percher 0.5.8 → 0.5.10

package/dist/bin/percher.js

@@ -3604,8 +3604,8 @@ var require_streamx = __commonJS((exports, module) => {
           return this;
         },
         next() {
-          return new Promise(function(resolve6, reject) {
-            promiseResolve = resolve6;
+          return new Promise(function(resolve7, reject) {
+            promiseResolve = resolve7;
             promiseReject = reject;
             const data2 = stream.read();
             if (data2 !== null)
@@ -3642,14 +3642,14 @@ var require_streamx = __commonJS((exports, module) => {
       }
       function destroy(err) {
         stream.destroy(err);
-        return new Promise((resolve6, reject) => {
+        return new Promise((resolve7, reject) => {
           if (stream._duplexState & DESTROYED)
-            return resolve6({ value: undefined, done: true });
+            return resolve7({ value: undefined, done: true });
           stream.once("close", function() {
             if (err)
               reject(err);
             else
-              resolve6({ value: undefined, done: true });
+              resolve7({ value: undefined, done: true });
           });
         });
       }
@@ -3701,8 +3701,8 @@ var require_streamx = __commonJS((exports, module) => {
         return Promise.resolve(true);
       if (state.drains === null)
         state.drains = [];
-      return new Promise((resolve6) => {
-        state.drains.push({ writes, resolve: resolve6 });
+      return new Promise((resolve7) => {
+        state.drains.push({ writes, resolve: resolve7 });
       });
     }
     write(data2) {
@@ -3816,11 +3816,11 @@ var require_streamx = __commonJS((exports, module) => {
     cb(null);
   }
   function pipelinePromise(...streams) {
-    return new Promise((resolve6, reject) => {
+    return new Promise((resolve7, reject) => {
       return pipeline(...streams, (err) => {
         if (err)
           return reject(err);
-        resolve6();
+        resolve7();
       });
     });
   }
@@ -4534,16 +4534,16 @@ var require_extract = __commonJS((exports, module) => {
         entryCallback = null;
         cb(err);
       }
-      function onnext(resolve6, reject) {
+      function onnext(resolve7, reject) {
         if (error48) {
           return reject(error48);
         }
         if (entryStream) {
-          resolve6({ value: entryStream, done: false });
+          resolve7({ value: entryStream, done: false });
           entryStream = null;
           return;
         }
-        promiseResolve = resolve6;
+        promiseResolve = resolve7;
         promiseReject = reject;
         consumeCallback(null);
         if (extract._finished && promiseResolve) {
@@ -4574,14 +4574,14 @@ var require_extract = __commonJS((exports, module) => {
       function destroy(err) {
         extract.destroy(err);
         consumeCallback(err);
-        return new Promise((resolve6, reject) => {
+        return new Promise((resolve7, reject) => {
           if (extract.destroyed)
-            return resolve6({ value: undefined, done: true });
+            return resolve7({ value: undefined, done: true });
           extract.once("close", function() {
             if (err)
               reject(err);
             else
-              resolve6({ value: undefined, done: true });
+              resolve7({ value: undefined, done: true });
           });
         });
       }
@@ -5069,11 +5069,11 @@ var require_tslib = __commonJS((exports, module) => {
     };
     __awaiter = function(thisArg, _arguments, P, generator) {
       function adopt(value) {
-        return value instanceof P ? value : new P(function(resolve6) {
-          resolve6(value);
+        return value instanceof P ? value : new P(function(resolve7) {
+          resolve7(value);
         });
       }
-      return new (P || (P = Promise))(function(resolve6, reject) {
+      return new (P || (P = Promise))(function(resolve7, reject) {
         function fulfilled(value) {
           try {
             step(generator.next(value));
@@ -5089,7 +5089,7 @@ var require_tslib = __commonJS((exports, module) => {
           }
         }
         function step(result) {
-          result.done ? resolve6(result.value) : adopt(result.value).then(fulfilled, rejected);
+          result.done ? resolve7(result.value) : adopt(result.value).then(fulfilled, rejected);
         }
         step((generator = generator.apply(thisArg, _arguments || [])).next());
       });
@@ -5318,14 +5318,14 @@ var require_tslib = __commonJS((exports, module) => {
       }, i);
       function verb(n) {
         i[n] = o[n] && function(v) {
-          return new Promise(function(resolve6, reject) {
-            v = o[n](v), settle(resolve6, reject, v.done, v.value);
+          return new Promise(function(resolve7, reject) {
+            v = o[n](v), settle(resolve7, reject, v.done, v.value);
           });
         };
       }
-      function settle(resolve6, reject, d, v) {
+      function settle(resolve7, reject, d, v) {
         Promise.resolve(v).then(function(v2) {
-          resolve6({ value: v2, done: d });
+          resolve7({ value: v2, done: d });
         }, reject);
       }
     };
@@ -8824,7 +8824,7 @@ var require_util = __commonJS((exports) => {
       }
       path = url2.path;
     }
-    var isAbsolute2 = exports.isAbsolute(path);
+    var isAbsolute3 = exports.isAbsolute(path);
     var parts = path.split(/\/+/);
     for (var part, up = 0, i = parts.length - 1;i >= 0; i--) {
       part = parts[i];
@@ -8844,7 +8844,7 @@ var require_util = __commonJS((exports) => {
     }
     path = parts.join("/");
     if (path === "") {
-      path = isAbsolute2 ? "/" : ".";
+      path = isAbsolute3 ? "/" : ".";
     }
     if (url2) {
       url2.path = path;
@@ -8853,7 +8853,7 @@ var require_util = __commonJS((exports) => {
     return path;
   }
   exports.normalize = normalize2;
-  function join17(aRoot, aPath) {
+  function join18(aRoot, aPath) {
     if (aRoot === "") {
       aRoot = ".";
     }
@@ -8885,11 +8885,11 @@ var require_util = __commonJS((exports) => {
     }
     return joined;
   }
-  exports.join = join17;
+  exports.join = join18;
   exports.isAbsolute = function(aPath) {
     return aPath.charAt(0) === "/" || urlRegexp.test(aPath);
   };
-  function relative3(aRoot, aPath) {
+  function relative4(aRoot, aPath) {
     if (aRoot === "") {
       aRoot = ".";
     }
@@ -8908,7 +8908,7 @@ var require_util = __commonJS((exports) => {
     }
     return Array(level + 1).join("../") + aPath.substr(aRoot.length + 1);
   }
-  exports.relative = relative3;
+  exports.relative = relative4;
   var supportsNullProto = function() {
     var obj = Object.create(null);
     return !("__proto__" in obj);
@@ -9058,7 +9058,7 @@ var require_util = __commonJS((exports) => {
           parsed.path = parsed.path.substring(0, index + 1);
         }
       }
-      sourceURL = join17(urlGenerate(parsed), sourceURL);
+      sourceURL = join18(urlGenerate(parsed), sourceURL);
     }
     return normalize2(sourceURL);
   }
@@ -19563,10 +19563,10 @@ else`, adjustClause(path.call(print, "alternate"), options));
       }
       case "ForStatement": {
         var init2 = path.call(print, "init");
-        var sep3 = init2.length > 1 ? `;
+        var sep4 = init2.length > 1 ? `;
 ` : "; ";
         var forParen = "for (";
-        var indented = (0, lines_1.fromString)(sep3).join([init2, path.call(print, "test"), path.call(print, "update")]).indentTail(forParen.length);
+        var indented = (0, lines_1.fromString)(sep4).join([init2, path.call(print, "test"), path.call(print, "update")]).indentTail(forParen.length);
         var head = (0, lines_1.concat)([forParen, indented, ")"]);
         var clause = adjustClause(path.call(print, "body"), options);
         parts.push(head);
@@ -85326,12 +85326,12 @@ var require_isexe = __commonJS((exports, module) => {
       if (typeof Promise !== "function") {
         throw new TypeError("callback not provided");
       }
-      return new Promise(function(resolve6, reject) {
+      return new Promise(function(resolve7, reject) {
         isexe(path, options || {}, function(er, is) {
           if (er) {
             reject(er);
           } else {
-            resolve6(is);
+            resolve7(is);
           }
         });
       });
@@ -85393,27 +85393,27 @@ var require_which = __commonJS((exports, module) => {
       opt = {};
     const { pathEnv, pathExt, pathExtExe } = getPathInfo(cmd, opt);
     const found = [];
-    const step = (i) => new Promise((resolve6, reject) => {
+    const step = (i) => new Promise((resolve7, reject) => {
       if (i === pathEnv.length)
-        return opt.all && found.length ? resolve6(found) : reject(getNotFoundError(cmd));
+        return opt.all && found.length ? resolve7(found) : reject(getNotFoundError(cmd));
       const ppRaw = pathEnv[i];
       const pathPart = /^".*"$/.test(ppRaw) ? ppRaw.slice(1, -1) : ppRaw;
       const pCmd = path.join(pathPart, cmd);
       const p = !pathPart && /^\.[\\\/]/.test(cmd) ? cmd.slice(0, 2) + pCmd : pCmd;
-      resolve6(subStep(p, i, 0));
+      resolve7(subStep(p, i, 0));
     });
-    const subStep = (p, i, ii) => new Promise((resolve6, reject) => {
+    const subStep = (p, i, ii) => new Promise((resolve7, reject) => {
       if (ii === pathExt.length)
-        return resolve6(step(i + 1));
+        return resolve7(step(i + 1));
       const ext = pathExt[ii];
       isexe(p + ext, { pathExt: pathExtExe }, (er, is) => {
         if (!er && is) {
           if (opt.all)
             found.push(p + ext);
           else
-            return resolve6(p + ext);
+            return resolve7(p + ext);
         }
-        return resolve6(subStep(p, i, ii + 1));
+        return resolve7(subStep(p, i, ii + 1));
       });
     });
     return cb ? step(0).then((res) => cb(null, res), cb) : step(0);
@@ -89840,10 +89840,10 @@ var require_browser = __commonJS((exports) => {
         text = canvas;
         canvas = undefined;
       }
-      return new Promise(function(resolve10, reject) {
+      return new Promise(function(resolve11, reject) {
         try {
           const data2 = QRCode.create(text, opts);
-          resolve10(renderFunc(data2, canvas, opts));
+          resolve11(renderFunc(data2, canvas, opts));
         } catch (e) {
           reject(e);
         }
@@ -89922,11 +89922,11 @@ var require_server = __commonJS((exports) => {
   }
   function render(renderFunc, text, params) {
     if (!params.cb) {
-      return new Promise(function(resolve10, reject) {
+      return new Promise(function(resolve11, reject) {
         try {
           const data2 = QRCode.create(text, params.opts);
           return renderFunc(data2, params.opts, function(err, data3) {
-            return err ? reject(err) : resolve10(data3);
+            return err ? reject(err) : resolve11(data3);
           });
         } catch (e) {
           reject(e);
@@ -90181,7 +90181,7 @@ __export(exports_prompt_hidden, {
 });
 import { stdin, stdout } from "node:process";
 function promptHiddenWithStreams(question, input, output) {
-  return new Promise((resolve10, reject) => {
+  return new Promise((resolve11, reject) => {
     output.write(`${question} `);
     let buf = "";
     let done = false;
@@ -90197,7 +90197,7 @@ function promptHiddenWithStreams(question, input, output) {
           input.removeListener("error", onError);
           output.write(`
 `);
-          resolve10(buf.replace(/\r$/, ""));
+          resolve11(buf.replace(/\r$/, ""));
           return;
         }
         buf += ch;
@@ -90219,7 +90219,7 @@ function promptHiddenWithStreams(question, input, output) {
       input.removeListener("error", onError);
       output.write(`
 `);
-      resolve10(buf.replace(/\r$/, ""));
+      resolve11(buf.replace(/\r$/, ""));
     };
     input.on("data", onData);
     input.on("error", onError);
@@ -90237,7 +90237,7 @@ async function promptHidden(question) {
   ttyStdin.resume();
   ttyStdin.setEncoding("utf8");
   try {
-    return await new Promise((resolve10, reject) => {
+    return await new Promise((resolve11, reject) => {
       stdout.write(`${question} `);
       let buf = "";
       const onData = (key) => {
@@ -90247,7 +90247,7 @@ async function promptHidden(question) {
             ttyStdin.removeListener("data", onData);
             stdout.write(`
 `);
-            resolve10(buf);
+            resolve11(buf);
             return;
           }
           if (ch === "\x03") {
@@ -90873,10 +90873,6 @@ var CAC = class extends EventTarget {
 };
 var cac = (name = "") => new CAC(name);
 
-// ../core/dist/app-name.js
-import { existsSync, readFileSync } from "node:fs";
-import { join } from "node:path";
-
 // ../toml/dist/errors.js
 class PercherTomlError extends Error {
   code;
@@ -104801,6 +104797,8 @@ function serialize(config2) {
   return import_toml2.default.stringify(config2);
 }
 // ../core/dist/app-name.js
+import { existsSync, readFileSync } from "node:fs";
+import { join } from "node:path";
 function readPercherTomlAppName(cwd) {
   const p = join(cwd, "percher.toml");
   if (!existsSync(p))
@@ -105399,6 +105397,181 @@ var appResourcesInputSchema = exports_external.object({
 var appTopologyInputSchema = exports_external.object({
   app: exports_external.string().optional()
 });
+// ../core/dist/commands/appstore-kit.js
+import { existsSync as existsSync3, mkdirSync as mkdirSync3, writeFileSync as writeFileSync3 } from "node:fs";
+import { basename, dirname as dirname3, isAbsolute, join as join5, relative, resolve as resolve3, sep } from "node:path";
+
+// ../core/dist/appstore-artifacts.js
+var BRAND_GREEN = "#2d6a4f";
+var ICON_COLOUR_HEX = {
+  green: BRAND_GREEN,
+  terracotta: "#d0653a",
+  blue: "#4a6fa4",
+  purple: "#6e4dba",
+  olive: "#b8923a"
+};
+function themeColorForToken(token) {
+  if (token && token in ICON_COLOUR_HEX)
+    return ICON_COLOUR_HEX[token] ?? BRAND_GREEN;
+  return BRAND_GREEN;
+}
+function hostFromUrl(url2) {
+  try {
+    return new URL(url2).host;
+  } catch {
+    return url2.replace(/^https?:\/\//, "").replace(/\/.*$/, "");
+  }
+}
+function shortName(name) {
+  const cleaned = name.replace(/[^A-Za-z0-9]/g, "");
+  return (cleaned || "App").slice(0, 12);
+}
+function manifestStarter({ name, themeColorHex }) {
+  return JSON.stringify({
+    name,
+    short_name: shortName(name),
+    start_url: "/",
+    display: "standalone",
+    background_color: "#ffffff",
+    theme_color: themeColorHex
+  }, null, 2);
+}
+function serviceWorkerStarter() {
+  return `// sw.js — minimal offline shell. Drop in at your app root and serve from /sw.js.
+const CACHE = "app-shell-v1";
+const SHELL = ["/"];
+
+self.addEventListener("install", (event) => {
+  event.waitUntil(caches.open(CACHE).then((cache) => cache.addAll(SHELL)));
+  self.skipWaiting();
+});
+
+self.addEventListener("activate", (event) => {
+  event.waitUntil(
+    caches.keys().then((keys) =>
+      Promise.all(keys.filter((k) => k !== CACHE).map((k) => caches.delete(k))),
+    ),
+  );
+  self.clients.claim();
+});
+
+self.addEventListener("fetch", (event) => {
+  if (event.request.method !== "GET") return;
+  event.respondWith(
+    caches.match(event.request).then((cached) => cached || fetch(event.request)),
+  );
+});`;
+}
+function swRegistrationSnippet() {
+  return `if ("serviceWorker" in navigator) {
+  navigator.serviceWorker.register("/sw.js");
+}`;
+}
+function bubblewrapCommand({ url: url2 }) {
+  const host = hostFromUrl(url2);
+  return `# generate the Android project, pointed at your manifest
+npx @bubblewrap/cli init --manifest https://${host}/manifest.json
+npx @bubblewrap/cli build`;
+}
+function capacitorConfig({ name, url: url2 }) {
+  const host = hostFromUrl(url2);
+  return `import type { CapacitorConfig } from "@capacitor/cli";
+const config: CapacitorConfig = {
+  appId: "app.percher.yourapp",
+  appName: ${JSON.stringify(name)},
+  webDir: "dist",
+  server: { url: "https://${host}", cleartext: false },
+};
+export default config;`;
+}
+function assetlinksJson({ packageName, sha256Fingerprint }) {
+  const pkg = packageName.trim() || "app.percher.yourapp";
+  const fp = sha256Fingerprint.trim() || "<your signing cert SHA-256>";
+  return `[{
+  "relation": ["delegate_permission/common.handle_all_urls"],
+  "target": {
+    "namespace": "android_app",
+    "package_name": ${JSON.stringify(pkg)},
+    "sha256_cert_fingerprints": [${JSON.stringify(fp)}]
+  }
+}]`;
+}
+function appleAppSiteAssociation({ teamId, bundleId }) {
+  const team = teamId.trim() || "TEAMID";
+  const bundle = bundleId.trim() || "app.percher.yourapp";
+  return `{
+  "applinks": {
+    "apps": [],
+    "details": [{ "appID": ${JSON.stringify(`${team}.${bundle}`)}, "paths": ["*"] }]
+  }
+}`;
+}
+
+// ../core/dist/commands/appstore-kit.js
+var appstoreKitInputSchema = exports_external.object({
+  name: exports_external.string().optional(),
+  url: exports_external.string().optional(),
+  packageName: exports_external.string().optional(),
+  fingerprint: exports_external.string().optional(),
+  teamId: exports_external.string().optional(),
+  bundleId: exports_external.string().optional(),
+  force: exports_external.boolean().optional(),
+  outDir: exports_external.string().optional()
+});
+async function appstoreKit(ctx, input = {}) {
+  const name = (input.name ?? readPercherTomlAppName(ctx.cwd) ?? basename(ctx.cwd) ?? "app").trim() || "app";
+  const url2 = input.url?.trim() || `https://${name}.percher.run`;
+  const themeHex = themeColorForToken(null);
+  const base = resolve3(ctx.cwd, input.outDir ?? ".");
+  const baseRel = relative(ctx.cwd, base);
+  if (baseRel === ".." || baseRel.startsWith(`..${sep}`) || isAbsolute(baseRel)) {
+    throw new PercherCoreError("Output directory must stay inside the project", {
+      code: "appstore-kit.bad-out-dir",
+      hint: "Pass a path inside the current project (e.g. --out public), not an absolute or parent path."
+    });
+  }
+  const files = [
+    { rel: "manifest.json", content: manifestStarter({ name, themeColorHex: themeHex }) },
+    { rel: "sw.js", content: serviceWorkerStarter() },
+    { rel: "capacitor.config.ts", content: capacitorConfig({ name, url: url2 }) },
+    {
+      rel: ".well-known/assetlinks.json",
+      content: assetlinksJson({
+        packageName: input.packageName ?? "",
+        sha256Fingerprint: input.fingerprint ?? ""
+      })
+    },
+    {
+      rel: ".well-known/apple-app-site-association",
+      content: appleAppSiteAssociation({
+        teamId: input.teamId ?? "",
+        bundleId: input.bundleId ?? ""
+      })
+    }
+  ];
+  const written = [];
+  const skipped = [];
+  for (const f of files) {
+    const abs = join5(base, ...f.rel.split("/"));
+    const display = relative(ctx.cwd, abs).split(sep).join("/");
+    if (existsSync3(abs) && !input.force) {
+      skipped.push(display);
+      continue;
+    }
+    mkdirSync3(dirname3(abs), { recursive: true });
+    writeFileSync3(abs, `${f.content}
+`, "utf8");
+    written.push(display);
+  }
+  return {
+    appName: name,
+    appUrl: url2,
+    written,
+    skipped,
+    bubblewrapCommand: bubblewrapCommand({ url: url2 }),
+    swRegistration: swRegistrationSnippet()
+  };
+}
 // ../core/dist/commands/billing.js
 var billingUpgradeInputSchema = exports_external.object({
   plan: exports_external.enum(["starter", "maker", "pro"])
@@ -105422,22 +105595,22 @@ async function cacheReset(ctx, input = {}) {
 var capabilitiesInputSchema = exports_external.object({});
 // ../client/dist/abortable-sleep.js
 function abortableSleep(ms, signal) {
-  return new Promise((resolve3) => {
+  return new Promise((resolve4) => {
     if (!signal) {
-      setTimeout(resolve3, ms);
+      setTimeout(resolve4, ms);
       return;
     }
     if (signal.aborted) {
-      resolve3();
+      resolve4();
       return;
     }
     const onAbort = () => {
       clearTimeout(t);
-      resolve3();
+      resolve4();
     };
     const t = setTimeout(() => {
       signal.removeEventListener("abort", onAbort);
-      resolve3();
+      resolve4();
     }, ms);
     signal.addEventListener("abort", onAbort, { once: true });
   });
@@ -105456,9 +105629,9 @@ function isAutoForwardedBuildKey(name) {
   return AUTO_FORWARD_PREFIXES.some((p) => name.startsWith(p));
 }
 // ../client/dist/config.js
-import { existsSync as existsSync3, mkdirSync as mkdirSync3, readFileSync as readFileSync4, renameSync, writeFileSync as writeFileSync3 } from "node:fs";
+import { existsSync as existsSync4, mkdirSync as mkdirSync4, readFileSync as readFileSync4, renameSync, writeFileSync as writeFileSync4 } from "node:fs";
 import { homedir } from "node:os";
-import { dirname as dirname3, join as join5 } from "node:path";
+import { dirname as dirname4, join as join6 } from "node:path";
 var DEFAULT_API_URL = "https://api.percher.run";
 function home() {
   return process.env.HOME ?? process.env.USERPROFILE ?? homedir();
@@ -105466,12 +105639,12 @@ function home() {
 function configPath() {
   const xdg = process.env.XDG_CONFIG_HOME;
   if (xdg)
-    return join5(xdg, "percher", "config.json");
-  return join5(home(), ".percher", "config.json");
+    return join6(xdg, "percher", "config.json");
+  return join6(home(), ".percher", "config.json");
 }
 function readFile2() {
   const p = configPath();
-  if (!existsSync3(p))
+  if (!existsSync4(p))
     return {};
   try {
     const parsed = JSON.parse(readFileSync4(p, "utf8"));
@@ -105499,11 +105672,11 @@ function readAnonClaims() {
 }
 function saveConfig(partial2) {
   const p = configPath();
-  mkdirSync3(dirname3(p), { recursive: true });
+  mkdirSync4(dirname4(p), { recursive: true });
   const current = readFile2();
   const merged = { ...current, ...partial2 };
   const tmp = `${p}.tmp-${process.pid}-${Date.now()}`;
-  writeFileSync3(tmp, JSON.stringify(merged, null, 2), "utf8");
+  writeFileSync4(tmp, JSON.stringify(merged, null, 2), "utf8");
   renameSync(tmp, p);
 }
 function getAnonClaim(app) {
@@ -105907,6 +106080,15 @@ class AppsResource {
   unsetPreviewBranch(appRef) {
     return this.http.deleteJson(`/apps/${encodeURIComponent(appRef)}/preview-branch`);
   }
+  listWellKnown(appRef) {
+    return this.http.get(`/apps/${encodeURIComponent(appRef)}/well-known`);
+  }
+  setWellKnown(appRef, kind, content) {
+    return this.http.put(`/apps/${encodeURIComponent(appRef)}/well-known/${encodeURIComponent(kind)}`, { content });
+  }
+  clearWellKnown(appRef, kind) {
+    return this.http.deleteJson(`/apps/${encodeURIComponent(appRef)}/well-known/${encodeURIComponent(kind)}`);
+  }
   setDescription(appRef, description) {
     return this.http.patch(`/apps/${encodeURIComponent(appRef)}/description`, {
       description
@@ -106582,17 +106764,17 @@ async function claim(ctx, input = {}) {
   };
 }
 // ../core/dist/commands/create.js
-import { join as join7, resolve as resolve4 } from "node:path";
+import { join as join8, resolve as resolve5 } from "node:path";
 
 // ../core/dist/templates.js
-import { existsSync as existsSync4, mkdirSync as mkdirSync4, readdirSync, readFileSync as readFileSync5, statSync, writeFileSync as writeFileSync4 } from "node:fs";
-import { basename, join as join6, normalize, relative, resolve as resolve3 } from "node:path";
+import { existsSync as existsSync5, mkdirSync as mkdirSync5, readdirSync, readFileSync as readFileSync5, statSync, writeFileSync as writeFileSync5 } from "node:fs";
+import { basename as basename2, join as join7, normalize, relative as relative2, resolve as resolve4 } from "node:path";
 var __dirname = "C:\\dev\\Percher\\packages\\core\\dist";
-var TEMPLATES_DIR = resolve3(import.meta.dirname ?? __dirname, "../templates");
+var TEMPLATES_DIR = resolve4(import.meta.dirname ?? __dirname, "../templates");
 var PLACEHOLDER = "__APP_NAME__";
 function listTemplates() {
   return readdirSync(TEMPLATES_DIR).filter((name) => {
-    const full = join6(TEMPLATES_DIR, name);
+    const full = join7(TEMPLATES_DIR, name);
     return statSync(full).isDirectory();
   });
 }
@@ -106602,36 +106784,36 @@ function scaffoldTemplate(input) {
   if (!available.includes(template)) {
     throw new Error(`Unknown template "${template}". Available: ${available.join(", ")}`);
   }
-  const absTarget = resolve3(targetDir);
-  if (existsSync4(absTarget)) {
+  const absTarget = resolve4(targetDir);
+  if (existsSync5(absTarget)) {
     const entries = readdirSync(absTarget);
     if (entries.length > 0 && !force) {
       throw new Error(`Target directory "${absTarget}" is not empty. Use --force to overwrite.`);
     }
   }
-  const srcDir = join6(TEMPLATES_DIR, template);
+  const srcDir = join7(TEMPLATES_DIR, template);
   const files = [];
   function copyDir(src, dest) {
-    mkdirSync4(dest, { recursive: true });
+    mkdirSync5(dest, { recursive: true });
     for (const entry of readdirSync(src)) {
-      const srcPath = join6(src, entry);
-      const destPath = join6(dest, entry);
-      const rel = relative(absTarget, normalize(destPath));
-      if (rel.startsWith("..") || resolve3(destPath) === resolve3(absTarget, "..", basename(absTarget))) {
+      const srcPath = join7(src, entry);
+      const destPath = join7(dest, entry);
+      const rel = relative2(absTarget, normalize(destPath));
+      if (rel.startsWith("..") || resolve4(destPath) === resolve4(absTarget, "..", basename2(absTarget))) {
         throw new Error(`Template contains path traversal: ${entry}`);
       }
       if (statSync(srcPath).isDirectory()) {
         copyDir(srcPath, destPath);
       } else {
-        if (existsSync4(destPath) && !force) {
+        if (existsSync5(destPath) && !force) {
           continue;
         }
         let content = readFileSync5(srcPath, "utf-8");
         content = content.replaceAll(PLACEHOLDER, appName);
         content = content.replace(/\r\n/g, `
 `);
-        writeFileSync4(destPath, content, "utf-8");
-        files.push(relative(absTarget, destPath).replace(/\\/g, "/"));
+        writeFileSync5(destPath, content, "utf-8");
+        files.push(relative2(absTarget, destPath).replace(/\\/g, "/"));
       }
     }
   }
@@ -106656,14 +106838,14 @@ async function create(ctx, input) {
   }
   let targetDir;
   if (input.directory) {
-    targetDir = resolve4(ctx.cwd, input.directory);
-    if (!targetDir.startsWith(resolve4(ctx.cwd))) {
+    targetDir = resolve5(ctx.cwd, input.directory);
+    if (!targetDir.startsWith(resolve5(ctx.cwd))) {
       throw new PercherCoreError("Directory must be within the current workspace", {
         code: "create.failed"
       });
     }
   } else {
-    targetDir = join7(ctx.cwd, input.name);
+    targetDir = join8(ctx.cwd, input.name);
   }
   try {
     const result = scaffoldTemplate({
@@ -106759,7 +106941,7 @@ async function data(ctx, input = {}) {
   };
 }
 // ../core/dist/commands/data-export.js
-import { resolve as resolve5 } from "node:path";
+import { resolve as resolve6 } from "node:path";
 var dataExportInputSchema = exports_external.object({
   app: exports_external.string().optional().describe("App name or id. Defaults to the app in percher.toml."),
   out: exports_external.string().optional().describe("Output file path. Defaults to ./<app>-pb-<timestamp>.tar.gz in the current directory.")
@@ -106775,7 +106957,7 @@ async function dataExport(ctx, input) {
   ctx.status?.(`Exporting ${appName} data...`);
   const stamp = new Date().toISOString().replace(/[:.]/g, "-").slice(0, 19);
   const fileName = input.out ?? `${appName}-pb-${stamp}.tar.gz`;
-  const path = resolve5(ctx.cwd, fileName);
+  const path = resolve6(ctx.cwd, fileName);
   const res = await ctx.client.apps.streamDataExport(appName);
   const bytes = await writeResponseToFile(res, path);
   return {
@@ -106871,14 +107053,14 @@ async function deploysInspect(ctx, input) {
   return { deploy, buildLog };
 }
 // ../core/dist/commands/dev.js
-import { existsSync as existsSync7 } from "node:fs";
-import { join as join10 } from "node:path";
+import { existsSync as existsSync8 } from "node:fs";
+import { join as join11 } from "node:path";
 
 // ../core/dist/tarball.js
 var import_ignore = __toESM(require_ignore(), 1);
 import { createHash as createHash2 } from "node:crypto";
-import { existsSync as existsSync5, readdirSync as readdirSync2, readFileSync as readFileSync6, statSync as statSync2 } from "node:fs";
-import { join as join8, relative as relative2, sep } from "node:path";
+import { existsSync as existsSync6, readdirSync as readdirSync2, readFileSync as readFileSync6, statSync as statSync2 } from "node:fs";
+import { join as join9, relative as relative3, sep as sep2 } from "node:path";
 import { Readable } from "node:stream";
 import { createGzip } from "node:zlib";
 
@@ -106904,8 +107086,8 @@ var DEFAULT_IGNORE = [
 function* walk(dir, baseDir, ig) {
   const entries = readdirSync2(dir);
   for (const name of entries) {
-    const full = join8(dir, name);
-    const rel = relative2(baseDir, full).split(sep).join("/");
+    const full = join9(dir, name);
+    const rel = relative3(baseDir, full).split(sep2).join("/");
     if (ig.ignores(rel))
       continue;
     const stats = statSync2(full);
@@ -106921,15 +107103,15 @@ function* walk(dir, baseDir, ig) {
 async function createTarball(options) {
   const ig = import_ignore.default();
   ig.add(DEFAULT_IGNORE);
-  const gitignorePath = join8(options.cwd, ".gitignore");
-  if (existsSync5(gitignorePath)) {
+  const gitignorePath = join9(options.cwd, ".gitignore");
+  if (existsSync6(gitignorePath)) {
     ig.add(readFileSync6(gitignorePath, "utf8"));
   }
   if (options.extraIgnore)
     ig.add(options.extraIgnore);
   const fileBuffers = [];
   for (const rel of walk(options.cwd, options.cwd, ig)) {
-    const data2 = readFileSync6(join8(options.cwd, rel));
+    const data2 = readFileSync6(join9(options.cwd, rel));
     fileBuffers.push({ path: rel, size: data2.length, data: data2 });
   }
   fileBuffers.sort((a, b) => a.path < b.path ? -1 : a.path > b.path ? 1 : 0);
@@ -106948,8 +107130,8 @@ async function createTarball(options) {
   const pack = $pack();
   (async () => {
     for (const file2 of fileBuffers) {
-      await new Promise((resolve6, reject) => {
-        pack.entry({ name: file2.path, size: file2.data.length }, file2.data, (err) => err ? reject(err) : resolve6());
+      await new Promise((resolve7, reject) => {
+        pack.entry({ name: file2.path, size: file2.data.length }, file2.data, (err) => err ? reject(err) : resolve7());
       });
     }
     pack.finalize();
@@ -106969,8 +107151,8 @@ async function createTarball(options) {
 
 // ../core/dist/watcher.js
 var import_ignore2 = __toESM(require_ignore(), 1);
-import { existsSync as existsSync6, readFileSync as readFileSync7, watch } from "node:fs";
-import { join as join9, sep as sep2 } from "node:path";
+import { existsSync as existsSync7, readFileSync as readFileSync7, watch } from "node:fs";
+import { join as join10, sep as sep3 } from "node:path";
 var DEFAULT_IGNORE2 = [
   "node_modules",
   ".git",
@@ -106990,8 +107172,8 @@ function createWatcher(options) {
   const debounceMs = options.debounceMs ?? 500;
   const ig = import_ignore2.default();
   ig.add(DEFAULT_IGNORE2);
-  const gitignorePath = join9(options.cwd, ".gitignore");
-  if (existsSync6(gitignorePath)) {
+  const gitignorePath = join10(options.cwd, ".gitignore");
+  if (existsSync7(gitignorePath)) {
     ig.add(readFileSync7(gitignorePath, "utf8"));
   }
   if (options.extraIgnore)
@@ -107001,7 +107183,7 @@ function createWatcher(options) {
   const fsWatcher = watch(options.cwd, { recursive: true }, (_event, filename) => {
     if (!filename)
       return;
-    const rel = filename.split(sep2).join("/");
+    const rel = filename.split(sep3).join("/");
     if (ig.ignores(rel))
       return;
     pending.add(rel);
@@ -107030,8 +107212,8 @@ var devInputSchema = exports_external.object({
   app: exports_external.string().optional()
 });
 async function loadConfig2(ctx, appOverride) {
-  const tomlPath = join10(ctx.cwd, "percher.toml");
-  if (!existsSync7(tomlPath)) {
+  const tomlPath = join11(ctx.cwd, "percher.toml");
+  if (!existsSync8(tomlPath)) {
     throw new PercherCoreError("No percher.toml found. Run: percher init", {
       code: "dev.no-app",
       hint: "Create a percher.toml first with `percher init`."
@@ -107185,12 +107367,12 @@ async function dev(ctx, input, callbacks) {
     }
   });
   try {
-    await new Promise((resolve6) => {
+    await new Promise((resolve7) => {
       if (callbacks.signal.aborted) {
-        resolve6();
+        resolve7();
         return;
       }
-      callbacks.signal.addEventListener("abort", () => resolve6(), { once: true });
+      callbacks.signal.addEventListener("abort", () => resolve7(), { once: true });
     });
   } finally {
     logStream.ctrl?.abort();
@@ -107225,8 +107407,8 @@ async function diff(ctx, input = {}) {
   });
 }
 // ../core/dist/commands/doctor.js
-import { existsSync as existsSync8 } from "node:fs";
-import { join as join12 } from "node:path";
+import { existsSync as existsSync9 } from "node:fs";
+import { join as join13 } from "node:path";
 
 // ../core/dist/error-classifier.js
 function extractEnvVarsFromLog(combined) {
@@ -107771,7 +107953,7 @@ function recoveryFromErrorClass(errorClass, failure = {}) {
 }
 
 // ../core/dist/commands/publish-failure.js
-import { join as join11 } from "node:path";
+import { join as join12 } from "node:path";
 
 // ../core/dist/structured-error-codes.js
 var MAPPINGS = {
@@ -107849,7 +108031,7 @@ function trimMessage(raw) {
 
 // ../core/dist/commands/publish-failure.js
 function tomlPathFor(cwd) {
-  return join11(cwd, "percher.toml");
+  return join12(cwd, "percher.toml");
 }
 async function buildFailureError(ctx, app, deployment, signal) {
   let buildLogTail;
@@ -108192,8 +108374,8 @@ async function doctor(ctx, input = {}) {
     });
     return summarize(checks3, { appProvided: !!input.app });
   }
-  const tomlPath = join12(ctx.cwd, "percher.toml");
-  const tomlExists = existsSync8(tomlPath);
+  const tomlPath = join13(ctx.cwd, "percher.toml");
+  const tomlExists = existsSync9(tomlPath);
   let tomlValid = false;
   if (!tomlExists) {
     checks3.push({
@@ -108973,7 +109155,7 @@ async function envList(ctx, input = {}) {
 import { randomUUID } from "node:crypto";
 import { createWriteStream } from "node:fs";
 import { rename, unlink } from "node:fs/promises";
-import { isAbsolute, resolve as resolvePath } from "node:path";
+import { isAbsolute as isAbsolute2, resolve as resolvePath } from "node:path";
 var exportInputSchema = exports_external.object({
   app: exports_external.string().optional(),
   out: exports_external.string().optional(),
@@ -108997,7 +109179,7 @@ async function streamToFile(outPath, source) {
   const tmpPath = `${outPath}.part-${randomUUID()}`;
   const out = createWriteStream(tmpPath);
   const reader = source.getReader();
-  const closed = new Promise((resolve6) => out.once("close", () => resolve6()));
+  const closed = new Promise((resolve7) => out.once("close", () => resolve7()));
   let onWriteError;
   const writeFailed = new Promise((_, reject) => {
     onWriteError = reject;
@@ -109014,14 +109196,14 @@ async function streamToFile(outPath, source) {
         bytes += value.byteLength;
         if (!out.write(value)) {
           await Promise.race([
-            new Promise((resolve6) => out.once("drain", resolve6)),
+            new Promise((resolve7) => out.once("drain", resolve7)),
             writeFailed
           ]);
         }
       }
     }
-    await new Promise((resolve6, reject) => {
-      out.end((err) => err ? reject(err) : resolve6());
+    await new Promise((resolve7, reject) => {
+      out.end((err) => err ? reject(err) : resolve7());
     });
     await closed;
   } catch (err) {
@@ -109039,7 +109221,7 @@ async function streamToFile(outPath, source) {
   return { bytes };
 }
 function resolveOutPath(ctxCwd, filename) {
-  if (isAbsolute(filename))
+  if (isAbsolute2(filename))
     return filename;
   return resolvePath(ctxCwd, filename);
 }
@@ -109100,8 +109282,8 @@ var forgejoSetupWebhookInputSchema = exports_external.object({
   app: exports_external.string().optional().describe("App name (overrides percher.toml)")
 });
 // ../core/dist/commands/generate.js
-import { existsSync as existsSync9, mkdirSync as mkdirSync5, writeFileSync as writeFileSync5 } from "node:fs";
-import { join as join13 } from "node:path";
+import { existsSync as existsSync10, mkdirSync as mkdirSync6, writeFileSync as writeFileSync6 } from "node:fs";
+import { join as join14 } from "node:path";
 var generateInputSchema = exports_external.object({
   cwd: exports_external.string().optional()
 });
@@ -109187,8 +109369,8 @@ function generateTypeScript(config2) {
 }
 async function generate(ctx, input = {}) {
   const cwd = input.cwd ?? ctx.cwd;
-  const tomlPath = join13(cwd, "percher.toml");
-  if (!existsSync9(tomlPath)) {
+  const tomlPath = join14(cwd, "percher.toml");
+  if (!existsSync10(tomlPath)) {
     throw new PercherCoreError("No percher.toml found", {
       code: "dev.no-app",
       hint: "Run percher init first."
@@ -109197,14 +109379,14 @@ async function generate(ctx, input = {}) {
   const config2 = await parseFile(tomlPath);
   const files = [];
   const envExample = generateEnvExample(config2);
-  writeFileSync5(join13(cwd, ".env.example"), envExample);
+  writeFileSync6(join14(cwd, ".env.example"), envExample);
   files.push(".env.example");
   const tsTypes = generateTypeScript(config2);
-  writeFileSync5(join13(cwd, "percher.generated.d.ts"), tsTypes);
+  writeFileSync6(join14(cwd, "percher.generated.d.ts"), tsTypes);
   files.push("percher.generated.d.ts");
   const agentInstructions = generateAgentInstructions(config2);
-  mkdirSync5(join13(cwd, ".percher"), { recursive: true });
-  writeFileSync5(join13(cwd, ".percher", "agent-instructions.md"), agentInstructions);
+  mkdirSync6(join14(cwd, ".percher"), { recursive: true });
+  writeFileSync6(join14(cwd, ".percher", "agent-instructions.md"), agentInstructions);
   files.push(".percher/agent-instructions.md");
   return { files };
 }
@@ -109353,8 +109535,8 @@ async function githubSetupWebhook(ctx, input) {
   };
 }
 // ../core/dist/commands/import-project.js
-import { existsSync as existsSync10, readFileSync as readFileSync8, writeFileSync as writeFileSync6 } from "node:fs";
-import { join as join14 } from "node:path";
+import { existsSync as existsSync11, readFileSync as readFileSync8, writeFileSync as writeFileSync7 } from "node:fs";
+import { join as join15 } from "node:path";
 
 // ../core/dist/static-docker.js
 var STATIC_DOCKER_PORT = 8080;
@@ -109382,7 +109564,8 @@ FROM caddy:2-alpine AS caddy-source
 FROM alpine:3.21
 COPY --from=caddy-source /usr/bin/caddy /usr/bin/caddy
 RUN apk add --no-cache libcap \\
- && setcap -r /usr/bin/caddy \\
+ && (setcap -r /usr/bin/caddy 2>/dev/null || true) \\
+ && test -z "$(getcap /usr/bin/caddy)" \\
  && apk del libcap \\
  && rm -rf /var/cache/apk/*
 COPY Caddyfile /etc/caddy/Caddyfile
@@ -109415,9 +109598,9 @@ var importInputSchema = exports_external.object({
   app: exports_external.string().optional().describe("App name to import into")
 });
 function detectProvider(cwd) {
-  if (existsSync10(join14(cwd, "vercel.json")))
+  if (existsSync11(join15(cwd, "vercel.json")))
     return "vercel";
-  if (existsSync10(join14(cwd, "netlify.toml")))
+  if (existsSync11(join15(cwd, "netlify.toml")))
     return "netlify";
   return null;
 }
@@ -109435,7 +109618,7 @@ function mapVercelFramework(framework) {
   return map2[framework ?? ""] ?? { runtime: "node" };
 }
 function parseVercelJson(cwd) {
-  const raw = readFileSync8(join14(cwd, "vercel.json"), "utf-8");
+  const raw = readFileSync8(join15(cwd, "vercel.json"), "utf-8");
   const config2 = JSON.parse(raw);
   const warnings = [];
   const envVars = [];
@@ -109489,12 +109672,12 @@ health = "/api/health"
   return { toml, warnings, envVars, staticBuild };
 }
 function parseNetlifyToml(cwd) {
-  const raw = readFileSync8(join14(cwd, "netlify.toml"), "utf-8");
+  const raw = readFileSync8(join15(cwd, "netlify.toml"), "utf-8");
   const warnings = [];
   const envVars = [];
   const buildCommand = raw.match(/command\s*=\s*"([^"]+)"/)?.[1] ?? "bun run build";
   const publishDir = raw.match(/publish\s*=\s*"([^"]+)"/)?.[1] ?? "dist";
-  const hasPackageJson = existsSync10(join14(cwd, "package.json"));
+  const hasPackageJson = existsSync11(join15(cwd, "package.json"));
   const looksLikeStaticOutput = publishDir === "dist" || publishDir === "build" || publishDir === "public";
   let toml = `[app]
 name = "imported-app"
@@ -109565,11 +109748,11 @@ async function importProject(ctx, input = {}) {
       hint: "Supported providers: vercel, netlify"
     });
   }
-  const tomlPath = join14(ctx.cwd, "percher.toml");
-  if (existsSync10(tomlPath)) {
+  const tomlPath = join15(ctx.cwd, "percher.toml");
+  if (existsSync11(tomlPath)) {
     result.warnings.unshift("percher.toml already exists — overwriting with imported config");
   }
-  writeFileSync6(tomlPath, result.toml);
+  writeFileSync7(tomlPath, result.toml);
   const scaffoldedFiles = [];
   if (result.staticBuild) {
     const targets = [
@@ -109583,12 +109766,12 @@ async function importProject(ctx, input = {}) {
       }
     ];
     for (const { name, content } of targets) {
-      const target = join14(ctx.cwd, name);
-      if (existsSync10(target)) {
+      const target = join15(ctx.cwd, name);
+      if (existsSync11(target)) {
         result.warnings.push(`${name} already exists — left untouched. The imported config expects a multi-stage static build; merge by hand if needed.`);
         continue;
       }
-      writeFileSync6(target, content, "utf-8");
+      writeFileSync7(target, content, "utf-8");
       scaffoldedFiles.push(name);
     }
   }
@@ -109601,14 +109784,14 @@ async function importProject(ctx, input = {}) {
   };
 }
 // ../core/dist/commands/init.js
-import { existsSync as existsSync12, writeFileSync as writeFileSync7 } from "node:fs";
-import { basename as basename2, join as join16 } from "node:path";
+import { existsSync as existsSync13, writeFileSync as writeFileSync8 } from "node:fs";
+import { basename as basename3, join as join17 } from "node:path";
 
 // ../core/dist/detect.js
-import { existsSync as existsSync11, readFileSync as readFileSync9 } from "node:fs";
-import { join as join15 } from "node:path";
+import { existsSync as existsSync12, readFileSync as readFileSync9 } from "node:fs";
+import { join as join16 } from "node:path";
 function exists(dir, ...names) {
-  return names.some((n) => existsSync11(join15(dir, n)));
+  return names.some((n) => existsSync12(join16(dir, n)));
 }
 function readJson(path) {
   try {
@@ -109637,8 +109820,8 @@ function detectDataMode(pkg, cwd) {
   return { mode: "none" };
 }
 async function detectFramework(cwd) {
-  const pkgPath = join15(cwd, "package.json");
-  const pkg = existsSync11(pkgPath) ? readJson(pkgPath) : null;
+  const pkgPath = join16(cwd, "package.json");
+  const pkg = existsSync12(pkgPath) ? readJson(pkgPath) : null;
   if (exists(cwd, "Dockerfile")) {
     return {
       runtime: "docker",
@@ -109740,7 +109923,7 @@ async function detectFramework(cwd) {
   }
   const hasPython = exists(cwd, "requirements.txt", "pyproject.toml");
   if (hasPython) {
-    if (existsSync11(join15(cwd, "manage.py"))) {
+    if (existsSync12(join16(cwd, "manage.py"))) {
       return {
         runtime: "python",
         framework: "django",
@@ -109748,7 +109931,7 @@ async function detectFramework(cwd) {
         data: detectDataMode(pkg, cwd)
       };
     }
-    const mainPy = existsSync11(join15(cwd, "main.py")) ? readFileSync9(join15(cwd, "main.py"), "utf8") : "";
+    const mainPy = existsSync12(join16(cwd, "main.py")) ? readFileSync9(join16(cwd, "main.py"), "utf8") : "";
     if (/FastAPI\s*\(/.test(mainPy) || /from\s+fastapi/.test(mainPy)) {
       return {
         runtime: "python",
@@ -109757,7 +109940,7 @@ async function detectFramework(cwd) {
         data: detectDataMode(pkg, cwd)
       };
     }
-    const appPy = existsSync11(join15(cwd, "app.py")) ? readFileSync9(join15(cwd, "app.py"), "utf8") : "";
+    const appPy = existsSync12(join16(cwd, "app.py")) ? readFileSync9(join16(cwd, "app.py"), "utf8") : "";
     if (/Flask\s*\(/.test(appPy) || /from\s+flask/.test(appPy)) {
       return {
         runtime: "python",
@@ -109772,7 +109955,7 @@ async function detectFramework(cwd) {
       data: detectDataMode(pkg, cwd)
     };
   }
-  if (existsSync11(join15(cwd, "index.html"))) {
+  if (existsSync12(join16(cwd, "index.html"))) {
     return { runtime: "static" };
   }
   return null;
@@ -109822,8 +110005,8 @@ function scanEnvVars(_cwd) {
   return {};
 }
 async function init(ctx, input = {}) {
-  const path = join16(ctx.cwd, "percher.toml");
-  const exists2 = existsSync12(path);
+  const path = join17(ctx.cwd, "percher.toml");
+  const exists2 = existsSync13(path);
   if (exists2 && !input.force) {
     throw new PercherCoreError("percher.toml already exists", {
       code: "init.exists",
@@ -109836,7 +110019,7 @@ async function init(ctx, input = {}) {
   if (input.name) {
     name = input.name;
   } else {
-    const suggestion = generateName(basename2(ctx.cwd));
+    const suggestion = generateName(basename3(ctx.cwd));
     const interactive = input.interactive ?? detectInteractive();
     if (isSuspiciousAutoName(suggestion) && interactive) {
       const answer = (await ctx.prompt(`Suggested app name: '${suggestion}'. Press Enter to accept, or type a different name: `, { default: suggestion })).trim();
@@ -109870,7 +110053,7 @@ async function init(ctx, input = {}) {
   if (Object.keys(envVars).length > 0) {
     config2.env = envVars;
   }
-  writeFileSync7(path, serialize(config2), "utf8");
+  writeFileSync8(path, serialize(config2), "utf8");
   const scaffoldedFiles = [];
   if (detected?.staticBuild) {
     const targets = [
@@ -109886,10 +110069,10 @@ async function init(ctx, input = {}) {
       }
     ];
     for (const { name: name2, content } of targets) {
-      const target = join16(ctx.cwd, name2);
-      if (existsSync12(target) && !input.force)
+      const target = join17(ctx.cwd, name2);
+      if (existsSync13(target) && !input.force)
         continue;
-      writeFileSync7(target, content, "utf8");
+      writeFileSync8(target, content, "utf8");
       scaffoldedFiles.push(name2);
     }
   }
@@ -109973,7 +110156,7 @@ async function login(ctx, input = {}) {
       return validateAndPersist(ctx, input.apiUrl, result.token);
     }
     if (code.interval > 0) {
-      await new Promise((resolve6) => setTimeout(resolve6, code.interval * 1000));
+      await new Promise((resolve7) => setTimeout(resolve7, code.interval * 1000));
     }
   }
   throw new PercherCoreError("Login timed out. Re-run `percher login`.", {
@@ -110890,7 +111073,7 @@ function collectWarnings2(collections, rlsPolicies, unsupported) {
 }
 // ../core/dist/commands/migrate-supabase-rewrite.js
 import { mkdir as mkdir3, writeFile as writeFile3 } from "node:fs/promises";
-import { dirname as dirname5, join as join19, relative as relative5, resolve as resolve8, sep as sep4 } from "node:path";
+import { dirname as dirname6, join as join20, relative as relative6, resolve as resolve9, sep as sep5 } from "node:path";
 
 // ../core/dist/commands/migrate-supabase-recipes.js
 var AUTH_RECIPES = {
@@ -111156,7 +111339,7 @@ function isSupabaseClientModule(source) {
 // ../core/dist/commands/migrate-supabase-status.js
 var import_cross_spawn = __toESM(require_cross_spawn(), 1);
 import { readFile as readFile4 } from "node:fs/promises";
-import { join as join18, relative as relative4, resolve as resolve7 } from "node:path";
+import { join as join19, relative as relative5, resolve as resolve8 } from "node:path";
 
 // ../core/dist/commands/migrate-supabase-sdk.js
 var import_jscodeshift2 = __toESM(require_core3(), 1);
@@ -112093,7 +112276,7 @@ function applyRewrite(path, replacement, kind, pattern, note, flags, state) {
 // ../core/dist/commands/migrate-supabase-walker.js
 var import_ignore3 = __toESM(require_ignore(), 1);
 import { mkdir as mkdir2, readdir, readFile as readFile3, stat, writeFile as writeFile2 } from "node:fs/promises";
-import { dirname as dirname4, isAbsolute as isAbsolute2, join as join17, relative as relative3, resolve as resolve6, sep as sep3 } from "node:path";
+import { dirname as dirname5, isAbsolute as isAbsolute3, join as join18, relative as relative4, resolve as resolve7, sep as sep4 } from "node:path";
 var REWRITABLE_EXTENSIONS = new Set([".ts", ".tsx", ".js", ".jsx", ".mjs", ".cjs"]);
 var DEFAULT_EXCLUDES = [
   "node_modules",
@@ -112114,7 +112297,7 @@ var DEFAULT_EXCLUDES = [
   "pb_migrations"
 ];
 async function walkSupabaseProject(input) {
-  const rootAbs = resolve6(input.rootDir);
+  const rootAbs = resolve7(input.rootDir);
   const ig = import_ignore3.default().add(DEFAULT_EXCLUDES);
   if (input.extraExcludes && input.extraExcludes.length > 0) {
     ig.add(input.extraExcludes);
@@ -112123,7 +112306,7 @@ async function walkSupabaseProject(input) {
   const skipped = [];
   const pendingConfig = [];
   for await (const absPath of walkTree(rootAbs, rootAbs, ig)) {
-    const rel = relative3(rootAbs, absPath).split(sep3).join("/");
+    const rel = relative4(rootAbs, absPath).split(sep4).join("/");
     const kind = classifyFile2(rel);
     if (kind === null)
       continue;
@@ -112245,8 +112428,8 @@ async function* walkTree(dir, rootAbs, ig) {
     return;
   }
   for (const name of entries) {
-    const abs = join17(dir, name);
-    const rel = relative3(rootAbs, abs).split(sep3).join("/");
+    const abs = join18(dir, name);
+    const rel = relative4(rootAbs, abs).split(sep4).join("/");
     if (rel.length > 0 && ig.ignores(rel))
       continue;
     let st;
@@ -112395,19 +112578,19 @@ function extractPublicPrefix(key) {
   return "";
 }
 async function writeWalkResult(input) {
-  const targetAbs = resolve6(input.targetDir);
+  const targetAbs = resolve7(input.targetDir);
   const changedOnly = input.changedOnly !== false;
   const written = [];
   for (const file2 of input.result.files) {
     if (changedOnly && !file2.changed)
       continue;
-    const abs = resolve6(targetAbs, file2.relativePath);
-    const rel = relative3(targetAbs, abs);
-    const isParentTraversal = rel === ".." || rel.startsWith(`..${sep3}`) || rel.startsWith("../");
-    if (rel.length === 0 || isParentTraversal || isAbsolute2(rel)) {
+    const abs = resolve7(targetAbs, file2.relativePath);
+    const rel = relative4(targetAbs, abs);
+    const isParentTraversal = rel === ".." || rel.startsWith(`..${sep4}`) || rel.startsWith("../");
+    if (rel.length === 0 || isParentTraversal || isAbsolute3(rel)) {
       throw new Error(`writeWalkResult refused path-traversing file "${file2.relativePath}" → "${abs}" (would escape targetDir "${targetAbs}").`);
     }
-    await mkdir2(dirname4(abs), { recursive: true });
+    await mkdir2(dirname5(abs), { recursive: true });
     await writeFile2(abs, file2.rewritten, "utf8");
     written.push(file2.relativePath);
   }
@@ -112620,8 +112803,8 @@ var STATE_SUMMARY = {
   complete: "Migration looks complete — no Supabase usage remains."
 };
 async function migrationStatus(ctx, input) {
-  const rootAbs = input.rootDir ? resolve7(ctx.cwd, input.rootDir) : resolve7(ctx.cwd);
-  ctx.status(`Scanning ${relative4(ctx.cwd, rootAbs) || "."} for migration status...`);
+  const rootAbs = input.rootDir ? resolve8(ctx.cwd, input.rootDir) : resolve8(ctx.cwd);
+  ctx.status(`Scanning ${relative5(ctx.cwd, rootAbs) || "."} for migration status...`);
   let files;
   try {
     const walk2 = await walkSupabaseProject({ rootDir: rootAbs });
@@ -112682,7 +112865,7 @@ function buildPrompt(state, failing, warning, build) {
 async function readManualRlsCount(rootAbs) {
   for (const dir of ["migration-preview", "."]) {
     try {
-      const notes = await readFile4(join18(rootAbs, dir, "MIGRATION_NOTES.md"), "utf8");
+      const notes = await readFile4(join19(rootAbs, dir, "MIGRATION_NOTES.md"), "utf8");
       const m = notes.match(/\*\*RLS policies:\*\*\s*\d+\s*\((\d+)\s*need manual review\)/);
       if (m?.[1] !== undefined)
         return Number.parseInt(m[1], 10);
@@ -112694,7 +112877,7 @@ async function readManualRlsCount(rootAbs) {
 async function runProjectBuild(rootAbs) {
   let hasBuildScript = false;
   try {
-    const pkg = JSON.parse(await readFile4(join18(rootAbs, "package.json"), "utf8"));
+    const pkg = JSON.parse(await readFile4(join19(rootAbs, "package.json"), "utf8"));
     hasBuildScript = typeof pkg.scripts?.build === "string";
   } catch {
     return { ran: false, passed: false, detail: "No readable package.json — nothing to build." };
@@ -112726,7 +112909,7 @@ ${tail}` : ""}`
 async function detectPackageManager(rootAbs) {
   const has = async (name) => {
     try {
-      await readFile4(join18(rootAbs, name), "utf8");
+      await readFile4(join19(rootAbs, name), "utf8");
       return true;
     } catch {
       return false;
@@ -112741,7 +112924,7 @@ async function detectPackageManager(rootAbs) {
   return "npm";
 }
 function spawnCapture(cmd, args, cwd, timeoutMs) {
-  return new Promise((resolve8) => {
+  return new Promise((resolve9) => {
     const child = import_cross_spawn.default(cmd, args, { cwd, stdio: ["ignore", "pipe", "pipe"] });
     let output = "";
     const onData = (chunk) => {
@@ -112758,11 +112941,11 @@ function spawnCapture(cmd, args, cwd, timeoutMs) {
     }, timeoutMs);
     child.on("error", (err) => {
       clearTimeout(timer);
-      resolve8({ code: 1, output, timedOut, spawnError: err.message });
+      resolve9({ code: 1, output, timedOut, spawnError: err.message });
     });
     child.on("close", (code) => {
       clearTimeout(timer);
-      resolve8({ code: code ?? 1, output, timedOut });
+      resolve9({ code: code ?? 1, output, timedOut });
     });
   });
 }
@@ -112805,10 +112988,10 @@ var rewriteSupabaseClientInputSchema = exports_external.object({
   scaffoldClient: exports_external.boolean().optional().describe("Generate a PocketBase client module (src/lib/pocketbase.<ext>) and insert `import { pb }` into rewritten files. Default true when there are rewrites; pass false to opt out. Skips silently if a pb client already exists.")
 });
 async function rewriteSupabaseClient(ctx, input) {
-  const rootAbs = input.rootDir ? resolve8(ctx.cwd, input.rootDir) : resolve8(ctx.cwd);
+  const rootAbs = input.rootDir ? resolve9(ctx.cwd, input.rootDir) : resolve9(ctx.cwd);
   const apply = input.apply === true;
   const mode = apply ? "apply" : "preview";
-  ctx.status(`Scanning ${relative5(ctx.cwd, rootAbs) || "."} for Supabase SDK calls...`);
+  ctx.status(`Scanning ${relative6(ctx.cwd, rootAbs) || "."} for Supabase SDK calls...`);
   let walk2;
   try {
     walk2 = await walkSupabaseProject({
@@ -112817,7 +113000,7 @@ async function rewriteSupabaseClient(ctx, input) {
       supabaseIdentifiers: input.supabaseIdentifiers
     });
   } catch (err) {
-    return failure3(rootAbs, mode, err, `Couldn't scan ${relative5(ctx.cwd, rootAbs) || "."}: check the path exists and is readable, then re-run.`);
+    return failure3(rootAbs, mode, err, `Couldn't scan ${relative6(ctx.cwd, rootAbs) || "."}: check the path exists and is readable, then re-run.`);
   }
   const changed = walk2.files.filter((f) => f.changed);
   const flags = collectManualFlags(walk2);
@@ -112856,8 +113039,8 @@ async function rewriteSupabaseClient(ctx, input) {
     flags.push(...scaffold.flags);
   }
   const reportNeeded = hadRewrites || flags.length > 0 || walk2.skipped.length > 0;
-  const backupDir = apply && changed.length > 0 ? join19(rootAbs, "migration-preview", "backup") : null;
-  const rewriteTarget = apply ? rootAbs : input.outputDir ? resolve8(ctx.cwd, input.outputDir) : join19(rootAbs, "migration-preview", "rewritten");
+  const backupDir = apply && changed.length > 0 ? join20(rootAbs, "migration-preview", "backup") : null;
+  const rewriteTarget = apply ? rootAbs : input.outputDir ? resolve9(ctx.cwd, input.outputDir) : join20(rootAbs, "migration-preview", "rewritten");
   const filesWritten = [];
   let clientModuleWritten = null;
   try {
@@ -112877,19 +113060,19 @@ async function rewriteSupabaseClient(ctx, input) {
         changedOnly: true
       });
       for (const rel of out.written) {
-        filesWritten.push(relative5(ctx.cwd, join19(rewriteTarget, rel)));
+        filesWritten.push(relative6(ctx.cwd, join20(rewriteTarget, rel)));
       }
       if (scaffold?.clientModule) {
-        const moduleAbs = join19(rewriteTarget, scaffold.clientModule.relativePath);
-        await mkdir3(dirname5(moduleAbs), { recursive: true });
+        const moduleAbs = join20(rewriteTarget, scaffold.clientModule.relativePath);
+        await mkdir3(dirname6(moduleAbs), { recursive: true });
         await writeFile3(moduleAbs, scaffold.clientModule.content, "utf8");
-        clientModuleWritten = relative5(ctx.cwd, moduleAbs).split(sep4).join("/");
+        clientModuleWritten = relative6(ctx.cwd, moduleAbs).split(sep5).join("/");
         filesWritten.push(clientModuleWritten);
       }
     }
     if (reportNeeded) {
-      const reportAbs = join19(rootAbs, "migration-preview", "REWRITE_NOTES.md");
-      await mkdir3(dirname5(reportAbs), { recursive: true });
+      const reportAbs = join20(rootAbs, "migration-preview", "REWRITE_NOTES.md");
+      await mkdir3(dirname6(reportAbs), { recursive: true });
       const analysis = analyzeMigration(walk2.files.map((f) => ({
         relativePath: f.relativePath,
         kind: f.kind,
@@ -112905,7 +113088,7 @@ async function rewriteSupabaseClient(ctx, input) {
         scaffoldedClient: scaffold?.clientModule?.relativePath ?? null,
         scaffoldSkippedExisting: scaffold?.skippedReason === "pb_client_exists"
       }), "utf8");
-      filesWritten.push(relative5(ctx.cwd, reportAbs));
+      filesWritten.push(relative6(ctx.cwd, reportAbs));
     }
   } catch (err) {
     return failure3(rootAbs, mode, err, apply ? "The in-place rewrite failed partway. Your originals are safe — restore from `migration-preview/backup/` and re-run." : "Couldn't write the rewritten preview. Check the output directory is writeable and re-run.");
@@ -113141,7 +113324,7 @@ function failure3(rootAbs, mode, err, suggestion) {
 }
 // ../core/dist/commands/migrate-supabase-schema.js
 import { mkdir as mkdir4, writeFile as writeFile4 } from "node:fs/promises";
-import { isAbsolute as isAbsolute3, join as join20, relative as relative6, resolve as resolve9 } from "node:path";
+import { isAbsolute as isAbsolute4, join as join21, relative as relative7, resolve as resolve10 } from "node:path";
 
 // ../core/dist/commands/migrate-supabase-scripts.js
 function generateDataImportScripts(preview) {
@@ -113589,7 +113772,7 @@ var migrateSupabaseSchemaInputSchema = exports_external.object({
 });
 async function migrateSupabaseSchema(ctx, input) {
   const outputDirAbs = resolveOutputDir(ctx.cwd, input.outputDir);
-  const outputDirRel = relative6(ctx.cwd, outputDirAbs) || ".";
+  const outputDirRel = relative7(ctx.cwd, outputDirAbs) || ".";
   ctx.status(`Inspecting Supabase project ${input.projectRef}...`);
   const inspection = await inspectSupabase(ctx, {
     projectRef: input.projectRef,
@@ -113653,28 +113836,28 @@ async function migrateSupabaseSchema(ctx, input) {
 }
 function resolveOutputDir(cwd, requested) {
   const raw = requested ?? "./migration-preview";
-  return isAbsolute3(raw) ? raw : resolve9(cwd, raw);
+  return isAbsolute4(raw) ? raw : resolve10(cwd, raw);
 }
 async function writePreviewFiles(ctx, outputDir, preview) {
   await mkdir4(outputDir, { recursive: true });
   const schemaJson = renderSchemaJson(preview);
   const notesMd = renderMigrationNotes(preview);
   const scripts = generateDataImportScripts(preview);
-  const schemaPath = join20(outputDir, "pb_schema.json");
-  const notesPath = join20(outputDir, "MIGRATION_NOTES.md");
-  const migratePath = join20(outputDir, "pb_migrate.js");
-  const storagePath = join20(outputDir, "pb_migrate_storage.js");
+  const schemaPath = join21(outputDir, "pb_schema.json");
+  const notesPath = join21(outputDir, "MIGRATION_NOTES.md");
+  const migratePath = join21(outputDir, "pb_migrate.js");
+  const storagePath = join21(outputDir, "pb_migrate_storage.js");
   await writeFile4(schemaPath, schemaJson, "utf8");
   await writeFile4(notesPath, notesMd, "utf8");
   await writeFile4(migratePath, scripts.pbMigrate, "utf8");
   const written = [
-    relative6(ctx.cwd, schemaPath),
-    relative6(ctx.cwd, notesPath),
-    relative6(ctx.cwd, migratePath)
+    relative7(ctx.cwd, schemaPath),
+    relative7(ctx.cwd, notesPath),
+    relative7(ctx.cwd, migratePath)
   ];
   if (scripts.pbMigrateStorage !== null) {
     await writeFile4(storagePath, scripts.pbMigrateStorage, "utf8");
-    written.push(relative6(ctx.cwd, storagePath));
+    written.push(relative7(ctx.cwd, storagePath));
   }
   return written;
 }
@@ -113889,8 +114072,8 @@ async function previewBranchShow(ctx, input = {}) {
   };
 }
 // ../core/dist/commands/publish.js
-import { existsSync as existsSync14 } from "node:fs";
-import { join as join23 } from "node:path";
+import { existsSync as existsSync15 } from "node:fs";
+import { join as join24 } from "node:path";
 
 // ../shared/dist/pow.js
 import { createHash as createHash3 } from "node:crypto";
@@ -114265,9 +114448,20 @@ async function runDeployWithRetry(opts) {
   throw lastErr;
 }
 
+// ../core/dist/toml-recovery.js
+function tomlErrorToRecoveryProblems(err) {
+  if (err.issues?.length) {
+    return err.issues.map((i) => ({
+      file: "percher.toml",
+      message: `${i.path.join(".") || "(root)"}: ${i.message}`
+    }));
+  }
+  return [{ file: "percher.toml", message: err.message }];
+}
+
 // ../core/dist/commands/env-scan.js
 import { readdirSync as readdirSync3, readFileSync as readFileSync10, statSync as statSync3 } from "node:fs";
-import { join as join21 } from "node:path";
+import { join as join22 } from "node:path";
 var SOURCE_EXTS = new Set([
   ".ts",
   ".tsx",
@@ -114304,7 +114498,7 @@ function scanForMissingBuildEnvRefs(cwd, existingKeys) {
       continue;
     let content;
     try {
-      content = readFileSync10(join21(cwd, rel), "utf8");
+      content = readFileSync10(join22(cwd, rel), "utf8");
     } catch {
       continue;
     }
@@ -114336,7 +114530,7 @@ function* walkDir(dir, base) {
   for (const name of entries) {
     if (SKIP_DIRS.has(name))
       continue;
-    const full = join21(dir, name);
+    const full = join22(dir, name);
     let st;
     try {
       st = statSync3(full);
@@ -114696,19 +114890,19 @@ function titleFromCode(code) {
 }
 
 // ../core/dist/commands/publish-node.js
-import { existsSync as existsSync13, readFileSync as readFileSync11 } from "node:fs";
-import { join as join22 } from "node:path";
+import { existsSync as existsSync14, readFileSync as readFileSync11 } from "node:fs";
+import { join as join23 } from "node:path";
 function resolveNodeVersion(cwd) {
-  const nvmrc = join22(cwd, ".nvmrc");
-  if (existsSync13(nvmrc)) {
+  const nvmrc = join23(cwd, ".nvmrc");
+  if (existsSync14(nvmrc)) {
     try {
       const v = readFileSync11(nvmrc, "utf8").trim();
       if (v)
         return { value: v, source: ".nvmrc" };
     } catch {}
   }
-  const pkgPath = join22(cwd, "package.json");
-  if (!existsSync13(pkgPath))
+  const pkgPath = join23(cwd, "package.json");
+  if (!existsSync14(pkgPath))
     return null;
   try {
     const pkg = JSON.parse(readFileSync11(pkgPath, "utf8"));
@@ -114733,7 +114927,7 @@ var publishInputSchema = exports_external.object({
 var SUSPICIOUS_BYTES = 50 * 1024 * 1024;
 var SUSPICIOUS_FILES = 1e4;
 function tomlPathFor2(cwd) {
-  return join23(cwd, "percher.toml");
+  return join24(cwd, "percher.toml");
 }
 async function buildReplacedResult2(opts) {
   const { ctx, app, deployment, tarball, cwd } = opts;
@@ -114780,9 +114974,9 @@ function buildLiveSummary(opts) {
   const replaced = opts.replacedPreview ? " — replaced previous preview" : "";
   return `${opts.appName} ${verb}${fwSuffix} → ${opts.url}${replaced}`;
 }
-async function publish(ctx, input = {}) {
+async function publish(ctx, input = {}, preParsedConfig) {
   try {
-    return await publishInner(ctx, input);
+    return await publishInner(ctx, input, preParsedConfig);
   } catch (err) {
     const classified = classifyPublishApiError(err, {
       configPath: tomlPathFor2(ctx.cwd),
@@ -114811,7 +115005,7 @@ async function publish(ctx, input = {}) {
     };
   }
 }
-async function publishInner(ctx, input) {
+async function publishInner(ctx, input, preParsedConfig) {
   const t0 = Date.now();
   if (!input.dryRun) {
     try {
@@ -114822,7 +115016,7 @@ async function publishInner(ctx, input) {
   ctx.status("[1/4] Reading config...");
   let config2;
   try {
-    config2 = await loadOrGenerate(ctx);
+    config2 = await loadOrGenerate(ctx, preParsedConfig);
   } catch (err) {
     if (err instanceof PercherTomlError) {
       if (err.code === "PARSE_ERROR") {
@@ -114836,7 +115030,7 @@ async function publishInner(ctx, input) {
             suggestion: "Fix the syntax error and retry publish."
           },
           recovery: recoveryFixConfig({
-            problems: [{ file: "percher.toml", message: err.message }],
+            problems: tomlErrorToRecoveryProblems(err),
             reasonCode: "config_invalid"
           }),
           summary: "percher.toml has invalid TOML syntax — fix and retry.",
@@ -114845,10 +115039,7 @@ async function publishInner(ctx, input) {
         };
       }
       if (err.code === "VALIDATION_ERROR") {
-        const problems = (err.issues ?? []).map((i) => ({
-          file: "percher.toml",
-          message: `${i.path.join(".") || "(root)"}: ${i.message}`
-        }));
+        const problems = tomlErrorToRecoveryProblems(err);
         const bullets = problems.map((p) => `  - ${p.message}`).join(`
 `);
         const count = problems.length;
@@ -114892,6 +115083,30 @@ ${bullets}`,
       bundle: { fileCount: 0, bytes: 0 }
     };
   }
+  if (preParsedConfig && !input.dryRun && !existsSync15(join24(ctx.cwd, "percher.toml"))) {
+    return {
+      status: "failed",
+      fileCount: 0,
+      bytes: 0,
+      error: {
+        title: "percher.toml missing from the project",
+        explanation: "A pre-parsed config was supplied, but no percher.toml exists in the project directory. The file is packaged into the upload, so it must be present on disk for a real deploy.",
+        suggestion: "Run `percher init` (or write percher.toml) before publishing."
+      },
+      recovery: recoveryFixConfig({
+        problems: [
+          {
+            file: "percher.toml",
+            message: "percher.toml must exist on disk for a real upload (it ships in the tarball)."
+          }
+        ],
+        reasonCode: "config_missing"
+      }),
+      summary: "percher.toml missing — required on disk for a real upload.",
+      configPath: tomlPathFor2(ctx.cwd),
+      bundle: { fileCount: 0, bytes: 0 }
+    };
+  }
   ctx.status("[2/4] Packaging files...");
   const tarball = await createTarball({ cwd: ctx.cwd, config: config2 });
   const packageMs = Date.now() - t0;
@@ -115397,11 +115612,14 @@ async function handleAnonymousPublish(ctx, config2, input, tarball) {
     ]
   };
 }
-async function loadOrGenerate(ctx) {
-  const tomlPath = join23(ctx.cwd, "percher.toml");
-  if (!existsSync14(tomlPath)) {
+async function loadOrGenerate(ctx, preParsed) {
+  if (preParsed)
+    return structuredClone(preParsed);
+  const tomlPath = join24(ctx.cwd, "percher.toml");
+  if (!existsSync15(tomlPath)) {
     ctx.status("No percher.toml found — detecting framework...");
-    await init(ctx);
+    const generated = await init(ctx);
+    return validate(generated.config);
   }
   return parseFile(tomlPath);
 }
@@ -115448,8 +115666,8 @@ function emitPreflight(ctx, config2, tarball) {
   }
 }
 // ../core/dist/commands/push.js
-import { existsSync as existsSync15 } from "node:fs";
-import { join as join24 } from "node:path";
+import { existsSync as existsSync16 } from "node:fs";
+import { join as join25 } from "node:path";
 var pushInputSchema = exports_external.object({
   dryRun: exports_external.boolean().optional(),
   force: exports_external.boolean().optional(),
@@ -115460,8 +115678,8 @@ var SUSPICIOUS_BYTES2 = 50 * 1024 * 1024;
 var SUSPICIOUS_FILES2 = 1e4;
 var PLACEHOLDER_PREFIXES = ["add-your-", "your-key-here"];
 async function loadOrGenerate2(ctx) {
-  const tomlPath = join24(ctx.cwd, "percher.toml");
-  if (!existsSync15(tomlPath)) {
+  const tomlPath = join25(ctx.cwd, "percher.toml");
+  if (!existsSync16(tomlPath)) {
     ctx.status("No percher.toml found — detecting framework...");
     const result = await init(ctx);
     const answer = await ctx.prompt(`Generated percher.toml for ${result.detected?.framework ?? result.detected?.runtime ?? "node"}. Continue? [Y/n]`, { default: "y" });
@@ -115572,7 +115790,7 @@ async function push(ctx, input = {}, internals = {}) {
       fileCount: tarball.fileCount,
       recovery: RECOVERY_NONE,
       summary: `Dry run for ${config2.app.name}: ${tarball.fileCount} files, ${(tarball.bytes / 1024).toFixed(1)} KB — no deploy performed.`,
-      configPath: join24(ctx.cwd, "percher.toml"),
+      configPath: join25(ctx.cwd, "percher.toml"),
       bundle: { fileCount: tarball.fileCount, bytes: tarball.bytes }
     };
   }
@@ -115755,7 +115973,7 @@ ${deployment.errorMessage}` : "";
     fileCount: tarball.fileCount,
     recovery: RECOVERY_NONE,
     summary,
-    configPath: join24(ctx.cwd, "percher.toml"),
+    configPath: join25(ctx.cwd, "percher.toml"),
     bundle: { fileCount: tarball.fileCount, bytes: tarball.bytes }
   };
 }
@@ -116084,8 +116302,8 @@ function failureResult(error48) {
   };
 }
 // ../core/dist/commands/rename.js
-import { existsSync as existsSync16, readFileSync as readFileSync12, writeFileSync as writeFileSync8 } from "node:fs";
-import { join as join25 } from "node:path";
+import { existsSync as existsSync17, readFileSync as readFileSync12, writeFileSync as writeFileSync9 } from "node:fs";
+import { join as join26 } from "node:path";
 var renameInputSchema = exports_external.object({
   app: exports_external.string().optional(),
   name: exports_external.string().min(3).max(40)
@@ -116105,8 +116323,8 @@ async function rename2(ctx, input) {
   };
 }
 function updateLocalTomlName(cwd, oldName, newName) {
-  const p = join25(cwd, "percher.toml");
-  if (!existsSync16(p))
+  const p = join26(cwd, "percher.toml");
+  if (!existsSync17(p))
     return false;
   try {
     const src = readFileSync12(p, "utf8");
@@ -116115,25 +116333,25 @@ function updateLocalTomlName(cwd, oldName, newName) {
     const next = src.replace(new RegExp(`(name\\s*=\\s*")${oldName}(")`), `$1${newName}$2`);
     if (next === src || parse5(next).app.name !== newName)
       return false;
-    writeFileSync8(p, next);
+    writeFileSync9(p, next);
     return true;
   } catch {
     return false;
   }
 }
 // ../core/dist/commands/reproduce.js
-import { mkdtempSync, writeFileSync as writeFileSync9 } from "node:fs";
+import { mkdtempSync, writeFileSync as writeFileSync10 } from "node:fs";
 import { tmpdir } from "node:os";
-import { join as join26 } from "node:path";
+import { join as join27 } from "node:path";
 var import_cross_spawn2 = __toESM(require_cross_spawn(), 1);
 function runProcessExit(cmd, args, opts = {}) {
-  return new Promise((resolve10, reject) => {
+  return new Promise((resolve11, reject) => {
     const child = import_cross_spawn2.default(cmd, args, {
       cwd: opts.cwd,
       stdio: opts.inherit ? "inherit" : "ignore"
     });
     child.on("error", reject);
-    child.on("close", (code) => resolve10(code ?? 1));
+    child.on("close", (code) => resolve11(code ?? 1));
   });
 }
 var reproduceInputSchema = exports_external.object({
@@ -116219,9 +116437,9 @@ async function reproduce(ctx, input) {
     const envMap = await ctx.client.env.list(app.id);
     currentAppEnvKeys = Object.keys(envMap).sort();
   } catch {}
-  const tmpDir = mkdtempSync(join26(tmpdir(), `percher-reproduce-${input.deployId}-`));
-  const tarballPath = join26(tmpDir, "source.tar.gz");
-  writeFileSync9(tarballPath, bytes);
+  const tmpDir = mkdtempSync(join27(tmpdir(), `percher-reproduce-${input.deployId}-`));
+  const tarballPath = join27(tmpDir, "source.tar.gz");
+  writeFileSync10(tarballPath, bytes);
   let extracted = false;
   try {
     extracted = await runProcessExit("tar", ["-xzf", tarballPath, "-C", tmpDir]) === 0;
@@ -116658,7 +116876,6 @@ var PLAN_CATALOG = {
     priceEur: 0,
     limits: {
       apps: 3,
-      deploysPerMonth: 50,
       deploysPerHour: 12,
       memory: "256mb",
       cpu: 0.25,
@@ -116690,7 +116907,6 @@ var PLAN_CATALOG = {
     priceEur: 3,
     limits: {
       apps: 10,
-      deploysPerMonth: 200,
       deploysPerHour: 30,
       memory: "512mb",
       cpu: 0.25,
@@ -116722,7 +116938,6 @@ var PLAN_CATALOG = {
     priceEur: 12,
     limits: {
       apps: 20,
-      deploysPerMonth: 500,
       deploysPerHour: 60,
       memory: "1gb",
       cpu: 0.5,
@@ -116754,7 +116969,6 @@ var PLAN_CATALOG = {
     priceEur: 29,
     limits: {
       apps: 40,
-      deploysPerMonth: "unlimited",
       deploysPerHour: 120,
       memory: "1gb",
       cpu: 1,
@@ -116787,7 +117001,6 @@ var PLAN_CATALOG = {
     hidden: true,
     limits: {
       apps: 1,
-      deploysPerMonth: 20,
       deploysPerHour: 6,
       memory: "128mb",
       cpu: 0.25,
@@ -117479,6 +117692,36 @@ function registerAppsCommands(cli, ctx) {
       await writeLine(ctx, `${import_picocolors4.default.green("✓")} wrote ${file2}`);
     }
   });
+  cli.command("appstore-kit", "Write app-store starter files (PWA manifest, TWA/Capacitor, asset links)").option("--name <name>", "App name (defaults to percher.toml / directory)").option("--url <url>", "App URL (defaults to https://<name>.percher.run)").option("--package <pkg>", "Android package name for assetlinks.json").option("--fingerprint <sha256>", "Signing-cert SHA-256 for assetlinks.json").option("--team-id <id>", "Apple Team ID for apple-app-site-association").option("--bundle-id <id>", "Apple bundle ID for apple-app-site-association").option("--out <dir>", "Output directory (defaults to the current directory)").option("--force", "Overwrite files that already exist").action(async (options) => {
+    const result = await appstoreKit(ctx, {
+      name: options.name,
+      url: options.url,
+      packageName: options.package,
+      fingerprint: options.fingerprint,
+      teamId: options.teamId,
+      bundleId: options.bundleId,
+      outDir: options.out,
+      force: options.force
+    });
+    for (const file2 of result.written) {
+      await writeLine(ctx, `${import_picocolors4.default.green("✓")} wrote ${file2}`);
+    }
+    for (const file2 of result.skipped) {
+      await writeLine(ctx, `${import_picocolors4.default.dim("•")} skipped ${file2} (exists — pass --force to overwrite)`);
+    }
+    await writeLine(ctx, "");
+    await writeLine(ctx, `${import_picocolors4.default.bold("Make it an installable PWA:")} link the manifest from your HTML`);
+    await writeLine(ctx, `  <link rel="manifest" href="/manifest.json">`);
+    await writeLine(ctx, "and register the service worker from your app entry:");
+    await writeLine(ctx, result.swRegistration);
+    await writeLine(ctx, "");
+    await writeLine(ctx, `${import_picocolors4.default.bold("Wrap for Google Play (TWA):")}`);
+    await writeLine(ctx, result.bubblewrapCommand);
+    await writeLine(ctx, "");
+    await writeLine(ctx, `The two ${import_picocolors4.default.dim(".well-known")} files are trust assertions for your origin — add real values`);
+    await writeLine(ctx, `after you sign the apps, then serve them yourself or let Percher serve them from the`);
+    await writeLine(ctx, "App store kit at https://percher.app. Full guide: /docs/app-stores");
+  });
   cli.command("publish", "Publish this project to Percher (recommended deploy command)").option("--force", "Skip size warnings").option("--preview", "Deploy as preview (does not replace the live version)").option("-m, --message <msg>", "Deploy note (visible in deploy history)").option("--dry-run", "Show what would be deployed (file count, bytes) without uploading").option("--no-cache", "Skip image-cache lookup and force a fresh build (use when you suspect cached image is stale)").option("--anonymous", "Publish without an account — a 72h sandbox you can claim later (where enabled)").action(async (options) => {
     const { detectCiBranchMessage: detectCiBranchMessage2 } = await Promise.resolve().then(() => exports_ci_env);
     let messageOverride = options.message;
@@ -117560,8 +117803,8 @@ function registerAppsCommands(cli, ctx) {
             deployId,
             timeoutSeconds: Math.min(Math.ceil(remainingMs / 1000), 30)
           }, { signal: callController.signal }),
-          new Promise((resolve10) => {
-            raceTimer = setTimeout(() => resolve10(null), remainingMs);
+          new Promise((resolve11) => {
+            raceTimer = setTimeout(() => resolve11(null), remainingMs);
           })
         ]);
       } finally {
@@ -118805,7 +119048,7 @@ async function renderError(stderr, error48) {
 // package.json
 var package_default = {
   name: "percher",
-  version: "0.5.8",
+  version: "0.5.10",
   description: "CLI for the Percher hosting platform — publish apps with one command",
   type: "module",
   bin: {
@@ -118886,18 +119129,18 @@ async function showTelemetryNotice() {
   if (isDisabled())
     return;
   const { homedir: homedir2 } = await import("node:os");
-  const { existsSync: existsSync17, mkdirSync: mkdirSync6, writeFileSync: writeFileSync10 } = await import("node:fs");
-  const { join: join27 } = await import("node:path");
-  const configDir = join27(homedir2(), ".percher");
-  const markerFile = join27(configDir, ".telemetry-notice-shown");
-  if (existsSync17(markerFile))
+  const { existsSync: existsSync18, mkdirSync: mkdirSync7, writeFileSync: writeFileSync11 } = await import("node:fs");
+  const { join: join28 } = await import("node:path");
+  const configDir = join28(homedir2(), ".percher");
+  const markerFile = join28(configDir, ".telemetry-notice-shown");
+  if (existsSync18(markerFile))
     return;
   console.log("Percher sends non-account-linked usage stats (command, result, error type, OS, Bun version).");
   console.log(`Disable with PERCHER_NO_TELEMETRY=1
 `);
   try {
-    mkdirSync6(configDir, { recursive: true });
-    writeFileSync10(markerFile, new Date().toISOString());
+    mkdirSync7(configDir, { recursive: true });
+    writeFileSync11(markerFile, new Date().toISOString());
   } catch {}
 }