM(require_cross_spawn(), 1);
+import { join as join27 } from "node:path";
+var import_cross_spawn2 = __toESM(require_cross_spawn(), 1);
 function runProcessExit(cmd, args, opts = {}) {
-  return new Promise((resolve9, reject) => {
-    const child = import_cross_spawn.default(cmd, args, {
+  return new Promise((resolve11, reject) => {
+    const child = import_cross_spawn2.default(cmd, args, {
       cwd: opts.cwd,
       stdio: opts.inherit ? "inherit" : "ignore"
     });
     child.on("error", reject);
-    child.on("close", (code) => resolve9(code ?? 1));
+    child.on("close", (code) => resolve11(code ?? 1));
   });
 }
 var reproduceInputSchema = exports_external.object({
@@ -115291,9 +116403,9 @@ async function reproduce(ctx, input) {
     const envMap = await ctx.client.env.list(app.id);
     currentAppEnvKeys = Object.keys(envMap).sort();
   } catch {}
-  const tmpDir = mkdtempSync(join25(tmpdir(), `percher-reproduce-${input.deployId}-`));
-  const tarballPath = join25(tmpDir, "source.tar.gz");
-  writeFileSync9(tarballPath, bytes);
+  const tmpDir = mkdtempSync(join27(tmpdir(), `percher-reproduce-${input.deployId}-`));
+  const tarballPath = join27(tmpDir, "source.tar.gz");
+  writeFileSync10(tarballPath, bytes);
   let extracted = false;
   try {
     extracted = await runProcessExit("tar", ["-xzf", tarballPath, "-C", tmpDir]) === 0;
@@ -115730,7 +116842,6 @@ var PLAN_CATALOG = {
     priceEur: 0,
     limits: {
       apps: 3,
-      deploysPerMonth: 50,
       deploysPerHour: 12,
       memory: "256mb",
       cpu: 0.25,
@@ -115762,7 +116873,6 @@ var PLAN_CATALOG = {
     priceEur: 3,
     limits: {
       apps: 10,
-      deploysPerMonth: 200,
       deploysPerHour: 30,
       memory: "512mb",
       cpu: 0.25,
@@ -115794,7 +116904,6 @@ var PLAN_CATALOG = {
     priceEur: 12,
     limits: {
       apps: 20,
-      deploysPerMonth: 500,
       deploysPerHour: 60,
       memory: "1gb",
       cpu: 0.5,
@@ -115826,7 +116935,6 @@ var PLAN_CATALOG = {
     priceEur: 29,
     limits: {
       apps: 40,
-      deploysPerMonth: "unlimited",
       deploysPerHour: 120,
       memory: "1gb",
       cpu: 1,
@@ -115859,7 +116967,6 @@ var PLAN_CATALOG = {
     hidden: true,
     limits: {
       apps: 1,
-      deploysPerMonth: 20,
       deploysPerHour: 6,
       memory: "128mb",
       cpu: 0.25,
@@ -116551,6 +117658,36 @@ function registerAppsCommands(cli, ctx) {
       await writeLine(ctx, `${import_picocolors4.default.green("✓")} wrote ${file2}`);
     }
   });
+  cli.command("appstore-kit", "Write app-store starter files (PWA manifest, TWA/Capacitor, asset links)").option("--name <name>", "App name (defaults to percher.toml / directory)").option("--url <url>", "App URL (defaults to https://<name>.percher.run)").option("--package <pkg>", "Android package name for assetlinks.json").option("--fingerprint <sha256>", "Signing-cert SHA-256 for assetlinks.json").option("--team-id <id>", "Apple Team ID for apple-app-site-association").option("--bundle-id <id>", "Apple bundle ID for apple-app-site-association").option("--out <dir>", "Output directory (defaults to the current directory)").option("--force", "Overwrite files that already exist").action(async (options) => {
+    const result = await appstoreKit(ctx, {
+      name: options.name,
+      url: options.url,
+      packageName: options.package,
+      fingerprint: options.fingerprint,
+      teamId: options.teamId,
+      bundleId: options.bundleId,
+      outDir: options.out,
+      force: options.force
+    });
+    for (const file2 of result.written) {
+      await writeLine(ctx, `${import_picocolors4.default.green("✓")} wrote ${file2}`);
+    }
+    for (const file2 of result.skipped) {
+      await writeLine(ctx, `${import_picocolors4.default.dim("•")} skipped ${file2} (exists — pass --force to overwrite)`);
+    }
+    await writeLine(ctx, "");
+    await writeLine(ctx, `${import_picocolors4.default.bold("Make it an installable PWA:")} link the manifest from your HTML`);
+    await writeLine(ctx, `  <link rel="manifest" href="/manifest.json">`);
+    await writeLine(ctx, "and register the service worker from your app entry:");
+    await writeLine(ctx, result.swRegistration);
+    await writeLine(ctx, "");
+    await writeLine(ctx, `${import_picocolors4.default.bold("Wrap for Google Play (TWA):")}`);
+    await writeLine(ctx, result.bubblewrapCommand);
+    await writeLine(ctx, "");
+    await writeLine(ctx, `The two ${import_picocolors4.default.dim(".well-known")} files are trust assertions for your origin — add real values`);
+    await writeLine(ctx, `after you sign the apps, then serve them yourself or let Percher serve them from the`);
+    await writeLine(ctx, "App store kit at https://percher.app. Full guide: /docs/app-stores");
+  });
   cli.command("publish", "Publish this project to Percher (recommended deploy command)").option("--force", "Skip size warnings").option("--preview", "Deploy as preview (does not replace the live version)").option("-m, --message <msg>", "Deploy note (visible in deploy history)").option("--dry-run", "Show what would be deployed (file count, bytes) without uploading").option("--no-cache", "Skip image-cache lookup and force a fresh build (use when you suspect cached image is stale)").option("--anonymous", "Publish without an account — a 72h sandbox you can claim later (where enabled)").action(async (options) => {
     const { detectCiBranchMessage: detectCiBranchMessage2 } = await Promise.resolve().then(() => exports_ci_env);
     let messageOverride = options.message;
@@ -116632,8 +117769,8 @@ function registerAppsCommands(cli, ctx) {
             deployId,
             timeoutSeconds: Math.min(Math.ceil(remainingMs / 1000), 30)
           }, { signal: callController.signal }),
-          new Promise((resolve9) => {
-            raceTimer = setTimeout(() => resolve9(null), remainingMs);
+          new Promise((resolve11) => {
+            raceTimer = setTimeout(() => resolve11(null), remainingMs);
           })
         ]);
       } finally {
@@ -117172,7 +118309,7 @@ function registerEnvCommands(cli, ctx) {
     if (action === "set") {
       const { resolveEnvSetInputs: resolveEnvSetInputs2, EnvSetInputError: EnvSetInputError2 } = await Promise.resolve().then(() => (init_env_set_input(), exports_env_set_input));
       const { promptHidden: promptHidden2 } = await Promise.resolve().then(() => (init_prompt_hidden(), exports_prompt_hidden));
-      const { readFile: readFile4 } = await import("node:fs/promises");
+      const { readFile: readFile5 } = await import("node:fs/promises");
       try {
         const values = await resolveEnvSetInputs2({
           args,
@@ -117184,7 +118321,7 @@ function registerEnvCommands(cli, ctx) {
               chunks.push(c);
             return Buffer.concat(chunks).toString("utf8");
           },
-          readFile: async (p) => readFile4(p, "utf8"),
+          readFile: async (p) => readFile5(p, "utf8"),
           promptHidden: promptHidden2
         });
         await envSet(ctx, { app: options.app, values });
@@ -117298,7 +118435,24 @@ function registerGithubCommands(cli, ctx) {
 // src/commands/migrate.ts
 var import_picocolors11 = __toESM(require_picocolors(), 1);
 function registerMigrateCommands(cli, ctx) {
-  cli.command("migrate-from-supabase", "Migrate a Supabase project to PocketBase: schema + data-import script, optionally rewrite SDK calls").option("--project <ref>", "Supabase project reference (the 20-char id from the project URL)").option("--token <token>", "Supabase personal access token (sbp_...). Read from SUPABASE_ACCESS_TOKEN if omitted.").option("--inspect-only", "Only print the schema that would migrate — read-only, no file writes").option("--output-dir <dir>", "Where to write the preview files (default: ./migration-preview/)").option("--rewrite-client", "Also convert your Supabase SDK calls to PocketBase across the project").option("--apply", "With --rewrite-client: overwrite files in place (originals backed up first). Default: preview only.").option("--root <dir>", "Project root to rewrite with --rewrite-client (default: current directory)").option("--json", "Output the structured result as JSON").action(async (options) => {
+  cli.command("migrate-from-supabase", "Migrate a Supabase project to PocketBase: schema + data-import script, optionally rewrite SDK calls").option("--project <ref>", "Supabase project reference (the 20-char id from the project URL)").option("--token <token>", "Supabase personal access token (sbp_...). Read from SUPABASE_ACCESS_TOKEN if omitted.").option("--inspect-only", "Only print the schema that would migrate — read-only, no file writes").option("--output-dir <dir>", "Where to write the preview files (default: ./migration-preview/)").option("--rewrite-client", "Also convert your Supabase SDK calls to PocketBase across the project").option("--apply", "With --rewrite-client: overwrite files in place (originals backed up first). Default: preview only.").option("--root <dir>", "Project root to rewrite with --rewrite-client (default: current directory)").option("--no-scaffold-client", "With --rewrite-client: don't generate a PocketBase client module / insert pb imports (default: scaffold one)").option("--status", "Show a migration scoreboard for the local project — what's still on Supabase vs PocketBase. Local scan, no Supabase token needed.").option("--build", "With --status: also run the project build as a final gate").option("--pb-identifier <name>", "With --status: the PocketBase client identifier to check for (default: pb). Match what the rewrite used.").option("--json", "Output the structured result as JSON").action(async (options) => {
+    if (options.status) {
+      const result2 = await migrationStatus(ctx, {
+        rootDir: options.root,
+        build: options.build === true,
+        pbIdentifier: options.pbIdentifier
+      });
+      if (options.json) {
+        await writeLine(ctx, JSON.stringify(result2, null, 2));
+        if (result2.status === "failed")
+          throw new SilentExitError(1);
+        return;
+      }
+      await renderStatusHuman(ctx, result2);
+      if (result2.status === "failed")
+        throw new SilentExitError(1);
+      return;
+    }
     const projectRef = options.project;
     const token = options.token ?? ctx.env.SUPABASE_ACCESS_TOKEN;
     if (options.apply && !options.rewriteClient) {
@@ -117335,7 +118489,8 @@ function registerMigrateCommands(cli, ctx) {
     if (options.rewriteClient && result.status === "ok") {
       rewrite = await rewriteSupabaseClient(ctx, {
         rootDir: options.root,
-        apply: options.apply === true
+        apply: options.apply === true,
+        scaffoldClient: options.scaffoldClient !== false
       });
     }
     if (options.json) {
@@ -117489,6 +118644,37 @@ ${result.skipped.length} file(s) couldn't be parsed and were skipped — listed
     await writeLine(ctx, import_picocolors11.default.dim(result.changedCount > 0 ? "Preview only — diff ./migration-preview/rewritten/ against your project, then re-run with --rewrite-client --apply to write in place." : "Preview only — no files needed automatic rewriting; work through the manual review above."));
   }
 }
+async function renderStatusHuman(ctx, result) {
+  if (result.status === "failed") {
+    const err = result.error;
+    await writeLine(ctx, `${import_picocolors11.default.red("✗")} ${err?.title ?? "Migration status scan failed"}`);
+    if (err?.explanation)
+      await writeLine(ctx, `  ${err.explanation}`);
+    if (err?.suggestion)
+      await writeLine(ctx, import_picocolors11.default.dim(`  ${err.suggestion}`));
+    return;
+  }
+  await writeLine(ctx, import_picocolors11.default.bold("Migration status"));
+  await writeLine(ctx, "");
+  for (const check2 of result.checks) {
+    const mark = check2.status === "pass" ? import_picocolors11.default.green("✓") : check2.status === "fail" ? import_picocolors11.default.red("✗") : check2.status === "warn" ? import_picocolors11.default.yellow("⚠") : import_picocolors11.default.dim("•");
+    const count = check2.count > 0 ? import_picocolors11.default.dim(` (${check2.count})`) : "";
+    await writeLine(ctx, `  ${mark} ${check2.label}${count} ${import_picocolors11.default.dim(`— ${check2.detail}`)}`);
+    for (const file2 of (check2.files ?? []).slice(0, 10)) {
+      await writeLine(ctx, import_picocolors11.default.dim(`      - ${file2}`));
+    }
+    if ((check2.files?.length ?? 0) > 10) {
+      await writeLine(ctx, import_picocolors11.default.dim(`      …and ${(check2.files?.length ?? 0) - 10} more`));
+    }
+  }
+  if (result.build) {
+    await writeLine(ctx, "");
+    const mark = !result.build.ran ? import_picocolors11.default.dim("•") : result.build.passed ? import_picocolors11.default.green("✓") : import_picocolors11.default.red("✗");
+    await writeLine(ctx, `  ${mark} Build ${import_picocolors11.default.dim(`— ${result.build.detail}`)}`);
+  }
+  await writeLine(ctx, "");
+  await writeLine(ctx, import_picocolors11.default.dim(result.summary));
+}
 
 // src/commands/sharing.ts
 var import_picocolors12 = __toESM(require_picocolors(), 1);
@@ -117828,7 +119014,7 @@ async function renderError(stderr, error48) {
 // package.json
 var package_default = {
   name: "percher",
-  version: "0.5.7",
+  version: "0.5.9",
   description: "CLI for the Percher hosting platform — publish apps with one command",
   type: "module",
   bin: {
@@ -117909,18 +119095,18 @@ async function showTelemetryNotice() {
   if (isDisabled())
     return;
   const { homedir: homedir2 } = await import("node:os");
-  const { existsSync: existsSync17, mkdirSync: mkdirSync6, writeFileSync: writeFileSync10 } = await import("node:fs");
-  const { join: join26 } = await import("node:path");
-  const configDir = join26(homedir2(), ".percher");
-  const markerFile = join26(configDir, ".telemetry-notice-shown");
-  if (existsSync17(markerFile))
+  const { existsSync: existsSync18, mkdirSync: mkdirSync7, writeFileSync: writeFileSync11 } = await import("node:fs");
+  const { join: join28 } = await import("node:path");
+  const configDir = join28(homedir2(), ".percher");
+  const markerFile = join28(configDir, ".telemetry-notice-shown");
+  if (existsSync18(markerFile))
     return;
   console.log("Percher sends non-account-linked usage stats (command, result, error type, OS, Bun version).");
   console.log(`Disable with PERCHER_NO_TELEMETRY=1
 `);
   try {
-    mkdirSync6(configDir, { recursive: true });
-    writeFileSync10(markerFile, new Date().toISOString());
+    mkdirSync7(configDir, { recursive: true });
+    writeFileSync11(markerFile, new Date().toISOString());
   } catch {}
 }