percher 1.4.0 → 1.4.1

package/dist/bin/percher.js

@@ -55,7 +55,7 @@ var __exportCjs = (target, getters, setters) => {
 };
 var __require = /* @__PURE__ */ createRequire(import.meta.url);
 
-// ../../node_modules/.bun/@iarna+toml@2.2.5/node_modules/@iarna/toml/lib/parser.js
+// ../../../../../../../../../../../home/matti/percher-ci-b2/node_modules/.bun/@iarna+toml@2.2.5/node_modules/@iarna/toml/lib/parser.js
 var require_parser = __commonJS(function(exports2, module2) {
   var ParserEND = 1114112;
 
@@ -185,7 +185,7 @@ var require_parser = __commonJS(function(exports2, module2) {
   module2.exports = Parser;
 });
 
-// ../../node_modules/.bun/@iarna+toml@2.2.5/node_modules/@iarna/toml/lib/create-datetime.js
+// ../../../../../../../../../../../home/matti/percher-ci-b2/node_modules/.bun/@iarna+toml@2.2.5/node_modules/@iarna/toml/lib/create-datetime.js
 var require_create_datetime = __commonJS(function(exports2, module2) {
   module2.exports = (value) => {
     const date = new Date(value);
@@ -197,7 +197,7 @@ var require_create_datetime = __commonJS(function(exports2, module2) {
   };
 });
 
-// ../../node_modules/.bun/@iarna+toml@2.2.5/node_modules/@iarna/toml/lib/format-num.js
+// ../../../../../../../../../../../home/matti/percher-ci-b2/node_modules/.bun/@iarna+toml@2.2.5/node_modules/@iarna/toml/lib/format-num.js
 var require_format_num = __commonJS(function(exports2, module2) {
   module2.exports = (d, num) => {
     num = String(num);
@@ -207,7 +207,7 @@ var require_format_num = __commonJS(function(exports2, module2) {
   };
 });
 
-// ../../node_modules/.bun/@iarna+toml@2.2.5/node_modules/@iarna/toml/lib/create-datetime-float.js
+// ../../../../../../../../../../../home/matti/percher-ci-b2/node_modules/.bun/@iarna+toml@2.2.5/node_modules/@iarna/toml/lib/create-datetime-float.js
 var require_create_datetime_float = __commonJS(function(exports2, module2) {
   var f = require_format_num();
 
@@ -232,7 +232,7 @@ var require_create_datetime_float = __commonJS(function(exports2, module2) {
   };
 });
 
-// ../../node_modules/.bun/@iarna+toml@2.2.5/node_modules/@iarna/toml/lib/create-date.js
+// ../../../../../../../../../../../home/matti/percher-ci-b2/node_modules/.bun/@iarna+toml@2.2.5/node_modules/@iarna/toml/lib/create-date.js
 var require_create_date = __commonJS(function(exports2, module2) {
   var f = require_format_num();
   var DateTime = global.Date;
@@ -256,7 +256,7 @@ var require_create_date = __commonJS(function(exports2, module2) {
   };
 });
 
-// ../../node_modules/.bun/@iarna+toml@2.2.5/node_modules/@iarna/toml/lib/create-time.js
+// ../../../../../../../../../../../home/matti/percher-ci-b2/node_modules/.bun/@iarna+toml@2.2.5/node_modules/@iarna/toml/lib/create-time.js
 var require_create_time = __commonJS(function(exports2, module2) {
   var f = require_format_num();
 
@@ -279,7 +279,7 @@ var require_create_time = __commonJS(function(exports2, module2) {
   };
 });
 
-// ../../node_modules/.bun/@iarna+toml@2.2.5/node_modules/@iarna/toml/lib/toml-parser.js
+// ../../../../../../../../../../../home/matti/percher-ci-b2/node_modules/.bun/@iarna+toml@2.2.5/node_modules/@iarna/toml/lib/toml-parser.js
 var require_toml_parser = __commonJS(function(exports, module) {
   module.exports = makeParserClass(require_parser());
   module.exports.makeParserClass = makeParserClass;
@@ -1587,7 +1587,7 @@ var require_toml_parser = __commonJS(function(exports, module) {
   }
 });
 
-// ../../node_modules/.bun/@iarna+toml@2.2.5/node_modules/@iarna/toml/parse-pretty-error.js
+// ../../../../../../../../../../../home/matti/percher-ci-b2/node_modules/.bun/@iarna+toml@2.2.5/node_modules/@iarna/toml/parse-pretty-error.js
 var require_parse_pretty_error = __commonJS(function(exports2, module2) {
   module2.exports = prettyError;
   function prettyError(err, buf) {
@@ -1627,7 +1627,7 @@ var require_parse_pretty_error = __commonJS(function(exports2, module2) {
   }
 });
 
-// ../../node_modules/.bun/@iarna+toml@2.2.5/node_modules/@iarna/toml/parse-string.js
+// ../../../../../../../../../../../home/matti/percher-ci-b2/node_modules/.bun/@iarna+toml@2.2.5/node_modules/@iarna/toml/parse-string.js
 var require_parse_string = __commonJS(function(exports2, module2) {
   module2.exports = parseString;
   var TOMLParser = require_toml_parser();
@@ -1646,7 +1646,7 @@ var require_parse_string = __commonJS(function(exports2, module2) {
   }
 });
 
-// ../../node_modules/.bun/@iarna+toml@2.2.5/node_modules/@iarna/toml/parse-async.js
+// ../../../../../../../../../../../home/matti/percher-ci-b2/node_modules/.bun/@iarna+toml@2.2.5/node_modules/@iarna/toml/parse-async.js
 var require_parse_async = __commonJS(function(exports2, module2) {
   module2.exports = parseAsync;
   var TOMLParser = require_toml_parser();
@@ -1678,7 +1678,7 @@ var require_parse_async = __commonJS(function(exports2, module2) {
   }
 });
 
-// ../../node_modules/.bun/@iarna+toml@2.2.5/node_modules/@iarna/toml/parse-stream.js
+// ../../../../../../../../../../../home/matti/percher-ci-b2/node_modules/.bun/@iarna+toml@2.2.5/node_modules/@iarna/toml/parse-stream.js
 var require_parse_stream = __commonJS(function(exports2, module2) {
   module2.exports = parseStream;
   var stream = __require("stream");
@@ -1757,7 +1757,7 @@ var require_parse_stream = __commonJS(function(exports2, module2) {
   }
 });
 
-// ../../node_modules/.bun/@iarna+toml@2.2.5/node_modules/@iarna/toml/parse.js
+// ../../../../../../../../../../../home/matti/percher-ci-b2/node_modules/.bun/@iarna+toml@2.2.5/node_modules/@iarna/toml/parse.js
 var require_parse = __commonJS(function(exports2, module2) {
   module2.exports = require_parse_string();
   module2.exports.async = require_parse_async();
@@ -1765,7 +1765,7 @@ var require_parse = __commonJS(function(exports2, module2) {
   module2.exports.prettyError = require_parse_pretty_error();
 });
 
-// ../../node_modules/.bun/@iarna+toml@2.2.5/node_modules/@iarna/toml/stringify.js
+// ../../../../../../../../../../../home/matti/percher-ci-b2/node_modules/.bun/@iarna+toml@2.2.5/node_modules/@iarna/toml/stringify.js
 var require_stringify = __commonJS(function(exports2, module2) {
   module2.exports = stringify;
   module2.exports.value = stringifyInline;
@@ -2044,7 +2044,7 @@ var require_stringify = __commonJS(function(exports2, module2) {
   }
 });
 
-// ../../node_modules/.bun/fast-fifo@1.3.2/node_modules/fast-fifo/fixed-size.js
+// ../../../../../../../../../../../home/matti/percher-ci-b2/node_modules/.bun/fast-fifo@1.3.2/node_modules/fast-fifo/fixed-size.js
 var require_fixed_size = __commonJS(function(exports2, module2) {
   module2.exports = class FixedFIFO {
     constructor(hwm) {
@@ -2085,7 +2085,7 @@ var require_fixed_size = __commonJS(function(exports2, module2) {
   };
 });
 
-// ../../node_modules/.bun/fast-fifo@1.3.2/node_modules/fast-fifo/index.js
+// ../../../../../../../../../../../home/matti/percher-ci-b2/node_modules/.bun/fast-fifo@1.3.2/node_modules/fast-fifo/index.js
 var require_fast_fifo = __commonJS(function(exports2, module2) {
   var FixedFIFO = require_fixed_size();
   module2.exports = class FastFIFO {
@@ -2132,7 +2132,7 @@ var require_fast_fifo = __commonJS(function(exports2, module2) {
   };
 });
 
-// ../../node_modules/.bun/b4a@1.8.0/node_modules/b4a/index.js
+// ../../../../../../../../../../../home/matti/percher-ci-b2/node_modules/.bun/b4a@1.8.0/node_modules/b4a/index.js
 var require_b4a = __commonJS(function(exports2, module2) {
   function isBuffer(value) {
     return Buffer.isBuffer(value) || value instanceof Uint8Array;
@@ -2288,7 +2288,7 @@ var require_b4a = __commonJS(function(exports2, module2) {
   };
 });
 
-// ../../node_modules/.bun/text-decoder@1.2.7/node_modules/text-decoder/lib/pass-through-decoder.js
+// ../../../../../../../../../../../home/matti/percher-ci-b2/node_modules/.bun/text-decoder@1.2.7/node_modules/text-decoder/lib/pass-through-decoder.js
 var require_pass_through_decoder = __commonJS(function(exports2, module2) {
   var b4a = require_b4a();
   module2.exports = class PassThroughDecoder {
@@ -2307,7 +2307,7 @@ var require_pass_through_decoder = __commonJS(function(exports2, module2) {
   };
 });
 
-// ../../node_modules/.bun/text-decoder@1.2.7/node_modules/text-decoder/lib/utf8-decoder.js
+// ../../../../../../../../../../../home/matti/percher-ci-b2/node_modules/.bun/text-decoder@1.2.7/node_modules/text-decoder/lib/utf8-decoder.js
 var require_utf8_decoder = __commonJS(function(exports2, module2) {
   var b4a = require_b4a();
   module2.exports = class UTF8Decoder {
@@ -2481,7 +2481,7 @@ var require_utf8_decoder = __commonJS(function(exports2, module2) {
   }
 });
 
-// ../../node_modules/.bun/text-decoder@1.2.7/node_modules/text-decoder/index.js
+// ../../../../../../../../../../../home/matti/percher-ci-b2/node_modules/.bun/text-decoder@1.2.7/node_modules/text-decoder/index.js
 var require_text_decoder = __commonJS(function(exports2, module2) {
   var PassThroughDecoder = require_pass_through_decoder();
   var UTF8Decoder = require_utf8_decoder();
@@ -2542,7 +2542,7 @@ var require_text_decoder = __commonJS(function(exports2, module2) {
   }
 });
 
-// ../../node_modules/.bun/streamx@2.25.0/node_modules/streamx/index.js
+// ../../../../../../../../../../../home/matti/percher-ci-b2/node_modules/.bun/streamx@2.25.0/node_modules/streamx/index.js
 var require_streamx = __commonJS(function(exports2, module2) {
   var { EventEmitter } = __require("events");
   var STREAM_DESTROYED = new Error("Stream was destroyed");
@@ -3617,7 +3617,7 @@ var require_streamx = __commonJS(function(exports2, module2) {
   };
 });
 
-// ../../node_modules/.bun/b4a@1.8.1/node_modules/b4a/index.js
+// ../../../../../../../../../../../home/matti/percher-ci-b2/node_modules/.bun/b4a@1.8.1/node_modules/b4a/index.js
 var require_b4a2 = __commonJS(function(exports2, module2) {
   function isBuffer(value) {
     return Buffer.isBuffer(value) || value instanceof Uint8Array;
@@ -3773,7 +3773,7 @@ var require_b4a2 = __commonJS(function(exports2, module2) {
   };
 });
 
-// ../../node_modules/.bun/tar-stream@3.1.9/node_modules/tar-stream/headers.js
+// ../../../../../../../../../../../home/matti/percher-ci-b2/node_modules/.bun/tar-stream@3.1.9/node_modules/tar-stream/headers.js
 var require_headers = __commonJS(function(exports2) {
   var b4a = require_b4a2();
   var ZEROS = "0000000000000000000";
@@ -4069,7 +4069,7 @@ var require_headers = __commonJS(function(exports2) {
   }
 });
 
-// ../../node_modules/.bun/tar-stream@3.1.9/node_modules/tar-stream/extract.js
+// ../../../../../../../../../../../home/matti/percher-ci-b2/node_modules/.bun/tar-stream@3.1.9/node_modules/tar-stream/extract.js
 var require_extract = __commonJS(function(exports2, module2) {
   var { Writable, Readable, getStreamError } = require_streamx();
   var FIFO = require_fast_fifo();
@@ -4437,7 +4437,7 @@ var require_extract = __commonJS(function(exports2, module2) {
   }
 });
 
-// ../../node_modules/.bun/tar-stream@3.1.9/node_modules/tar-stream/constants.js
+// ../../../../../../../../../../../home/matti/percher-ci-b2/node_modules/.bun/tar-stream@3.1.9/node_modules/tar-stream/constants.js
 var require_constants = __commonJS(function(exports2, module2) {
   var constants = {
     S_IFMT: 61440,
@@ -4454,7 +4454,7 @@ var require_constants = __commonJS(function(exports2, module2) {
   }
 });
 
-// ../../node_modules/.bun/tar-stream@3.1.9/node_modules/tar-stream/pack.js
+// ../../../../../../../../../../../home/matti/percher-ci-b2/node_modules/.bun/tar-stream@3.1.9/node_modules/tar-stream/pack.js
 var require_pack = __commonJS(function(exports2, module2) {
   var { Readable, Writable, getStreamError } = require_streamx();
   var b4a = require_b4a2();
@@ -4854,7 +4854,7 @@ var package_default;
 var init_package = __esm(() => {
   package_default = {
     name: "@percher/client",
-    version: "1.4.0",
+    version: "1.4.1",
     description: "Official TypeScript SDK for Percher: deploy apps, manage env vars, stream logs, and automate hosting workflows.",
     keywords: [
       "percher",
@@ -4895,8 +4895,8 @@ var init_package = __esm(() => {
       typecheck: "tsc --noEmit"
     },
     dependencies: {
-      "@percher/shared": "^1.3.0",
-      "@percher/toml": "^1.0.5"
+      "@percher/shared": "^1.3.1",
+      "@percher/toml": "^1.0.6"
     },
     devDependencies: {
       "bun-types": "^1.1.0",
@@ -5013,8 +5013,8 @@ class Http {
   get(path, opts) {
     return this.request("GET", path, undefined, opts?.signal);
   }
-  post(path, body) {
-    return this.request("POST", path, body);
+  post(path, body, opts) {
+    return this.request("POST", path, body, opts?.signal);
   }
   put(path, body) {
     return this.request("PUT", path, body);
@@ -5043,6 +5043,154 @@ class Http {
       throw await this.parseError(res);
     return res;
   }
+  async exportCapability(method, path, capability, signal) {
+    if (!/^pce_[A-Za-z0-9_-]{43}$/.test(capability) || !(method === "GET" && path === "/export/v2/status" || method === "POST" && (path === "/export/v2/prepare" || path === "/export/v2/grants"))) {
+      throw new PercherApiError("Invalid export request.", {
+        status: 400,
+        code: "EXPORT_INVALID_REQUEST"
+      });
+    }
+    const headers = this.buildHeaders();
+    headers.Authorization = `Bearer ${capability}`;
+    const operationSignal = signal ? AbortSignal.any([signal, AbortSignal.timeout(30000)]) : AbortSignal.timeout(30000);
+    let res;
+    try {
+      operationSignal.throwIfAborted();
+      res = await this.fetchImpl(`${this.apiUrl}${path}`, {
+        method,
+        headers,
+        signal: operationSignal,
+        redirect: "error"
+      });
+    } catch {
+      signal?.throwIfAborted();
+      throw new NetworkError("Export preparation request failed.");
+    }
+    if (!res.ok) {
+      throw await this.exportError(res, operationSignal, signal, "Export request refused. Check its status before retrying.");
+    }
+    const validStatus = path.endsWith("/grants") ? res.status === 201 : path.endsWith("/prepare") ? res.status === 200 || res.status === 202 : res.status === 200;
+    if (!validStatus || res.headers.get("content-type")?.split(";")[0]?.trim().toLowerCase() !== "application/json" || !res.body) {
+      res.body?.cancel().catch(() => {});
+      throw new PercherApiError("Invalid export response.", {
+        status: 502,
+        code: "EXPORT_INVALID_RESPONSE"
+      });
+    }
+    const reader = res.body.getReader();
+    const abortRead = () => {
+      reader.cancel().catch(() => {});
+    };
+    operationSignal.addEventListener("abort", abortRead, { once: true });
+    if (operationSignal.aborted)
+      abortRead();
+    const chunks = [];
+    let length = 0;
+    try {
+      for (;; ) {
+        operationSignal.throwIfAborted();
+        const part = await reader.read();
+        if (part.done)
+          break;
+        length += part.value.byteLength;
+        if (length > 8192)
+          throw new Error;
+        chunks.push(part.value);
+      }
+      operationSignal.throwIfAborted();
+      const bytes = new Uint8Array(length);
+      let offset = 0;
+      for (const chunk of chunks) {
+        bytes.set(chunk, offset);
+        offset += chunk.byteLength;
+      }
+      return JSON.parse(new TextDecoder("utf-8", { fatal: true }).decode(bytes));
+    } catch {
+      reader.cancel().catch(() => {});
+      signal?.throwIfAborted();
+      throw new PercherApiError("Invalid export response.", {
+        status: 502,
+        code: "EXPORT_INVALID_RESPONSE"
+      });
+    } finally {
+      operationSignal.removeEventListener("abort", abortRead);
+      reader.releaseLock();
+    }
+  }
+  async exportDownload(path, signal) {
+    if (!/^\/export\/download\/pcd_[A-Za-z0-9_-]{43}$/.test(path)) {
+      throw new PercherApiError("Invalid export download.", {
+        status: 400,
+        code: "EXPORT_INVALID_REQUEST"
+      });
+    }
+    let res;
+    try {
+      signal?.throwIfAborted();
+      res = await this.fetchImpl(`${this.apiUrl}${path}`, {
+        headers: { ...this.buildHeaders(), Accept: "application/gzip" },
+        signal,
+        redirect: "error"
+      });
+    } catch {
+      signal?.throwIfAborted();
+      throw new NetworkError("Export download failed.");
+    }
+    if (!res.ok) {
+      const operationSignal = signal ? AbortSignal.any([signal, AbortSignal.timeout(30000)]) : AbortSignal.timeout(30000);
+      throw await this.exportError(res, operationSignal, signal, "Export download refused. Request a new download grant if it was spent.");
+    }
+    return res;
+  }
+  async exportError(res, operationSignal, callerSignal, message) {
+    const invalid = () => new PercherApiError("Invalid export response.", {
+      status: 502,
+      code: "EXPORT_INVALID_RESPONSE"
+    });
+    if (!res.body)
+      return invalid();
+    const reader = res.body.getReader();
+    const cancel = () => {
+      reader.cancel().catch(() => {});
+    };
+    operationSignal.addEventListener("abort", cancel, { once: true });
+    if (operationSignal.aborted)
+      cancel();
+    try {
+      const chunks = [];
+      let length = 0;
+      for (;; ) {
+        operationSignal.throwIfAborted();
+        const part = await reader.read();
+        if (part.done)
+          break;
+        length += part.value.byteLength;
+        if (length > 8192)
+          throw new Error;
+        chunks.push(part.value);
+      }
+      operationSignal.throwIfAborted();
+      const bytes = new Uint8Array(length);
+      let offset = 0;
+      for (const chunk of chunks) {
+        bytes.set(chunk, offset);
+        offset += chunk.byteLength;
+      }
+      const raw = JSON.parse(new TextDecoder("utf-8", { fatal: true }).decode(bytes));
+      const error = raw && typeof raw === "object" && !Array.isArray(raw) ? raw.error : null;
+      const code = error && typeof error === "object" && !Array.isArray(error) ? error.code : null;
+      if (typeof code !== "string" || !EXPORT_ERROR_CODES.has(code))
+        return invalid();
+      return new PercherApiError(message, { status: res.status, code });
+    } catch {
+      cancel();
+      callerSignal?.throwIfAborted();
+      return invalid();
+    } finally {
+      operationSignal.removeEventListener("abort", cancel);
+      reader.releaseLock();
+    }
+  }
   async getBinary(path) {
     const headers = this.buildHeaders();
     let res;
@@ -5166,10 +5314,32 @@ class Http {
     });
   }
 }
-var BODY_SNIPPET_MAX = 120;
+var BODY_SNIPPET_MAX = 120, EXPORT_ERROR_CODES;
 var init_http = __esm(() => {
   init_package();
   init_errors();
+  EXPORT_ERROR_CODES = new Set([
+    "EXPORT_NOT_FOUND",
+    "EXPORT_CONFLICT",
+    "EXPORT_BUSY",
+    "EXPORT_NOT_READY",
+    "EXPORT_DISPATCH_BUSY",
+    "EXPORT_DELIVERY_BUSY",
+    "EXPORT_DELIVERY_NOT_FOUND",
+    "EXPORT_DELIVERY_EXHAUSTED",
+    "EXPORT_DELIVERY_UNAVAILABLE",
+    "EXPORT_DELIVERY_ABORTED",
+    "EXPORT_GRANT_SPENT",
+    "EXPORT_EXPIRED",
+    "EXPORT_RATE_LIMIT",
+    "EXPORT_CAPACITY",
+    "EXPORT_LEDGER_UNAVAILABLE",
+    "EXPORT_LOCK_UNAVAILABLE",
+    "EXPORT_UNAVAILABLE",
+    "EXPORT_V2_UNAVAILABLE",
+    "UNAUTHORIZED",
+    "FORBIDDEN"
+  ]);
 });
 
 // ../client/dist/resources/account.js
@@ -5244,6 +5414,30 @@ class AnonResource {
   }
 }
 
+// ../client/dist/resources/apps-publish.js
+function publishInline(http, input) {
+  const params = new URLSearchParams;
+  params.set("name", input.name);
+  params.set("runtime", input.runtime);
+  if (input.framework)
+    params.set("framework", input.framework);
+  if (input.check)
+    params.set("check", "1");
+  else if (input.type === "preview")
+    params.set("type", "preview");
+  if (input.note)
+    params.set("note", input.note);
+  if (input.noCache)
+    params.set("noCache", "1");
+  const headers = {};
+  if (input.tarballHash)
+    headers["X-Tarball-Hash"] = input.tarballHash;
+  if (input.emitBytes !== undefined && Number.isFinite(input.emitBytes) && input.emitBytes >= 0) {
+    headers["X-Percher-Emit-Bytes"] = String(Math.round(input.emitBytes));
+  }
+  return http.postBinary(`/apps/publish?${params.toString()}`, input.tarball, headers);
+}
+
 // ../client/dist/resources/apps-types.js
 function isDeployAlreadyInProgress(res) {
   return res.status === "already_in_progress";
@@ -5303,27 +5497,11 @@ class AppsResource {
     }
     return this.http.postBinary(`/apps/${encodeURIComponent(id)}/deploys${qs ? `?${qs}` : ""}`, input.tarball, headers);
   }
+  publishPatch(appRef, input) {
+    return this.http.post(`/apps/${encodeURIComponent(appRef)}/publish/patch`, input);
+  }
   publishInline(input) {
-    const params = new URLSearchParams;
-    params.set("name", input.name);
-    params.set("runtime", input.runtime);
-    if (input.framework)
-      params.set("framework", input.framework);
-    if (input.check)
-      params.set("check", "1");
-    else if (input.type === "preview")
-      params.set("type", "preview");
-    if (input.note)
-      params.set("note", input.note);
-    if (input.noCache)
-      params.set("noCache", "1");
-    const headers = {};
-    if (input.tarballHash)
-      headers["X-Tarball-Hash"] = input.tarballHash;
-    if (input.emitBytes !== undefined && Number.isFinite(input.emitBytes) && input.emitBytes >= 0) {
-      headers["X-Percher-Emit-Bytes"] = String(Math.round(input.emitBytes));
-    }
-    return this.http.postBinary(`/apps/publish?${params.toString()}`, input.tarball, headers);
+    return publishInline(this.http, input);
   }
   promotePreview(appRef, deployId) {
     return this.http.post(`/apps/${encodeURIComponent(appRef)}/deploys/${encodeURIComponent(deployId)}/promote`, {});
@@ -5825,11 +6003,91 @@ class EnvScanResource {
 }
 
 // ../client/dist/resources/export.js
+function invalid() {
+  throw new PercherApiError("Server did not provide a valid export v2 response. No legacy export was downloaded.", { status: 502, code: "EXPORT_INVALID_RESPONSE" });
+}
+function record2(value, keys) {
+  if (!value || typeof value !== "object" || Array.isArray(value) || Object.keys(value).sort().join("|") !== keys.sort().join("|"))
+    return invalid();
+  return value;
+}
+function instant(value) {
+  return typeof value === "string" && value.length === 24 && Number.isFinite(Date.parse(value)) && new Date(value).toISOString() === value;
+}
+function identifier(value) {
+  return typeof value === "string" && /^[A-Za-z0-9_-]{1,128}$/.test(value);
+}
+function status(value) {
+  const v = record2(value, ["operationId", "state", "revision", "deadline", "cleanupReason"]);
+  if (!identifier(v.operationId) || typeof v.state !== "string" || !["NOT_REQUESTED", "REQUESTED", "PREPARING", "READY", "CLEANUP_REQUIRED"].includes(v.state) || typeof v.revision !== "number" || !Number.isSafeInteger(v.revision) || v.revision < 0 || typeof v.deadline !== "number" || !Number.isSafeInteger(v.deadline) || v.deadline <= 0 || (v.state === "CLEANUP_REQUIRED" ? typeof v.cleanupReason !== "string" || !["INTERRUPTED", "AUTHORITY_LOST", "EXPIRED", "PROCESSOR_FAILED"].includes(v.cleanupReason) : v.cleanupReason !== null))
+    return invalid();
+  return Object.freeze({ ...v });
+}
+
 class ExportResource {
   http;
   constructor(http) {
     this.http = http;
   }
+  async mintV2(appRef, options) {
+    const value = await this.http.post(`/apps/${encodeURIComponent(appRef)}/export/mint`, { protocolVersion: 2, deliveryKind: options?.deliveryKind ?? "cli" }, { signal: options?.signal });
+    const v = record2(value, [
+      "protocolVersion",
+      "operationId",
+      "tokenId",
+      "preparationToken",
+      "expiresAt",
+      "ttlSeconds",
+      "includeSecrets"
+    ]);
+    if (v.protocolVersion !== 2 || !identifier(v.operationId) || !identifier(v.tokenId) || typeof v.preparationToken !== "string" || !/^pce_[A-Za-z0-9_-]{43}$/.test(v.preparationToken) || !instant(v.expiresAt) || Date.parse(v.expiresAt) > Date.now() + 900000 || v.ttlSeconds !== 900 || v.includeSecrets !== false)
+      return invalid();
+    if (Date.parse(v.expiresAt) <= Date.now())
+      throw new PercherApiError("Export preparation expired. Start a new export.", {
+        status: 410,
+        code: "EXPORT_EXPIRED"
+      });
+    return Object.freeze({ ...v });
+  }
+  async prepareV2(capability, signal) {
+    return status(await this.http.exportCapability("POST", "/export/v2/prepare", capability, signal));
+  }
+  async statusV2(capability, signal) {
+    return status(await this.http.exportCapability("GET", "/export/v2/status", capability, signal));
+  }
+  async grantV2(capability, signal, options) {
+    const v = record2(await this.http.exportCapability("POST", "/export/v2/grants", capability, signal), ["downloadUrl", "expiresAt"]);
+    if (typeof v.downloadUrl !== "string" || !instant(v.expiresAt) || Date.parse(v.expiresAt) <= Date.now())
+      return invalid();
+    this.v2DownloadPath(v.downloadUrl, options?.publicDownloadOrigin);
+    return Object.freeze({ downloadUrl: v.downloadUrl, expiresAt: v.expiresAt });
+  }
+  v2DownloadPath(downloadUrl, publicDownloadOrigin) {
+    try {
+      const base = new URL(this.http.baseUrl());
+      const expected = publicDownloadOrigin === undefined ? base.origin : publicDownloadOrigin;
+      const configured = new URL(expected);
+      if (!["http:", "https:"].includes(configured.protocol) || configured.origin !== expected)
+        return invalid();
+      const url = new URL(downloadUrl, configured);
+      if (url.origin !== expected || url.username || url.password || url.search || url.hash || !/^\/export\/download\/pcd_[A-Za-z0-9_-]{43}$/.test(url.pathname))
+        return invalid();
+      return url.pathname;
+    } catch {
+      return invalid();
+    }
+  }
+  async downloadV2(downloadUrl, signal) {
+    const res = await this.http.exportDownload(this.v2DownloadPath(downloadUrl), signal);
+    const size = res.headers.get("x-export-bytes");
+    const contentLength = res.headers.get("content-length");
+    const sha256 = res.headers.get("x-export-sha256");
+    if (res.status !== 200 || res.headers.get("content-type") !== "application/gzip" || !res.body || res.body.locked || !size || !/^[1-9][0-9]*$/.test(size) || !Number.isSafeInteger(Number(size)) || Number(size) > 2 ** 40 || contentLength !== null && contentLength !== size || !sha256 || !/^[a-f0-9]{64}$/.test(sha256) || ![null, "identity"].includes(res.headers.get("content-encoding"))) {
+      res.body?.cancel().catch(() => {});
+      return invalid();
+    }
+    return { response: res, bytes: Number(size), sha256 };
+  }
   mint(appRef, options) {
     return this.http.post(`/apps/${encodeURIComponent(appRef)}/export/mint`, {
       deliveryKind: options?.deliveryKind
@@ -5852,6 +6110,9 @@ class ExportResource {
     return this.http.get(`/apps/${encodeURIComponent(appRef)}/export/git/check`);
   }
 }
+var init_export = __esm(() => {
+  init_errors();
+});
 
 // ../client/dist/resources/hooks.js
 class HooksResource {
@@ -6107,6 +6368,30 @@ class InvitesResource {
   }
 }
 
+// ../client/dist/resources/source.js
+class SourceResource {
+  http;
+  constructor(http) {
+    this.http = http;
+  }
+  base(appRef, version) {
+    return `/apps/${encodeURIComponent(appRef)}/versions/${encodeURIComponent(version)}`;
+  }
+  listFiles(appRef, version = "live") {
+    return this.http.get(`${this.base(appRef, version)}/files`);
+  }
+  getFile(appRef, path, version = "live") {
+    const qs = new URLSearchParams({ path }).toString();
+    return this.http.get(`${this.base(appRef, version)}/file?${qs}`);
+  }
+  getConfig(appRef, sha) {
+    return this.http.get(`${this.base(appRef, sha)}/config`);
+  }
+  getManifest(appRef, sha) {
+    return this.http.get(`${this.base(appRef, sha)}/manifest`);
+  }
+}
+
 // ../client/dist/resources/support.js
 class SupportResource {
   http;
@@ -6210,6 +6495,7 @@ class PercherClient {
   invites;
   transfers;
   support;
+  source;
   constructor(options = {}) {
     const bothExplicit = options.apiUrl !== undefined && options.token !== undefined;
     const defaults = bothExplicit ? undefined : loadConfig();
@@ -6243,6 +6529,7 @@ class PercherClient {
     this.invites = new InvitesResource(http);
     this.transfers = new TransfersResource(http);
     this.support = new SupportResource(http);
+    this.source = new SourceResource(http);
   }
 }
 var init_client = __esm(() => {
@@ -6251,6 +6538,7 @@ var init_client = __esm(() => {
   init_apps();
   init_auth();
   init_data();
+  init_export();
   init_logs();
 });
 
@@ -6430,11 +6718,12 @@ var init_dist = __esm(() => {
   init_apps();
   init_auth();
   init_data();
+  init_export();
   init_logs();
   init_telemetry_consent();
 });
 
-// ../../node_modules/.bun/ignore@7.0.5/node_modules/ignore/index.js
+// ../../../../../../../../../../../home/matti/percher-ci-b2/node_modules/.bun/ignore@7.0.5/node_modules/ignore/index.js
 var require_ignore = __commonJS(function(exports2, module2) {
   function makeArray(subject) {
     return Array.isArray(subject) ? subject : [subject];
@@ -6761,7 +7050,7 @@ var require_ignore = __commonJS(function(exports2, module2) {
   define2(module2.exports, Symbol.for("setupWindows"), setupWindows);
 });
 
-// ../../node_modules/.bun/jscodeshift@17.4.0/node_modules/jscodeshift/src/utils/intersection.js
+// ../../../../../../../../../../../home/matti/percher-ci-b2/node_modules/.bun/jscodeshift@17.4.0/node_modules/jscodeshift/src/utils/intersection.js
 var require_intersection = __commonJS(function(exports2, module2) {
   module2.exports = function(arrays) {
     const result = new Set(arrays[0]);
@@ -6783,7 +7072,7 @@ var require_intersection = __commonJS(function(exports2, module2) {
   };
 });
 
-// ../../node_modules/.bun/tslib@2.8.1/node_modules/tslib/tslib.js
+// ../../../../../../../../../../../home/matti/percher-ci-b2/node_modules/.bun/tslib@2.8.1/node_modules/tslib/tslib.js
 var require_tslib = __commonJS(function(exports2, module2) {
   var __extends;
   var __assign;
@@ -7388,7 +7677,7 @@ var require_tslib = __commonJS(function(exports2, module2) {
   });
 });
 
-// ../../node_modules/.bun/ast-types@0.16.1/node_modules/ast-types/lib/shared.js
+// ../../../../../../../../../../../home/matti/percher-ci-b2/node_modules/.bun/ast-types@0.16.1/node_modules/ast-types/lib/shared.js
 var require_shared = __commonJS(function(exports2) {
   Object.defineProperty(exports2, "__esModule", { value: true });
   exports2.maybeSetModuleExports = undefined;
@@ -7458,7 +7747,7 @@ var require_shared = __commonJS(function(exports2) {
   exports2.maybeSetModuleExports = maybeSetModuleExports;
 });
 
-// ../../node_modules/.bun/ast-types@0.16.1/node_modules/ast-types/lib/types.js
+// ../../../../../../../../../../../home/matti/percher-ci-b2/node_modules/.bun/ast-types@0.16.1/node_modules/ast-types/lib/types.js
 var require_types = __commonJS(function(exports2, module2) {
   Object.defineProperty(exports2, "__esModule", { value: true });
   exports2.Def = undefined;
@@ -8120,7 +8409,7 @@ var require_types = __commonJS(function(exports2, module2) {
   });
 });
 
-// ../../node_modules/.bun/ast-types@0.16.1/node_modules/ast-types/lib/path.js
+// ../../../../../../../../../../../home/matti/percher-ci-b2/node_modules/.bun/ast-types@0.16.1/node_modules/ast-types/lib/path.js
 var require_path = __commonJS(function(exports2, module2) {
   Object.defineProperty(exports2, "__esModule", { value: true });
   var tslib_1 = require_tslib();
@@ -8421,7 +8710,7 @@ var require_path = __commonJS(function(exports2, module2) {
   });
 });
 
-// ../../node_modules/.bun/ast-types@0.16.1/node_modules/ast-types/lib/scope.js
+// ../../../../../../../../../../../home/matti/percher-ci-b2/node_modules/.bun/ast-types@0.16.1/node_modules/ast-types/lib/scope.js
 var require_scope = __commonJS(function(exports2, module2) {
   Object.defineProperty(exports2, "__esModule", { value: true });
   var tslib_1 = require_tslib();
@@ -8689,7 +8978,7 @@ var require_scope = __commonJS(function(exports2, module2) {
   });
 });
 
-// ../../node_modules/.bun/ast-types@0.16.1/node_modules/ast-types/lib/node-path.js
+// ../../../../../../../../../../../home/matti/percher-ci-b2/node_modules/.bun/ast-types@0.16.1/node_modules/ast-types/lib/node-path.js
 var require_node_path = __commonJS(function(exports2, module2) {
   Object.defineProperty(exports2, "__esModule", { value: true });
   var tslib_1 = require_tslib();
@@ -9044,7 +9333,7 @@ var require_node_path = __commonJS(function(exports2, module2) {
   });
 });
 
-// ../../node_modules/.bun/ast-types@0.16.1/node_modules/ast-types/lib/path-visitor.js
+// ../../../../../../../../../../../home/matti/percher-ci-b2/node_modules/.bun/ast-types@0.16.1/node_modules/ast-types/lib/path-visitor.js
 var require_path_visitor = __commonJS(function(exports2, module2) {
   Object.defineProperty(exports2, "__esModule", { value: true });
   var tslib_1 = require_tslib();
@@ -9335,7 +9624,7 @@ var require_path_visitor = __commonJS(function(exports2, module2) {
   });
 });
 
-// ../../node_modules/.bun/ast-types@0.16.1/node_modules/ast-types/lib/equiv.js
+// ../../../../../../../../../../../home/matti/percher-ci-b2/node_modules/.bun/ast-types@0.16.1/node_modules/ast-types/lib/equiv.js
 var require_equiv = __commonJS(function(exports2, module2) {
   Object.defineProperty(exports2, "__esModule", { value: true });
   var tslib_1 = require_tslib();
@@ -9486,7 +9775,7 @@ var require_equiv = __commonJS(function(exports2, module2) {
   });
 });
 
-// ../../node_modules/.bun/ast-types@0.16.1/node_modules/ast-types/lib/fork.js
+// ../../../../../../../../../../../home/matti/percher-ci-b2/node_modules/.bun/ast-types@0.16.1/node_modules/ast-types/lib/fork.js
 var require_fork = __commonJS(function(exports2, module2) {
   Object.defineProperty(exports2, "__esModule", { value: true });
   var tslib_1 = require_tslib();
@@ -9544,7 +9833,7 @@ var require_fork = __commonJS(function(exports2, module2) {
   });
 });
 
-// ../../node_modules/.bun/ast-types@0.16.1/node_modules/ast-types/lib/def/operators/core.js
+// ../../../../../../../../../../../home/matti/percher-ci-b2/node_modules/.bun/ast-types@0.16.1/node_modules/ast-types/lib/def/operators/core.js
 var require_core = __commonJS(function(exports2, module2) {
   Object.defineProperty(exports2, "__esModule", { value: true });
   var shared_1 = require_shared();
@@ -9599,7 +9888,7 @@ var require_core = __commonJS(function(exports2, module2) {
   });
 });
 
-// ../../node_modules/.bun/ast-types@0.16.1/node_modules/ast-types/lib/def/operators/es2016.js
+// ../../../../../../../../../../../home/matti/percher-ci-b2/node_modules/.bun/ast-types@0.16.1/node_modules/ast-types/lib/def/operators/es2016.js
 var require_es2016 = __commonJS(function(exports2, module2) {
   Object.defineProperty(exports2, "__esModule", { value: true });
   var tslib_1 = require_tslib();
@@ -9621,7 +9910,7 @@ var require_es2016 = __commonJS(function(exports2, module2) {
   });
 });
 
-// ../../node_modules/.bun/ast-types@0.16.1/node_modules/ast-types/lib/def/operators/es2020.js
+// ../../../../../../../../../../../home/matti/percher-ci-b2/node_modules/.bun/ast-types@0.16.1/node_modules/ast-types/lib/def/operators/es2020.js
 var require_es2020 = __commonJS(function(exports2, module2) {
   Object.defineProperty(exports2, "__esModule", { value: true });
   var tslib_1 = require_tslib();
@@ -9640,7 +9929,7 @@ var require_es2020 = __commonJS(function(exports2, module2) {
   });
 });
 
-// ../../node_modules/.bun/ast-types@0.16.1/node_modules/ast-types/lib/def/operators/es2021.js
+// ../../../../../../../../../../../home/matti/percher-ci-b2/node_modules/.bun/ast-types@0.16.1/node_modules/ast-types/lib/def/operators/es2021.js
 var require_es2021 = __commonJS(function(exports2, module2) {
   Object.defineProperty(exports2, "__esModule", { value: true });
   var tslib_1 = require_tslib();
@@ -9662,7 +9951,7 @@ var require_es2021 = __commonJS(function(exports2, module2) {
   });
 });
 
-// ../../node_modules/.bun/ast-types@0.16.1/node_modules/ast-types/lib/def/core.js
+// ../../../../../../../../../../../home/matti/percher-ci-b2/node_modules/.bun/ast-types@0.16.1/node_modules/ast-types/lib/def/core.js
 var require_core2 = __commonJS(function(exports2, module2) {
   Object.defineProperty(exports2, "__esModule", { value: true });
   var tslib_1 = require_tslib();
@@ -9751,7 +10040,7 @@ var require_core2 = __commonJS(function(exports2, module2) {
   });
 });
 
-// ../../node_modules/.bun/ast-types@0.16.1/node_modules/ast-types/lib/def/es6.js
+// ../../../../../../../../../../../home/matti/percher-ci-b2/node_modules/.bun/ast-types@0.16.1/node_modules/ast-types/lib/def/es6.js
 var require_es6 = __commonJS(function(exports2, module2) {
   Object.defineProperty(exports2, "__esModule", { value: true });
   var tslib_1 = require_tslib();
@@ -9816,7 +10105,7 @@ var require_es6 = __commonJS(function(exports2, module2) {
   });
 });
 
-// ../../node_modules/.bun/ast-types@0.16.1/node_modules/ast-types/lib/def/es2016.js
+// ../../../../../../../../../../../home/matti/percher-ci-b2/node_modules/.bun/ast-types@0.16.1/node_modules/ast-types/lib/def/es2016.js
 var require_es20162 = __commonJS(function(exports2, module2) {
   Object.defineProperty(exports2, "__esModule", { value: true });
   var tslib_1 = require_tslib();
@@ -9833,7 +10122,7 @@ var require_es20162 = __commonJS(function(exports2, module2) {
   });
 });
 
-// ../../node_modules/.bun/ast-types@0.16.1/node_modules/ast-types/lib/def/es2017.js
+// ../../../../../../../../../../../home/matti/percher-ci-b2/node_modules/.bun/ast-types@0.16.1/node_modules/ast-types/lib/def/es2017.js
 var require_es2017 = __commonJS(function(exports2, module2) {
   Object.defineProperty(exports2, "__esModule", { value: true });
   var tslib_1 = require_tslib();
@@ -9854,7 +10143,7 @@ var require_es2017 = __commonJS(function(exports2, module2) {
   });
 });
 
-// ../../node_modules/.bun/ast-types@0.16.1/node_modules/ast-types/lib/def/es2018.js
+// ../../../../../../../../../../../home/matti/percher-ci-b2/node_modules/.bun/ast-types@0.16.1/node_modules/ast-types/lib/def/es2018.js
 var require_es2018 = __commonJS(function(exports2, module2) {
   Object.defineProperty(exports2, "__esModule", { value: true });
   var tslib_1 = require_tslib();
@@ -9880,7 +10169,7 @@ var require_es2018 = __commonJS(function(exports2, module2) {
   });
 });
 
-// ../../node_modules/.bun/ast-types@0.16.1/node_modules/ast-types/lib/def/es2019.js
+// ../../../../../../../../../../../home/matti/percher-ci-b2/node_modules/.bun/ast-types@0.16.1/node_modules/ast-types/lib/def/es2019.js
 var require_es2019 = __commonJS(function(exports2, module2) {
   Object.defineProperty(exports2, "__esModule", { value: true });
   var tslib_1 = require_tslib();
@@ -9901,7 +10190,7 @@ var require_es2019 = __commonJS(function(exports2, module2) {
   });
 });
 
-// ../../node_modules/.bun/ast-types@0.16.1/node_modules/ast-types/lib/def/es2020.js
+// ../../../../../../../../../../../home/matti/percher-ci-b2/node_modules/.bun/ast-types@0.16.1/node_modules/ast-types/lib/def/es2020.js
 var require_es20202 = __commonJS(function(exports2, module2) {
   Object.defineProperty(exports2, "__esModule", { value: true });
   var tslib_1 = require_tslib();
@@ -9932,7 +10221,7 @@ var require_es20202 = __commonJS(function(exports2, module2) {
   });
 });
 
-// ../../node_modules/.bun/ast-types@0.16.1/node_modules/ast-types/lib/def/es2021.js
+// ../../../../../../../../../../../home/matti/percher-ci-b2/node_modules/.bun/ast-types@0.16.1/node_modules/ast-types/lib/def/es2021.js
 var require_es20212 = __commonJS(function(exports2, module2) {
   Object.defineProperty(exports2, "__esModule", { value: true });
   var tslib_1 = require_tslib();
@@ -9949,7 +10238,7 @@ var require_es20212 = __commonJS(function(exports2, module2) {
   });
 });
 
-// ../../node_modules/.bun/ast-types@0.16.1/node_modules/ast-types/lib/def/es2022.js
+// ../../../../../../../../../../../home/matti/percher-ci-b2/node_modules/.bun/ast-types@0.16.1/node_modules/ast-types/lib/def/es2022.js
 var require_es2022 = __commonJS(function(exports2, module2) {
   Object.defineProperty(exports2, "__esModule", { value: true });
   var tslib_1 = require_tslib();
@@ -9968,7 +10257,7 @@ var require_es2022 = __commonJS(function(exports2, module2) {
   });
 });
 
-// ../../node_modules/.bun/ast-types@0.16.1/node_modules/ast-types/lib/def/es-proposals.js
+// ../../../../../../../../../../../home/matti/percher-ci-b2/node_modules/.bun/ast-types@0.16.1/node_modules/ast-types/lib/def/es-proposals.js
 var require_es_proposals = __commonJS(function(exports2, module2) {
   Object.defineProperty(exports2, "__esModule", { value: true });
   var tslib_1 = require_tslib();
@@ -10007,7 +10296,7 @@ var require_es_proposals = __commonJS(function(exports2, module2) {
   });
 });
 
-// ../../node_modules/.bun/ast-types@0.16.1/node_modules/ast-types/lib/def/jsx.js
+// ../../../../../../../../../../../home/matti/percher-ci-b2/node_modules/.bun/ast-types@0.16.1/node_modules/ast-types/lib/def/jsx.js
 var require_jsx = __commonJS(function(exports2, module2) {
   Object.defineProperty(exports2, "__esModule", { value: true });
   var tslib_1 = require_tslib();
@@ -10053,7 +10342,7 @@ var require_jsx = __commonJS(function(exports2, module2) {
   });
 });
 
-// ../../node_modules/.bun/ast-types@0.16.1/node_modules/ast-types/lib/def/type-annotations.js
+// ../../../../../../../../../../../home/matti/percher-ci-b2/node_modules/.bun/ast-types@0.16.1/node_modules/ast-types/lib/def/type-annotations.js
 var require_type_annotations = __commonJS(function(exports2, module2) {
   Object.defineProperty(exports2, "__esModule", { value: true });
   var tslib_1 = require_tslib();
@@ -10083,7 +10372,7 @@ var require_type_annotations = __commonJS(function(exports2, module2) {
   });
 });
 
-// ../../node_modules/.bun/ast-types@0.16.1/node_modules/ast-types/lib/def/flow.js
+// ../../../../../../../../../../../home/matti/percher-ci-b2/node_modules/.bun/ast-types@0.16.1/node_modules/ast-types/lib/def/flow.js
 var require_flow = __commonJS(function(exports2, module2) {
   Object.defineProperty(exports2, "__esModule", { value: true });
   var tslib_1 = require_tslib();
@@ -10189,7 +10478,7 @@ var require_flow = __commonJS(function(exports2, module2) {
   });
 });
 
-// ../../node_modules/.bun/ast-types@0.16.1/node_modules/ast-types/lib/def/esprima.js
+// ../../../../../../../../../../../home/matti/percher-ci-b2/node_modules/.bun/ast-types@0.16.1/node_modules/ast-types/lib/def/esprima.js
 var require_esprima = __commonJS(function(exports2, module2) {
   Object.defineProperty(exports2, "__esModule", { value: true });
   var tslib_1 = require_tslib();
@@ -10218,7 +10507,7 @@ var require_esprima = __commonJS(function(exports2, module2) {
   });
 });
 
-// ../../node_modules/.bun/ast-types@0.16.1/node_modules/ast-types/lib/def/babel-core.js
+// ../../../../../../../../../../../home/matti/percher-ci-b2/node_modules/.bun/ast-types@0.16.1/node_modules/ast-types/lib/def/babel-core.js
 var require_babel_core = __commonJS(function(exports2, module2) {
   Object.defineProperty(exports2, "__esModule", { value: true });
   var tslib_1 = require_tslib();
@@ -10327,7 +10616,7 @@ var require_babel_core = __commonJS(function(exports2, module2) {
   });
 });
 
-// ../../node_modules/.bun/ast-types@0.16.1/node_modules/ast-types/lib/def/babel.js
+// ../../../../../../../../../../../home/matti/percher-ci-b2/node_modules/.bun/ast-types@0.16.1/node_modules/ast-types/lib/def/babel.js
 var require_babel = __commonJS(function(exports2, module2) {
   Object.defineProperty(exports2, "__esModule", { value: true });
   var tslib_1 = require_tslib();
@@ -10349,7 +10638,7 @@ var require_babel = __commonJS(function(exports2, module2) {
   });
 });
 
-// ../../node_modules/.bun/ast-types@0.16.1/node_modules/ast-types/lib/def/typescript.js
+// ../../../../../../../../../../../home/matti/percher-ci-b2/node_modules/.bun/ast-types@0.16.1/node_modules/ast-types/lib/def/typescript.js
 var require_typescript = __commonJS(function(exports2, module2) {
   Object.defineProperty(exports2, "__esModule", { value: true });
   var tslib_1 = require_tslib();
@@ -10476,7 +10765,7 @@ var require_typescript = __commonJS(function(exports2, module2) {
   });
 });
 
-// ../../node_modules/.bun/ast-types@0.16.1/node_modules/ast-types/lib/gen/namedTypes.js
+// ../../../../../../../../../../../home/matti/percher-ci-b2/node_modules/.bun/ast-types@0.16.1/node_modules/ast-types/lib/gen/namedTypes.js
 var require_namedTypes = __commonJS(function(exports2) {
   Object.defineProperty(exports2, "__esModule", { value: true });
   exports2.namedTypes = undefined;
@@ -10484,7 +10773,7 @@ var require_namedTypes = __commonJS(function(exports2) {
   (function(namedTypes) {})(namedTypes = exports2.namedTypes || (exports2.namedTypes = {}));
 });
 
-// ../../node_modules/.bun/ast-types@0.16.1/node_modules/ast-types/lib/main.js
+// ../../../../../../../../../../../home/matti/percher-ci-b2/node_modules/.bun/ast-types@0.16.1/node_modules/ast-types/lib/main.js
 var require_main = __commonJS(function(exports2) {
   Object.defineProperty(exports2, "__esModule", { value: true });
   exports2.visit = exports2.use = exports2.Type = exports2.someField = exports2.PathVisitor = exports2.Path = exports2.NodePath = exports2.namedTypes = exports2.getSupertypeNames = exports2.getFieldValue = exports2.getFieldNames = exports2.getBuilderName = exports2.finalize = exports2.eachField = exports2.defineMethod = exports2.builtInTypes = exports2.builders = exports2.astNodesAreEquivalent = undefined;
@@ -10546,7 +10835,7 @@ var require_main = __commonJS(function(exports2) {
   Object.assign(namedTypes_1.namedTypes, n);
 });
 
-// ../../node_modules/.bun/tiny-invariant@1.3.3/node_modules/tiny-invariant/dist/tiny-invariant.cjs.js
+// ../../../../../../../../../../../home/matti/percher-ci-b2/node_modules/.bun/tiny-invariant@1.3.3/node_modules/tiny-invariant/dist/tiny-invariant.cjs.js
 var require_tiny_invariant_cjs = __commonJS(function(exports2, module2) {
   var isProduction = false;
   var prefix = "Invariant failed";
@@ -10564,7 +10853,7 @@ var require_tiny_invariant_cjs = __commonJS(function(exports2, module2) {
   module2.exports = invariant;
 });
 
-// ../../node_modules/.bun/source-map@0.6.1/node_modules/source-map/lib/base64.js
+// ../../../../../../../../../../../home/matti/percher-ci-b2/node_modules/.bun/source-map@0.6.1/node_modules/source-map/lib/base64.js
 var require_base64 = __commonJS(function(exports2) {
   var intToCharMap = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/".split("");
   exports2.encode = function(number) {
@@ -10603,7 +10892,7 @@ var require_base64 = __commonJS(function(exports2) {
   };
 });
 
-// ../../node_modules/.bun/source-map@0.6.1/node_modules/source-map/lib/base64-vlq.js
+// ../../../../../../../../../../../home/matti/percher-ci-b2/node_modules/.bun/source-map@0.6.1/node_modules/source-map/lib/base64-vlq.js
 var require_base64_vlq = __commonJS(function(exports2) {
   var base64 = require_base64();
   var VLQ_BASE_SHIFT = 5;
@@ -10655,7 +10944,7 @@ var require_base64_vlq = __commonJS(function(exports2) {
   };
 });
 
-// ../../node_modules/.bun/source-map@0.6.1/node_modules/source-map/lib/util.js
+// ../../../../../../../../../../../home/matti/percher-ci-b2/node_modules/.bun/source-map@0.6.1/node_modules/source-map/lib/util.js
 var require_util = __commonJS(function(exports2) {
   function getArg(aArgs, aName, aDefaultValue) {
     if (aName in aArgs) {
@@ -10954,7 +11243,7 @@ var require_util = __commonJS(function(exports2) {
   exports2.computeSourceURL = computeSourceURL;
 });
 
-// ../../node_modules/.bun/source-map@0.6.1/node_modules/source-map/lib/array-set.js
+// ../../../../../../../../../../../home/matti/percher-ci-b2/node_modules/.bun/source-map@0.6.1/node_modules/source-map/lib/array-set.js
 var require_array_set = __commonJS(function(exports2) {
   var util = require_util();
   var has = Object.prototype.hasOwnProperty;
@@ -11022,7 +11311,7 @@ var require_array_set = __commonJS(function(exports2) {
   exports2.ArraySet = ArraySet;
 });
 
-// ../../node_modules/.bun/source-map@0.6.1/node_modules/source-map/lib/mapping-list.js
+// ../../../../../../../../../../../home/matti/percher-ci-b2/node_modules/.bun/source-map@0.6.1/node_modules/source-map/lib/mapping-list.js
 var require_mapping_list = __commonJS(function(exports2) {
   var util = require_util();
   function generatedPositionAfter(mappingA, mappingB) {
@@ -11059,7 +11348,7 @@ var require_mapping_list = __commonJS(function(exports2) {
   exports2.MappingList = MappingList;
 });
 
-// ../../node_modules/.bun/source-map@0.6.1/node_modules/source-map/lib/source-map-generator.js
+// ../../../../../../../../../../../home/matti/percher-ci-b2/node_modules/.bun/source-map@0.6.1/node_modules/source-map/lib/source-map-generator.js
 var require_source_map_generator = __commonJS(function(exports2) {
   var base64VLQ = require_base64_vlq();
   var util = require_util();
@@ -11329,7 +11618,7 @@ var require_source_map_generator = __commonJS(function(exports2) {
   exports2.SourceMapGenerator = SourceMapGenerator;
 });
 
-// ../../node_modules/.bun/source-map@0.6.1/node_modules/source-map/lib/binary-search.js
+// ../../../../../../../../../../../home/matti/percher-ci-b2/node_modules/.bun/source-map@0.6.1/node_modules/source-map/lib/binary-search.js
 var require_binary_search = __commonJS(function(exports2) {
   exports2.GREATEST_LOWER_BOUND = 1;
   exports2.LEAST_UPPER_BOUND = 2;
@@ -11376,7 +11665,7 @@ var require_binary_search = __commonJS(function(exports2) {
   };
 });
 
-// ../../node_modules/.bun/source-map@0.6.1/node_modules/source-map/lib/quick-sort.js
+// ../../../../../../../../../../../home/matti/percher-ci-b2/node_modules/.bun/source-map@0.6.1/node_modules/source-map/lib/quick-sort.js
 var require_quick_sort = __commonJS(function(exports2) {
   function swap(ary, x, y) {
     var temp = ary[x];
@@ -11409,7 +11698,7 @@ var require_quick_sort = __commonJS(function(exports2) {
   };
 });
 
-// ../../node_modules/.bun/source-map@0.6.1/node_modules/source-map/lib/source-map-consumer.js
+// ../../../../../../../../../../../home/matti/percher-ci-b2/node_modules/.bun/source-map@0.6.1/node_modules/source-map/lib/source-map-consumer.js
 var require_source_map_consumer = __commonJS(function(exports2) {
   var util = require_util();
   var binarySearch = require_binary_search();
@@ -11978,7 +12267,7 @@ var require_source_map_consumer = __commonJS(function(exports2) {
   exports2.IndexedSourceMapConsumer = IndexedSourceMapConsumer;
 });
 
-// ../../node_modules/.bun/source-map@0.6.1/node_modules/source-map/lib/source-node.js
+// ../../../../../../../../../../../home/matti/percher-ci-b2/node_modules/.bun/source-map@0.6.1/node_modules/source-map/lib/source-node.js
 var require_source_node = __commonJS(function(exports2) {
   var SourceMapGenerator = require_source_map_generator().SourceMapGenerator;
   var util = require_util();
@@ -12232,14 +12521,14 @@ var require_source_node = __commonJS(function(exports2) {
   exports2.SourceNode = SourceNode;
 });
 
-// ../../node_modules/.bun/source-map@0.6.1/node_modules/source-map/source-map.js
+// ../../../../../../../../../../../home/matti/percher-ci-b2/node_modules/.bun/source-map@0.6.1/node_modules/source-map/source-map.js
 var require_source_map = __commonJS(function(exports2) {
   exports2.SourceMapGenerator = require_source_map_generator().SourceMapGenerator;
   exports2.SourceMapConsumer = require_source_map_consumer().SourceMapConsumer;
   exports2.SourceNode = require_source_node().SourceNode;
 });
 
-// ../../node_modules/.bun/recast@0.23.11/node_modules/recast/lib/util.js
+// ../../../../../../../../../../../home/matti/percher-ci-b2/node_modules/.bun/recast@0.23.11/node_modules/recast/lib/util.js
 var require_util2 = __commonJS(function(exports2) {
   Object.defineProperty(exports2, "__esModule", { value: true });
   exports2.isTrailingCommaEnabled = exports2.getParentExportDeclaration = exports2.isExportDeclaration = exports2.fixFaultyLocations = exports2.getTrueLoc = exports2.composeSourceMaps = exports2.copyPos = exports2.comparePos = exports2.getUnionOfKeys = exports2.getOption = exports2.isBrowser = exports2.getLineTerminator = undefined;
@@ -12518,7 +12807,7 @@ var require_util2 = __commonJS(function(exports2) {
   exports2.isTrailingCommaEnabled = isTrailingCommaEnabled;
 });
 
-// ../../node_modules/.bun/esprima@4.0.1/node_modules/esprima/dist/esprima.js
+// ../../../../../../../../../../../home/matti/percher-ci-b2/node_modules/.bun/esprima@4.0.1/node_modules/esprima/dist/esprima.js
 var require_esprima2 = __commonJS(function(exports2, module2) {
   (function webpackUniversalModuleDefinition(root, factory) {
     if (typeof exports2 === "object" && typeof module2 === "object")
@@ -18658,7 +18947,7 @@ var require_esprima2 = __commonJS(function(exports2, module2) {
   });
 });
 
-// ../../node_modules/.bun/recast@0.23.11/node_modules/recast/parsers/esprima.js
+// ../../../../../../../../../../../home/matti/percher-ci-b2/node_modules/.bun/recast@0.23.11/node_modules/recast/parsers/esprima.js
 var require_esprima3 = __commonJS(function(exports2) {
   Object.defineProperty(exports2, "__esModule", { value: true });
   exports2.parse = undefined;
@@ -18684,7 +18973,7 @@ var require_esprima3 = __commonJS(function(exports2) {
   exports2.parse = parse;
 });
 
-// ../../node_modules/.bun/recast@0.23.11/node_modules/recast/lib/options.js
+// ../../../../../../../../../../../home/matti/percher-ci-b2/node_modules/.bun/recast@0.23.11/node_modules/recast/lib/options.js
 var require_options = __commonJS(function(exports2) {
   Object.defineProperty(exports2, "__esModule", { value: true });
   exports2.normalize = undefined;
@@ -18741,7 +19030,7 @@ var require_options = __commonJS(function(exports2) {
   exports2.normalize = normalize;
 });
 
-// ../../node_modules/.bun/recast@0.23.11/node_modules/recast/lib/mapping.js
+// ../../../../../../../../../../../home/matti/percher-ci-b2/node_modules/.bun/recast@0.23.11/node_modules/recast/lib/mapping.js
 var require_mapping = __commonJS(function(exports2) {
   Object.defineProperty(exports2, "__esModule", { value: true });
   var tslib_1 = require_tslib();
@@ -18924,7 +19213,7 @@ var require_mapping = __commonJS(function(exports2) {
   }
 });
 
-// ../../node_modules/.bun/recast@0.23.11/node_modules/recast/lib/lines.js
+// ../../../../../../../../../../../home/matti/percher-ci-b2/node_modules/.bun/recast@0.23.11/node_modules/recast/lib/lines.js
 var require_lines = __commonJS(function(exports2) {
   Object.defineProperty(exports2, "__esModule", { value: true });
   exports2.concat = exports2.fromString = exports2.countSpaces = exports2.Lines = undefined;
@@ -19538,7 +19827,7 @@ var require_lines = __commonJS(function(exports2) {
   var emptyLines = fromString("");
 });
 
-// ../../node_modules/.bun/recast@0.23.11/node_modules/recast/lib/comments.js
+// ../../../../../../../../../../../home/matti/percher-ci-b2/node_modules/.bun/recast@0.23.11/node_modules/recast/lib/comments.js
 var require_comments = __commonJS(function(exports2) {
   Object.defineProperty(exports2, "__esModule", { value: true });
   exports2.printComments = exports2.attach = undefined;
@@ -19788,7 +20077,7 @@ var require_comments = __commonJS(function(exports2) {
   exports2.printComments = printComments;
 });
 
-// ../../node_modules/.bun/recast@0.23.11/node_modules/recast/lib/parser.js
+// ../../../../../../../../../../../home/matti/percher-ci-b2/node_modules/.bun/recast@0.23.11/node_modules/recast/lib/parser.js
 var require_parser2 = __commonJS(function(exports2) {
   Object.defineProperty(exports2, "__esModule", { value: true });
   exports2.parse = undefined;
@@ -19975,7 +20264,7 @@ var require_parser2 = __commonJS(function(exports2) {
   };
 });
 
-// ../../node_modules/.bun/recast@0.23.11/node_modules/recast/lib/fast-path.js
+// ../../../../../../../../../../../home/matti/percher-ci-b2/node_modules/.bun/recast@0.23.11/node_modules/recast/lib/fast-path.js
 var require_fast_path = __commonJS(function(exports2) {
   Object.defineProperty(exports2, "__esModule", { value: true });
   var tslib_1 = require_tslib();
@@ -20407,7 +20696,7 @@ var require_fast_path = __commonJS(function(exports2) {
   exports2.default = FastPath;
 });
 
-// ../../node_modules/.bun/recast@0.23.11/node_modules/recast/lib/patcher.js
+// ../../../../../../../../../../../home/matti/percher-ci-b2/node_modules/.bun/recast@0.23.11/node_modules/recast/lib/patcher.js
 var require_patcher = __commonJS(function(exports2) {
   Object.defineProperty(exports2, "__esModule", { value: true });
   exports2.getReprinter = exports2.Patcher = undefined;
@@ -20705,7 +20994,7 @@ var require_patcher = __commonJS(function(exports2) {
   }
 });
 
-// ../../node_modules/.bun/recast@0.23.11/node_modules/recast/lib/printer.js
+// ../../../../../../../../../../../home/matti/percher-ci-b2/node_modules/.bun/recast@0.23.11/node_modules/recast/lib/printer.js
 var require_printer = __commonJS(function(exports2) {
   Object.defineProperty(exports2, "__esModule", { value: true });
   exports2.Printer = undefined;
@@ -22973,7 +23262,7 @@ while`);
   }
 });
 
-// ../../node_modules/.bun/recast@0.23.11/node_modules/recast/main.js
+// ../../../../../../../../../../../home/matti/percher-ci-b2/node_modules/.bun/recast@0.23.11/node_modules/recast/main.js
 var require_main2 = __commonJS(function(exports2) {
   Object.defineProperty(exports2, "__esModule", { value: true });
   exports2.run = exports2.prettyPrint = exports2.print = exports2.visit = exports2.types = exports2.parse = undefined;
@@ -23022,7 +23311,7 @@ var require_main2 = __commonJS(function(exports2) {
   }
 });
 
-// ../../node_modules/.bun/jscodeshift@17.4.0/node_modules/jscodeshift/src/utils/union.js
+// ../../../../../../../../../../../home/matti/percher-ci-b2/node_modules/.bun/jscodeshift@17.4.0/node_modules/jscodeshift/src/utils/union.js
 var require_union = __commonJS(function(exports2, module2) {
   module2.exports = function(arrays) {
     const result = new Set(arrays[0]);
@@ -23037,7 +23326,7 @@ var require_union = __commonJS(function(exports2, module2) {
   };
 });
 
-// ../../node_modules/.bun/jscodeshift@17.4.0/node_modules/jscodeshift/src/Collection.js
+// ../../../../../../../../../../../home/matti/percher-ci-b2/node_modules/.bun/jscodeshift@17.4.0/node_modules/jscodeshift/src/Collection.js
 var require_Collection = __commonJS(function(exports2) {
   var assert = __require("assert");
   var intersection = require_intersection();
@@ -23266,7 +23555,7 @@ There are existing registrations for that method with `;
   exports2.setDefaultCollectionType = setDefaultCollectionType;
 });
 
-// ../../node_modules/.bun/jscodeshift@17.4.0/node_modules/jscodeshift/src/matchNode.js
+// ../../../../../../../../../../../home/matti/percher-ci-b2/node_modules/.bun/jscodeshift@17.4.0/node_modules/jscodeshift/src/matchNode.js
 var require_matchNode = __commonJS(function(exports2, module2) {
   var hasOwn = Object.prototype.hasOwnProperty.call.bind(Object.prototype.hasOwnProperty);
   function matchNode(haystack, needle) {
@@ -23286,7 +23575,7 @@ var require_matchNode = __commonJS(function(exports2, module2) {
   module2.exports = matchNode;
 });
 
-// ../../node_modules/.bun/jscodeshift@17.4.0/node_modules/jscodeshift/src/utils/once.js
+// ../../../../../../../../../../../home/matti/percher-ci-b2/node_modules/.bun/jscodeshift@17.4.0/node_modules/jscodeshift/src/utils/once.js
 var require_once = __commonJS(function(exports2, module2) {
   module2.exports = function(func) {
     let called = false;
@@ -23301,7 +23590,7 @@ var require_once = __commonJS(function(exports2, module2) {
   };
 });
 
-// ../../node_modules/.bun/jscodeshift@17.4.0/node_modules/jscodeshift/src/collections/Node.js
+// ../../../../../../../../../../../home/matti/percher-ci-b2/node_modules/.bun/jscodeshift@17.4.0/node_modules/jscodeshift/src/collections/Node.js
 var require_Node = __commonJS(function(exports2) {
   var Collection = require_Collection();
   var matchNode = require_matchNode();
@@ -23400,7 +23689,7 @@ var require_Node = __commonJS(function(exports2) {
   exports2.register = once(register);
 });
 
-// ../../node_modules/.bun/jscodeshift@17.4.0/node_modules/jscodeshift/src/collections/VariableDeclarator.js
+// ../../../../../../../../../../../home/matti/percher-ci-b2/node_modules/.bun/jscodeshift@17.4.0/node_modules/jscodeshift/src/collections/VariableDeclarator.js
 var require_VariableDeclarator = __commonJS(function(exports2) {
   var Collection = require_Collection();
   var NodeCollection = require_Node();
@@ -23496,7 +23785,7 @@ var require_VariableDeclarator = __commonJS(function(exports2) {
   exports2.filters = filterMethods;
 });
 
-// ../../node_modules/.bun/jscodeshift@17.4.0/node_modules/jscodeshift/src/collections/JSXElement.js
+// ../../../../../../../../../../../home/matti/percher-ci-b2/node_modules/.bun/jscodeshift@17.4.0/node_modules/jscodeshift/src/collections/JSXElement.js
 var require_JSXElement = __commonJS(function(exports2) {
   var Collection = require_Collection();
   var NodeCollection = require_Node();
@@ -23615,7 +23904,7 @@ var require_JSXElement = __commonJS(function(exports2) {
   exports2.mappings = mappingMethods;
 });
 
-// ../../node_modules/.bun/jscodeshift@17.4.0/node_modules/jscodeshift/src/collections/ImportDeclaration.js
+// ../../../../../../../../../../../home/matti/percher-ci-b2/node_modules/.bun/jscodeshift@17.4.0/node_modules/jscodeshift/src/collections/ImportDeclaration.js
 var require_ImportDeclaration = __commonJS(function(exports2) {
   var Collection = require_Collection();
   var NodeCollection = require_Node();
@@ -23662,7 +23951,7 @@ var require_ImportDeclaration = __commonJS(function(exports2) {
   exports2.register = once(register);
 });
 
-// ../../node_modules/.bun/jscodeshift@17.4.0/node_modules/jscodeshift/src/collections/index.js
+// ../../../../../../../../../../../home/matti/percher-ci-b2/node_modules/.bun/jscodeshift@17.4.0/node_modules/jscodeshift/src/collections/index.js
 var require_collections = __commonJS(function(exports2, module2) {
   module2.exports = {
     Node: require_Node(),
@@ -23672,7 +23961,7 @@ var require_collections = __commonJS(function(exports2, module2) {
   };
 });
 
-// ../../node_modules/.bun/@babel+parser@7.29.3/node_modules/@babel/parser/lib/index.js
+// ../../../../../../../../../../../home/matti/percher-ci-b2/node_modules/.bun/@babel+parser@7.29.3/node_modules/@babel/parser/lib/index.js
 var require_lib = __commonJS(function(exports2) {
   Object.defineProperty(exports2, "__esModule", {
     value: true
@@ -38472,7 +38761,7 @@ var require_lib = __commonJS(function(exports2) {
   exports2.tokTypes = tokTypes;
 });
 
-// ../../node_modules/.bun/jscodeshift@17.4.0/node_modules/jscodeshift/parser/babylon.js
+// ../../../../../../../../../../../home/matti/percher-ci-b2/node_modules/.bun/jscodeshift@17.4.0/node_modules/jscodeshift/parser/babylon.js
 var require_babylon = __commonJS(function(exports2, module2) {
   var babylon = require_lib();
   var defaultOptions = {
@@ -38517,7 +38806,7 @@ var require_babylon = __commonJS(function(exports2, module2) {
   };
 });
 
-// ../../node_modules/.bun/flow-parser@0.314.0/node_modules/flow-parser/flow_parser.js
+// ../../../../../../../../../../../home/matti/percher-ci-b2/node_modules/.bun/flow-parser@0.314.0/node_modules/flow-parser/flow_parser.js
 var require_flow_parser = __commonJS(function(exports2) {
   (function(a) {
     typeof globalThis !== "object" && (this ? b() : (a.defineProperty(a.prototype, "_T_", { configurable: true, get: b }), _T_));
@@ -86788,7 +87077,7 @@ var require_flow_parser = __commonJS(function(exports2) {
   })(globalThis);
 });
 
-// ../../node_modules/.bun/jscodeshift@17.4.0/node_modules/jscodeshift/parser/flow.js
+// ../../../../../../../../../../../home/matti/percher-ci-b2/node_modules/.bun/jscodeshift@17.4.0/node_modules/jscodeshift/parser/flow.js
 var require_flow2 = __commonJS(function(exports2, module2) {
   var flowParser = require_flow_parser();
   var defaultOptions = {
@@ -86811,7 +87100,7 @@ var require_flow2 = __commonJS(function(exports2, module2) {
   };
 });
 
-// ../../node_modules/.bun/jscodeshift@17.4.0/node_modules/jscodeshift/parser/tsOptions.js
+// ../../../../../../../../../../../home/matti/percher-ci-b2/node_modules/.bun/jscodeshift@17.4.0/node_modules/jscodeshift/parser/tsOptions.js
 var require_tsOptions = __commonJS(function(exports2, module2) {
   module2.exports = {
     sourceType: "module",
@@ -86848,7 +87137,7 @@ var require_tsOptions = __commonJS(function(exports2, module2) {
   };
 });
 
-// ../../node_modules/.bun/jscodeshift@17.4.0/node_modules/jscodeshift/parser/ts.js
+// ../../../../../../../../../../../home/matti/percher-ci-b2/node_modules/.bun/jscodeshift@17.4.0/node_modules/jscodeshift/parser/ts.js
 var require_ts = __commonJS(function(exports2, module2) {
   var babylon = require_lib();
   var options = require_tsOptions();
@@ -86861,7 +87150,7 @@ var require_ts = __commonJS(function(exports2, module2) {
   };
 });
 
-// ../../node_modules/.bun/jscodeshift@17.4.0/node_modules/jscodeshift/parser/tsx.js
+// ../../../../../../../../../../../home/matti/percher-ci-b2/node_modules/.bun/jscodeshift@17.4.0/node_modules/jscodeshift/parser/tsx.js
 var require_tsx = __commonJS(function(exports2, module2) {
   var babylon = require_lib();
   var baseOptions = require_tsOptions();
@@ -86876,7 +87165,7 @@ var require_tsx = __commonJS(function(exports2, module2) {
   };
 });
 
-// ../../node_modules/.bun/jscodeshift@17.4.0/node_modules/jscodeshift/parser/babel5Compat.js
+// ../../../../../../../../../../../home/matti/percher-ci-b2/node_modules/.bun/jscodeshift@17.4.0/node_modules/jscodeshift/parser/babel5Compat.js
 var require_babel5Compat = __commonJS(function(exports2, module2) {
   var babylon = require_lib();
   var options = {
@@ -86912,7 +87201,7 @@ var require_babel5Compat = __commonJS(function(exports2, module2) {
   };
 });
 
-// ../../node_modules/.bun/jscodeshift@17.4.0/node_modules/jscodeshift/src/getParser.js
+// ../../../../../../../../../../../home/matti/percher-ci-b2/node_modules/.bun/jscodeshift@17.4.0/node_modules/jscodeshift/src/getParser.js
 var require_getParser = __commonJS(function(exports2, module2) {
   module2.exports = function getParser(parserName, options) {
     switch (parserName) {
@@ -86931,7 +87220,7 @@ var require_getParser = __commonJS(function(exports2, module2) {
   };
 });
 
-// ../../node_modules/.bun/jscodeshift@17.4.0/node_modules/jscodeshift/src/template.js
+// ../../../../../../../../../../../home/matti/percher-ci-b2/node_modules/.bun/jscodeshift@17.4.0/node_modules/jscodeshift/src/template.js
 var require_template = __commonJS(function(exports2, module2) {
   var recast = require_main2();
   var builders = recast.types.builders;
@@ -87032,7 +87321,7 @@ var require_template = __commonJS(function(exports2, module2) {
   };
 });
 
-// ../../node_modules/.bun/jscodeshift@17.4.0/node_modules/jscodeshift/src/core.js
+// ../../../../../../../../../../../home/matti/percher-ci-b2/node_modules/.bun/jscodeshift@17.4.0/node_modules/jscodeshift/src/core.js
 var require_core3 = __commonJS(function(exports2, module2) {
   var Collection = require_Collection();
   var collections = require_collections();
@@ -87129,7 +87418,7 @@ var require_core3 = __commonJS(function(exports2, module2) {
   module2.exports = enrichCore(core, getParser());
 });
 
-// ../../node_modules/.bun/isexe@2.0.0/node_modules/isexe/windows.js
+// ../../../../../../../../../../../home/matti/percher-ci-b2/node_modules/.bun/isexe@2.0.0/node_modules/isexe/windows.js
 var require_windows = __commonJS(function(exports2, module2) {
   module2.exports = isexe;
   isexe.sync = sync;
@@ -87167,7 +87456,7 @@ var require_windows = __commonJS(function(exports2, module2) {
   }
 });
 
-// ../../node_modules/.bun/isexe@2.0.0/node_modules/isexe/mode.js
+// ../../../../../../../../../../../home/matti/percher-ci-b2/node_modules/.bun/isexe@2.0.0/node_modules/isexe/mode.js
 var require_mode = __commonJS(function(exports2, module2) {
   module2.exports = isexe;
   isexe.sync = sync;
@@ -87198,7 +87487,7 @@ var require_mode = __commonJS(function(exports2, module2) {
   }
 });
 
-// ../../node_modules/.bun/isexe@2.0.0/node_modules/isexe/index.js
+// ../../../../../../../../../../../home/matti/percher-ci-b2/node_modules/.bun/isexe@2.0.0/node_modules/isexe/index.js
 var require_isexe = __commonJS(function(exports2, module2) {
   var fs = __require("fs");
   var core;
@@ -87251,7 +87540,7 @@ var require_isexe = __commonJS(function(exports2, module2) {
   }
 });
 
-// ../../node_modules/.bun/which@2.0.2/node_modules/which/which.js
+// ../../../../../../../../../../../home/matti/percher-ci-b2/node_modules/.bun/which@2.0.2/node_modules/which/which.js
 var require_which = __commonJS(function(exports2, module2) {
   var isWindows = process.platform === "win32" || process.env.OSTYPE === "cygwin" || process.env.OSTYPE === "msys";
   var path = __require("path");
@@ -87342,7 +87631,7 @@ var require_which = __commonJS(function(exports2, module2) {
   which.sync = whichSync;
 });
 
-// ../../node_modules/.bun/path-key@3.1.1/node_modules/path-key/index.js
+// ../../../../../../../../../../../home/matti/percher-ci-b2/node_modules/.bun/path-key@3.1.1/node_modules/path-key/index.js
 var require_path_key = __commonJS(function(exports2, module2) {
   var pathKey = (options = {}) => {
     const environment = options.env || process.env;
@@ -87356,7 +87645,7 @@ var require_path_key = __commonJS(function(exports2, module2) {
   module2.exports.default = pathKey;
 });
 
-// ../../node_modules/.bun/cross-spawn@7.0.6/node_modules/cross-spawn/lib/util/resolveCommand.js
+// ../../../../../../../../../../../home/matti/percher-ci-b2/node_modules/.bun/cross-spawn@7.0.6/node_modules/cross-spawn/lib/util/resolveCommand.js
 var require_resolveCommand = __commonJS(function(exports2, module2) {
   var path = __require("path");
   var which = require_which();
@@ -87393,7 +87682,7 @@ var require_resolveCommand = __commonJS(function(exports2, module2) {
   module2.exports = resolveCommand;
 });
 
-// ../../node_modules/.bun/cross-spawn@7.0.6/node_modules/cross-spawn/lib/util/escape.js
+// ../../../../../../../../../../../home/matti/percher-ci-b2/node_modules/.bun/cross-spawn@7.0.6/node_modules/cross-spawn/lib/util/escape.js
 var require_escape = __commonJS(function(exports2, module2) {
   var metaCharsRegExp = /([()\][%!^"`<>&|;, *?])/g;
   function escapeCommand(arg) {
@@ -87415,12 +87704,12 @@ var require_escape = __commonJS(function(exports2, module2) {
   exports2.argument = escapeArgument;
 });
 
-// ../../node_modules/.bun/shebang-regex@3.0.0/node_modules/shebang-regex/index.js
+// ../../../../../../../../../../../home/matti/percher-ci-b2/node_modules/.bun/shebang-regex@3.0.0/node_modules/shebang-regex/index.js
 var require_shebang_regex = __commonJS(function(exports2, module2) {
   module2.exports = /^#!(.*)/;
 });
 
-// ../../node_modules/.bun/shebang-command@2.0.0/node_modules/shebang-command/index.js
+// ../../../../../../../../../../../home/matti/percher-ci-b2/node_modules/.bun/shebang-command@2.0.0/node_modules/shebang-command/index.js
 var require_shebang_command = __commonJS(function(exports2, module2) {
   var shebangRegex = require_shebang_regex();
   module2.exports = (string = "") => {
@@ -87437,7 +87726,7 @@ var require_shebang_command = __commonJS(function(exports2, module2) {
   };
 });
 
-// ../../node_modules/.bun/cross-spawn@7.0.6/node_modules/cross-spawn/lib/util/readShebang.js
+// ../../../../../../../../../../../home/matti/percher-ci-b2/node_modules/.bun/cross-spawn@7.0.6/node_modules/cross-spawn/lib/util/readShebang.js
 var require_readShebang = __commonJS(function(exports2, module2) {
   var fs = __require("fs");
   var shebangCommand = require_shebang_command();
@@ -87455,7 +87744,7 @@ var require_readShebang = __commonJS(function(exports2, module2) {
   module2.exports = readShebang;
 });
 
-// ../../node_modules/.bun/cross-spawn@7.0.6/node_modules/cross-spawn/lib/parse.js
+// ../../../../../../../../../../../home/matti/percher-ci-b2/node_modules/.bun/cross-spawn@7.0.6/node_modules/cross-spawn/lib/parse.js
 var require_parse2 = __commonJS(function(exports2, module2) {
   var path = __require("path");
   var resolveCommand = require_resolveCommand();
@@ -87514,7 +87803,7 @@ var require_parse2 = __commonJS(function(exports2, module2) {
   module2.exports = parse;
 });
 
-// ../../node_modules/.bun/cross-spawn@7.0.6/node_modules/cross-spawn/lib/enoent.js
+// ../../../../../../../../../../../home/matti/percher-ci-b2/node_modules/.bun/cross-spawn@7.0.6/node_modules/cross-spawn/lib/enoent.js
 var require_enoent = __commonJS(function(exports2, module2) {
   var isWin = process.platform === "win32";
   function notFoundError(original, syscall) {
@@ -87561,7 +87850,7 @@ var require_enoent = __commonJS(function(exports2, module2) {
   };
 });
 
-// ../../node_modules/.bun/cross-spawn@7.0.6/node_modules/cross-spawn/index.js
+// ../../../../../../../../../../../home/matti/percher-ci-b2/node_modules/.bun/cross-spawn@7.0.6/node_modules/cross-spawn/index.js
 var require_cross_spawn = __commonJS(function(exports2, module2) {
   var cp = __require("child_process");
   var parse = require_parse2();
@@ -87585,14 +87874,14 @@ var require_cross_spawn = __commonJS(function(exports2, module2) {
   module2.exports._enoent = enoent;
 });
 
-// ../../node_modules/.bun/qrcode@1.5.4/node_modules/qrcode/lib/can-promise.js
+// ../../../../../../../../../../../home/matti/percher-ci-b2/node_modules/.bun/qrcode@1.5.4/node_modules/qrcode/lib/can-promise.js
 var require_can_promise = __commonJS(function(exports2, module2) {
   module2.exports = function() {
     return typeof Promise === "function" && Promise.prototype && Promise.prototype.then;
   };
 });
 
-// ../../node_modules/.bun/qrcode@1.5.4/node_modules/qrcode/lib/core/utils.js
+// ../../../../../../../../../../../home/matti/percher-ci-b2/node_modules/.bun/qrcode@1.5.4/node_modules/qrcode/lib/core/utils.js
 var require_utils = __commonJS(function(exports2) {
   var toSJISFunction;
   var CODEWORDS_COUNT = [
@@ -87670,7 +87959,7 @@ var require_utils = __commonJS(function(exports2) {
   };
 });
 
-// ../../node_modules/.bun/qrcode@1.5.4/node_modules/qrcode/lib/core/error-correction-level.js
+// ../../../../../../../../../../../home/matti/percher-ci-b2/node_modules/.bun/qrcode@1.5.4/node_modules/qrcode/lib/core/error-correction-level.js
 var require_error_correction_level = __commonJS(function(exports2) {
   exports2.L = { bit: 1 };
   exports2.M = { bit: 0 };
@@ -87713,7 +88002,7 @@ var require_error_correction_level = __commonJS(function(exports2) {
   };
 });
 
-// ../../node_modules/.bun/qrcode@1.5.4/node_modules/qrcode/lib/core/bit-buffer.js
+// ../../../../../../../../../../../home/matti/percher-ci-b2/node_modules/.bun/qrcode@1.5.4/node_modules/qrcode/lib/core/bit-buffer.js
 var require_bit_buffer = __commonJS(function(exports2, module2) {
   function BitBuffer() {
     this.buffer = [];
@@ -87746,7 +88035,7 @@ var require_bit_buffer = __commonJS(function(exports2, module2) {
   module2.exports = BitBuffer;
 });
 
-// ../../node_modules/.bun/qrcode@1.5.4/node_modules/qrcode/lib/core/bit-matrix.js
+// ../../../../../../../../../../../home/matti/percher-ci-b2/node_modules/.bun/qrcode@1.5.4/node_modules/qrcode/lib/core/bit-matrix.js
 var require_bit_matrix = __commonJS(function(exports2, module2) {
   function BitMatrix(size) {
     if (!size || size < 1) {
@@ -87774,7 +88063,7 @@ var require_bit_matrix = __commonJS(function(exports2, module2) {
   module2.exports = BitMatrix;
 });
 
-// ../../node_modules/.bun/qrcode@1.5.4/node_modules/qrcode/lib/core/alignment-pattern.js
+// ../../../../../../../../../../../home/matti/percher-ci-b2/node_modules/.bun/qrcode@1.5.4/node_modules/qrcode/lib/core/alignment-pattern.js
 var require_alignment_pattern = __commonJS(function(exports2) {
   var getSymbolSize = require_utils().getSymbolSize;
   exports2.getRowColCoords = function getRowColCoords(version) {
@@ -87806,7 +88095,7 @@ var require_alignment_pattern = __commonJS(function(exports2) {
   };
 });
 
-// ../../node_modules/.bun/qrcode@1.5.4/node_modules/qrcode/lib/core/finder-pattern.js
+// ../../../../../../../../../../../home/matti/percher-ci-b2/node_modules/.bun/qrcode@1.5.4/node_modules/qrcode/lib/core/finder-pattern.js
 var require_finder_pattern = __commonJS(function(exports2) {
   var getSymbolSize = require_utils().getSymbolSize;
   var FINDER_PATTERN_SIZE = 7;
@@ -87820,7 +88109,7 @@ var require_finder_pattern = __commonJS(function(exports2) {
   };
 });
 
-// ../../node_modules/.bun/qrcode@1.5.4/node_modules/qrcode/lib/core/mask-pattern.js
+// ../../../../../../../../../../../home/matti/percher-ci-b2/node_modules/.bun/qrcode@1.5.4/node_modules/qrcode/lib/core/mask-pattern.js
 var require_mask_pattern = __commonJS(function(exports2) {
   exports2.Patterns = {
     PATTERN000: 0,
@@ -87969,7 +88258,7 @@ var require_mask_pattern = __commonJS(function(exports2) {
   };
 });
 
-// ../../node_modules/.bun/qrcode@1.5.4/node_modules/qrcode/lib/core/error-correction-code.js
+// ../../../../../../../../../../../home/matti/percher-ci-b2/node_modules/.bun/qrcode@1.5.4/node_modules/qrcode/lib/core/error-correction-code.js
 var require_error_correction_code = __commonJS(function(exports2) {
   var ECLevel = require_error_correction_level();
   var EC_BLOCKS_TABLE = [
@@ -88326,7 +88615,7 @@ var require_error_correction_code = __commonJS(function(exports2) {
   };
 });
 
-// ../../node_modules/.bun/qrcode@1.5.4/node_modules/qrcode/lib/core/galois-field.js
+// ../../../../../../../../../../../home/matti/percher-ci-b2/node_modules/.bun/qrcode@1.5.4/node_modules/qrcode/lib/core/galois-field.js
 var require_galois_field = __commonJS(function(exports2) {
   var EXP_TABLE = new Uint8Array(512);
   var LOG_TABLE = new Uint8Array(256);
@@ -88359,7 +88648,7 @@ var require_galois_field = __commonJS(function(exports2) {
   };
 });
 
-// ../../node_modules/.bun/qrcode@1.5.4/node_modules/qrcode/lib/core/polynomial.js
+// ../../../../../../../../../../../home/matti/percher-ci-b2/node_modules/.bun/qrcode@1.5.4/node_modules/qrcode/lib/core/polynomial.js
 var require_polynomial = __commonJS(function(exports2) {
   var GF = require_galois_field();
   exports2.mul = function mul2(p1, p2) {
@@ -88394,7 +88683,7 @@ var require_polynomial = __commonJS(function(exports2) {
   };
 });
 
-// ../../node_modules/.bun/qrcode@1.5.4/node_modules/qrcode/lib/core/reed-solomon-encoder.js
+// ../../../../../../../../../../../home/matti/percher-ci-b2/node_modules/.bun/qrcode@1.5.4/node_modules/qrcode/lib/core/reed-solomon-encoder.js
 var require_reed_solomon_encoder = __commonJS(function(exports2, module2) {
   var Polynomial = require_polynomial();
   function ReedSolomonEncoder(degree) {
@@ -88425,14 +88714,14 @@ var require_reed_solomon_encoder = __commonJS(function(exports2, module2) {
   module2.exports = ReedSolomonEncoder;
 });
 
-// ../../node_modules/.bun/qrcode@1.5.4/node_modules/qrcode/lib/core/version-check.js
+// ../../../../../../../../../../../home/matti/percher-ci-b2/node_modules/.bun/qrcode@1.5.4/node_modules/qrcode/lib/core/version-check.js
 var require_version_check = __commonJS(function(exports2) {
   exports2.isValid = function isValid(version) {
     return !isNaN(version) && version >= 1 && version <= 40;
   };
 });
 
-// ../../node_modules/.bun/qrcode@1.5.4/node_modules/qrcode/lib/core/regex.js
+// ../../../../../../../../../../../home/matti/percher-ci-b2/node_modules/.bun/qrcode@1.5.4/node_modules/qrcode/lib/core/regex.js
 var require_regex = __commonJS(function(exports2) {
   var numeric = "[0-9]+";
   var alphanumeric = "[A-Z $%*+\\-./:]+";
@@ -88459,7 +88748,7 @@ var require_regex = __commonJS(function(exports2) {
   };
 });
 
-// ../../node_modules/.bun/qrcode@1.5.4/node_modules/qrcode/lib/core/mode.js
+// ../../../../../../../../../../../home/matti/percher-ci-b2/node_modules/.bun/qrcode@1.5.4/node_modules/qrcode/lib/core/mode.js
 var require_mode2 = __commonJS(function(exports2) {
   var VersionCheck = require_version_check();
   var Regex = require_regex();
@@ -88546,7 +88835,7 @@ var require_mode2 = __commonJS(function(exports2) {
   };
 });
 
-// ../../node_modules/.bun/qrcode@1.5.4/node_modules/qrcode/lib/core/version.js
+// ../../../../../../../../../../../home/matti/percher-ci-b2/node_modules/.bun/qrcode@1.5.4/node_modules/qrcode/lib/core/version.js
 var require_version = __commonJS(function(exports2) {
   var Utils = require_utils();
   var ECCode = require_error_correction_code();
@@ -88641,7 +88930,7 @@ var require_version = __commonJS(function(exports2) {
   };
 });
 
-// ../../node_modules/.bun/qrcode@1.5.4/node_modules/qrcode/lib/core/format-info.js
+// ../../../../../../../../../../../home/matti/percher-ci-b2/node_modules/.bun/qrcode@1.5.4/node_modules/qrcode/lib/core/format-info.js
 var require_format_info = __commonJS(function(exports2) {
   var Utils = require_utils();
   var G15 = 1 << 10 | 1 << 8 | 1 << 5 | 1 << 4 | 1 << 2 | 1 << 1 | 1 << 0;
@@ -88657,7 +88946,7 @@ var require_format_info = __commonJS(function(exports2) {
   };
 });
 
-// ../../node_modules/.bun/qrcode@1.5.4/node_modules/qrcode/lib/core/numeric-data.js
+// ../../../../../../../../../../../home/matti/percher-ci-b2/node_modules/.bun/qrcode@1.5.4/node_modules/qrcode/lib/core/numeric-data.js
 var require_numeric_data = __commonJS(function(exports2, module2) {
   var Mode = require_mode2();
   function NumericData(data) {
@@ -88690,7 +88979,7 @@ var require_numeric_data = __commonJS(function(exports2, module2) {
   module2.exports = NumericData;
 });
 
-// ../../node_modules/.bun/qrcode@1.5.4/node_modules/qrcode/lib/core/alphanumeric-data.js
+// ../../../../../../../../../../../home/matti/percher-ci-b2/node_modules/.bun/qrcode@1.5.4/node_modules/qrcode/lib/core/alphanumeric-data.js
 var require_alphanumeric_data = __commonJS(function(exports2, module2) {
   var Mode = require_mode2();
   var ALPHA_NUM_CHARS = [
@@ -88767,7 +89056,7 @@ var require_alphanumeric_data = __commonJS(function(exports2, module2) {
   module2.exports = AlphanumericData;
 });
 
-// ../../node_modules/.bun/qrcode@1.5.4/node_modules/qrcode/lib/core/byte-data.js
+// ../../../../../../../../../../../home/matti/percher-ci-b2/node_modules/.bun/qrcode@1.5.4/node_modules/qrcode/lib/core/byte-data.js
 var require_byte_data = __commonJS(function(exports2, module2) {
   var Mode = require_mode2();
   function ByteData(data) {
@@ -88795,7 +89084,7 @@ var require_byte_data = __commonJS(function(exports2, module2) {
   module2.exports = ByteData;
 });
 
-// ../../node_modules/.bun/qrcode@1.5.4/node_modules/qrcode/lib/core/kanji-data.js
+// ../../../../../../../../../../../home/matti/percher-ci-b2/node_modules/.bun/qrcode@1.5.4/node_modules/qrcode/lib/core/kanji-data.js
 var require_kanji_data = __commonJS(function(exports2, module2) {
   var Mode = require_mode2();
   var Utils = require_utils();
@@ -88831,7 +89120,7 @@ var require_kanji_data = __commonJS(function(exports2, module2) {
   module2.exports = KanjiData;
 });
 
-// ../../node_modules/.bun/dijkstrajs@1.0.3/node_modules/dijkstrajs/dijkstra.js
+// ../../../../../../../../../../../home/matti/percher-ci-b2/node_modules/.bun/dijkstrajs@1.0.3/node_modules/dijkstrajs/dijkstra.js
 var require_dijkstra = __commonJS(function(exports2, module2) {
   var dijkstra = {
     single_source_shortest_paths: function(graph, s, d) {
@@ -88916,7 +89205,7 @@ var require_dijkstra = __commonJS(function(exports2, module2) {
   }
 });
 
-// ../../node_modules/.bun/qrcode@1.5.4/node_modules/qrcode/lib/core/segments.js
+// ../../../../../../../../../../../home/matti/percher-ci-b2/node_modules/.bun/qrcode@1.5.4/node_modules/qrcode/lib/core/segments.js
 var require_segments = __commonJS(function(exports2) {
   var Mode = require_mode2();
   var NumericData = require_numeric_data();
@@ -89100,7 +89389,7 @@ var require_segments = __commonJS(function(exports2) {
   };
 });
 
-// ../../node_modules/.bun/qrcode@1.5.4/node_modules/qrcode/lib/core/qrcode.js
+// ../../../../../../../../../../../home/matti/percher-ci-b2/node_modules/.bun/qrcode@1.5.4/node_modules/qrcode/lib/core/qrcode.js
 var require_qrcode = __commonJS(function(exports2) {
   var Utils = require_utils();
   var ECLevel = require_error_correction_level();
@@ -89360,7 +89649,7 @@ var require_qrcode = __commonJS(function(exports2) {
   };
 });
 
-// ../../node_modules/.bun/pngjs@5.0.0/node_modules/pngjs/lib/chunkstream.js
+// ../../../../../../../../../../../home/matti/percher-ci-b2/node_modules/.bun/pngjs@5.0.0/node_modules/pngjs/lib/chunkstream.js
 var require_chunkstream = __commonJS(function(exports2, module2) {
   var util = __require("util");
   var Stream = __require("stream");
@@ -89492,7 +89781,7 @@ var require_chunkstream = __commonJS(function(exports2, module2) {
   };
 });
 
-// ../../node_modules/.bun/pngjs@5.0.0/node_modules/pngjs/lib/interlace.js
+// ../../../../../../../../../../../home/matti/percher-ci-b2/node_modules/.bun/pngjs@5.0.0/node_modules/pngjs/lib/interlace.js
 var require_interlace = __commonJS(function(exports2) {
   var imagePasses = [
     {
@@ -89565,7 +89854,7 @@ var require_interlace = __commonJS(function(exports2) {
   };
 });
 
-// ../../node_modules/.bun/pngjs@5.0.0/node_modules/pngjs/lib/paeth-predictor.js
+// ../../../../../../../../../../../home/matti/percher-ci-b2/node_modules/.bun/pngjs@5.0.0/node_modules/pngjs/lib/paeth-predictor.js
 var require_paeth_predictor = __commonJS(function(exports2, module2) {
   module2.exports = function paethPredictor(left, above, upLeft) {
     let paeth = left + above - upLeft;
@@ -89582,7 +89871,7 @@ var require_paeth_predictor = __commonJS(function(exports2, module2) {
   };
 });
 
-// ../../node_modules/.bun/pngjs@5.0.0/node_modules/pngjs/lib/filter-parse.js
+// ../../../../../../../../../../../home/matti/percher-ci-b2/node_modules/.bun/pngjs@5.0.0/node_modules/pngjs/lib/filter-parse.js
 var require_filter_parse = __commonJS(function(exports2, module2) {
   var interlaceUtils = require_interlace();
   var paethPredictor = require_paeth_predictor();
@@ -89717,7 +90006,7 @@ var require_filter_parse = __commonJS(function(exports2, module2) {
   };
 });
 
-// ../../node_modules/.bun/pngjs@5.0.0/node_modules/pngjs/lib/filter-parse-async.js
+// ../../../../../../../../../../../home/matti/percher-ci-b2/node_modules/.bun/pngjs@5.0.0/node_modules/pngjs/lib/filter-parse-async.js
 var require_filter_parse_async = __commonJS(function(exports2, module2) {
   var util = __require("util");
   var ChunkStream = require_chunkstream();
@@ -89740,7 +90029,7 @@ var require_filter_parse_async = __commonJS(function(exports2, module2) {
   util.inherits(FilterAsync, ChunkStream);
 });
 
-// ../../node_modules/.bun/pngjs@5.0.0/node_modules/pngjs/lib/constants.js
+// ../../../../../../../../../../../home/matti/percher-ci-b2/node_modules/.bun/pngjs@5.0.0/node_modules/pngjs/lib/constants.js
 var require_constants2 = __commonJS(function(exports2, module2) {
   module2.exports = {
     PNG_SIGNATURE: [137, 80, 78, 71, 13, 10, 26, 10],
@@ -89767,7 +90056,7 @@ var require_constants2 = __commonJS(function(exports2, module2) {
   };
 });
 
-// ../../node_modules/.bun/pngjs@5.0.0/node_modules/pngjs/lib/crc.js
+// ../../../../../../../../../../../home/matti/percher-ci-b2/node_modules/.bun/pngjs@5.0.0/node_modules/pngjs/lib/crc.js
 var require_crc = __commonJS(function(exports2, module2) {
   var crcTable = [];
   (function() {
@@ -89804,7 +90093,7 @@ var require_crc = __commonJS(function(exports2, module2) {
   };
 });
 
-// ../../node_modules/.bun/pngjs@5.0.0/node_modules/pngjs/lib/parser.js
+// ../../../../../../../../../../../home/matti/percher-ci-b2/node_modules/.bun/pngjs@5.0.0/node_modules/pngjs/lib/parser.js
 var require_parser3 = __commonJS(function(exports2, module2) {
   var constants = require_constants2();
   var CrcCalculator = require_crc();
@@ -90021,7 +90310,7 @@ var require_parser3 = __commonJS(function(exports2, module2) {
   };
 });
 
-// ../../node_modules/.bun/pngjs@5.0.0/node_modules/pngjs/lib/bitmapper.js
+// ../../../../../../../../../../../home/matti/percher-ci-b2/node_modules/.bun/pngjs@5.0.0/node_modules/pngjs/lib/bitmapper.js
 var require_bitmapper = __commonJS(function(exports2) {
   var interlaceUtils = require_interlace();
   var pixelBppMapper = [
@@ -90232,7 +90521,7 @@ var require_bitmapper = __commonJS(function(exports2) {
   };
 });
 
-// ../../node_modules/.bun/pngjs@5.0.0/node_modules/pngjs/lib/format-normaliser.js
+// ../../../../../../../../../../../home/matti/percher-ci-b2/node_modules/.bun/pngjs@5.0.0/node_modules/pngjs/lib/format-normaliser.js
 var require_format_normaliser = __commonJS(function(exports2, module2) {
   function dePalette(indata, outdata, width, height, palette) {
     let pxPos = 0;
@@ -90308,7 +90597,7 @@ var require_format_normaliser = __commonJS(function(exports2, module2) {
   };
 });
 
-// ../../node_modules/.bun/pngjs@5.0.0/node_modules/pngjs/lib/parser-async.js
+// ../../../../../../../../../../../home/matti/percher-ci-b2/node_modules/.bun/pngjs@5.0.0/node_modules/pngjs/lib/parser-async.js
 var require_parser_async = __commonJS(function(exports2, module2) {
   var util = __require("util");
   var zlib = __require("zlib");
@@ -90430,7 +90719,7 @@ var require_parser_async = __commonJS(function(exports2, module2) {
   };
 });
 
-// ../../node_modules/.bun/pngjs@5.0.0/node_modules/pngjs/lib/bitpacker.js
+// ../../../../../../../../../../../home/matti/percher-ci-b2/node_modules/.bun/pngjs@5.0.0/node_modules/pngjs/lib/bitpacker.js
 var require_bitpacker = __commonJS(function(exports2, module2) {
   var constants = require_constants2();
   module2.exports = function(dataIn, width, height, options) {
@@ -90559,7 +90848,7 @@ var require_bitpacker = __commonJS(function(exports2, module2) {
   };
 });
 
-// ../../node_modules/.bun/pngjs@5.0.0/node_modules/pngjs/lib/filter-pack.js
+// ../../../../../../../../../../../home/matti/percher-ci-b2/node_modules/.bun/pngjs@5.0.0/node_modules/pngjs/lib/filter-pack.js
 var require_filter_pack = __commonJS(function(exports2, module2) {
   var paethPredictor = require_paeth_predictor();
   function filterNone(pxData, pxPos, byteWidth, rawData, rawPos) {
@@ -90698,7 +90987,7 @@ var require_filter_pack = __commonJS(function(exports2, module2) {
   };
 });
 
-// ../../node_modules/.bun/pngjs@5.0.0/node_modules/pngjs/lib/packer.js
+// ../../../../../../../../../../../home/matti/percher-ci-b2/node_modules/.bun/pngjs@5.0.0/node_modules/pngjs/lib/packer.js
 var require_packer = __commonJS(function(exports2, module2) {
   var constants = require_constants2();
   var CrcStream = require_crc();
@@ -90786,7 +91075,7 @@ var require_packer = __commonJS(function(exports2, module2) {
   };
 });
 
-// ../../node_modules/.bun/pngjs@5.0.0/node_modules/pngjs/lib/packer-async.js
+// ../../../../../../../../../../../home/matti/percher-ci-b2/node_modules/.bun/pngjs@5.0.0/node_modules/pngjs/lib/packer-async.js
 var require_packer_async = __commonJS(function(exports2, module2) {
   var util = __require("util");
   var Stream = __require("stream");
@@ -90819,7 +91108,7 @@ var require_packer_async = __commonJS(function(exports2, module2) {
   };
 });
 
-// ../../node_modules/.bun/pngjs@5.0.0/node_modules/pngjs/lib/sync-inflate.js
+// ../../../../../../../../../../../home/matti/percher-ci-b2/node_modules/.bun/pngjs@5.0.0/node_modules/pngjs/lib/sync-inflate.js
 var require_sync_inflate = __commonJS(function(exports2, module2) {
   var assert = __require("assert").ok;
   var zlib = __require("zlib");
@@ -90938,7 +91227,7 @@ var require_sync_inflate = __commonJS(function(exports2, module2) {
   exports2.inflateSync = inflateSync;
 });
 
-// ../../node_modules/.bun/pngjs@5.0.0/node_modules/pngjs/lib/sync-reader.js
+// ../../../../../../../../../../../home/matti/percher-ci-b2/node_modules/.bun/pngjs@5.0.0/node_modules/pngjs/lib/sync-reader.js
 var require_sync_reader = __commonJS(function(exports2, module2) {
   var SyncReader = module2.exports = function(buffer) {
     this._buffer = buffer;
@@ -90972,7 +91261,7 @@ var require_sync_reader = __commonJS(function(exports2, module2) {
   };
 });
 
-// ../../node_modules/.bun/pngjs@5.0.0/node_modules/pngjs/lib/filter-parse-sync.js
+// ../../../../../../../../../../../home/matti/percher-ci-b2/node_modules/.bun/pngjs@5.0.0/node_modules/pngjs/lib/filter-parse-sync.js
 var require_filter_parse_sync = __commonJS(function(exports2) {
   var SyncReader = require_sync_reader();
   var Filter = require_filter_parse();
@@ -90992,7 +91281,7 @@ var require_filter_parse_sync = __commonJS(function(exports2) {
   };
 });
 
-// ../../node_modules/.bun/pngjs@5.0.0/node_modules/pngjs/lib/parser-sync.js
+// ../../../../../../../../../../../home/matti/percher-ci-b2/node_modules/.bun/pngjs@5.0.0/node_modules/pngjs/lib/parser-sync.js
 var require_parser_sync = __commonJS(function(exports2, module2) {
   var hasSyncZlib = true;
   var zlib = __require("zlib");
@@ -91078,7 +91367,7 @@ var require_parser_sync = __commonJS(function(exports2, module2) {
   };
 });
 
-// ../../node_modules/.bun/pngjs@5.0.0/node_modules/pngjs/lib/packer-sync.js
+// ../../../../../../../../../../../home/matti/percher-ci-b2/node_modules/.bun/pngjs@5.0.0/node_modules/pngjs/lib/packer-sync.js
 var require_packer_sync = __commonJS(function(exports2, module2) {
   var hasSyncZlib = true;
   var zlib = __require("zlib");
@@ -91111,7 +91400,7 @@ var require_packer_sync = __commonJS(function(exports2, module2) {
   };
 });
 
-// ../../node_modules/.bun/pngjs@5.0.0/node_modules/pngjs/lib/png-sync.js
+// ../../../../../../../../../../../home/matti/percher-ci-b2/node_modules/.bun/pngjs@5.0.0/node_modules/pngjs/lib/png-sync.js
 var require_png_sync = __commonJS(function(exports2) {
   var parse = require_parser_sync();
   var pack = require_packer_sync();
@@ -91123,7 +91412,7 @@ var require_png_sync = __commonJS(function(exports2) {
   };
 });
 
-// ../../node_modules/.bun/pngjs@5.0.0/node_modules/pngjs/lib/png.js
+// ../../../../../../../../../../../home/matti/percher-ci-b2/node_modules/.bun/pngjs@5.0.0/node_modules/pngjs/lib/png.js
 var require_png = __commonJS(function(exports2) {
   var util = __require("util");
   var Stream = __require("stream");
@@ -91247,7 +91536,7 @@ var require_png = __commonJS(function(exports2) {
   };
 });
 
-// ../../node_modules/.bun/qrcode@1.5.4/node_modules/qrcode/lib/renderer/utils.js
+// ../../../../../../../../../../../home/matti/percher-ci-b2/node_modules/.bun/qrcode@1.5.4/node_modules/qrcode/lib/renderer/utils.js
 var require_utils2 = __commonJS(function(exports2) {
   function hex2rgba(hex) {
     if (typeof hex === "number") {
@@ -91328,7 +91617,7 @@ var require_utils2 = __commonJS(function(exports2) {
   };
 });
 
-// ../../node_modules/.bun/qrcode@1.5.4/node_modules/qrcode/lib/renderer/png.js
+// ../../../../../../../../../../../home/matti/percher-ci-b2/node_modules/.bun/qrcode@1.5.4/node_modules/qrcode/lib/renderer/png.js
 var require_png2 = __commonJS(function(exports2) {
   var fs = __require("fs");
   var PNG = require_png().PNG;
@@ -91395,7 +91684,7 @@ var require_png2 = __commonJS(function(exports2) {
   };
 });
 
-// ../../node_modules/.bun/qrcode@1.5.4/node_modules/qrcode/lib/renderer/utf8.js
+// ../../../../../../../../../../../home/matti/percher-ci-b2/node_modules/.bun/qrcode@1.5.4/node_modules/qrcode/lib/renderer/utf8.js
 var require_utf8 = __commonJS(function(exports2) {
   var Utils = require_utils2();
   var BLOCK_CHAR = {
@@ -91460,7 +91749,7 @@ var require_utf8 = __commonJS(function(exports2) {
   };
 });
 
-// ../../node_modules/.bun/qrcode@1.5.4/node_modules/qrcode/lib/renderer/terminal/terminal.js
+// ../../../../../../../../../../../home/matti/percher-ci-b2/node_modules/.bun/qrcode@1.5.4/node_modules/qrcode/lib/renderer/terminal/terminal.js
 var require_terminal = __commonJS(function(exports2) {
   exports2.render = function(qrData, options, cb) {
     const size = qrData.modules.size;
@@ -91489,7 +91778,7 @@ var require_terminal = __commonJS(function(exports2) {
   };
 });
 
-// ../../node_modules/.bun/qrcode@1.5.4/node_modules/qrcode/lib/renderer/terminal/terminal-small.js
+// ../../../../../../../../../../../home/matti/percher-ci-b2/node_modules/.bun/qrcode@1.5.4/node_modules/qrcode/lib/renderer/terminal/terminal-small.js
 var require_terminal_small = __commonJS(function(exports2) {
   var backgroundWhite = "\x1B[47m";
   var backgroundBlack = "\x1B[40m";
@@ -91548,7 +91837,7 @@ var require_terminal_small = __commonJS(function(exports2) {
   };
 });
 
-// ../../node_modules/.bun/qrcode@1.5.4/node_modules/qrcode/lib/renderer/terminal.js
+// ../../../../../../../../../../../home/matti/percher-ci-b2/node_modules/.bun/qrcode@1.5.4/node_modules/qrcode/lib/renderer/terminal.js
 var require_terminal2 = __commonJS(function(exports2) {
   var big = require_terminal();
   var small = require_terminal_small();
@@ -91560,7 +91849,7 @@ var require_terminal2 = __commonJS(function(exports2) {
   };
 });
 
-// ../../node_modules/.bun/qrcode@1.5.4/node_modules/qrcode/lib/renderer/svg-tag.js
+// ../../../../../../../../../../../home/matti/percher-ci-b2/node_modules/.bun/qrcode@1.5.4/node_modules/qrcode/lib/renderer/svg-tag.js
 var require_svg_tag = __commonJS(function(exports2) {
   var Utils = require_utils2();
   function getColorAttrib(color, attrib) {
@@ -91619,7 +91908,7 @@ var require_svg_tag = __commonJS(function(exports2) {
   };
 });
 
-// ../../node_modules/.bun/qrcode@1.5.4/node_modules/qrcode/lib/renderer/svg.js
+// ../../../../../../../../../../../home/matti/percher-ci-b2/node_modules/.bun/qrcode@1.5.4/node_modules/qrcode/lib/renderer/svg.js
 var require_svg = __commonJS(function(exports2) {
   var svgTagRenderer = require_svg_tag();
   exports2.render = svgTagRenderer.render;
@@ -91635,7 +91924,7 @@ var require_svg = __commonJS(function(exports2) {
   };
 });
 
-// ../../node_modules/.bun/qrcode@1.5.4/node_modules/qrcode/lib/renderer/canvas.js
+// ../../../../../../../../../../../home/matti/percher-ci-b2/node_modules/.bun/qrcode@1.5.4/node_modules/qrcode/lib/renderer/canvas.js
 var require_canvas = __commonJS(function(exports2) {
   var Utils = require_utils2();
   function clearCanvas(ctx, canvas, size) {
@@ -91688,7 +91977,7 @@ var require_canvas = __commonJS(function(exports2) {
   };
 });
 
-// ../../node_modules/.bun/qrcode@1.5.4/node_modules/qrcode/lib/browser.js
+// ../../../../../../../../../../../home/matti/percher-ci-b2/node_modules/.bun/qrcode@1.5.4/node_modules/qrcode/lib/browser.js
 var require_browser = __commonJS(function(exports2) {
   var canPromise = require_can_promise();
   var QRCode = require_qrcode();
@@ -91756,7 +92045,7 @@ var require_browser = __commonJS(function(exports2) {
   });
 });
 
-// ../../node_modules/.bun/qrcode@1.5.4/node_modules/qrcode/lib/server.js
+// ../../../../../../../../../../../home/matti/percher-ci-b2/node_modules/.bun/qrcode@1.5.4/node_modules/qrcode/lib/server.js
 function checkParams(text, opts, cb) {
   if (typeof text === "undefined") {
     throw new Error("String required as first argument");
@@ -91853,7 +92142,7 @@ var init_qr = __esm(() => {
   init_server();
 });
 
-// ../../node_modules/.bun/picocolors@1.1.1/node_modules/picocolors/picocolors.js
+// ../../../../../../../../../../../home/matti/percher-ci-b2/node_modules/.bun/picocolors@1.1.1/node_modules/picocolors/picocolors.js
 var require_picocolors = __commonJS(function(exports2, module2) {
   var p = process || {};
   var argv = p.argv || [];
@@ -92148,7 +92437,7 @@ async function promptHidden(question) {
 }
 var init_prompt_hidden = () => {};
 
-// ../../node_modules/.bun/@iarna+toml@2.2.5/node_modules/@iarna/toml/toml.js
+// ../../../../../../../../../../../home/matti/percher-ci-b2/node_modules/.bun/@iarna+toml@2.2.5/node_modules/@iarna/toml/toml.js
 var exports_toml = {};
 __exportCjs(exports_toml, {
   parse: () => $parse,
@@ -92158,7 +92447,7 @@ __exportCjs(exports_toml, {
   stringify: (value) => $stringify = value
 });
 
-// ../../node_modules/.bun/cac@7.0.0/node_modules/cac/dist/index.js
+// ../../../../../../../../../../../home/matti/percher-ci-b2/node_modules/.bun/cac@7.0.0/node_modules/cac/dist/index.js
 function toArr(any) {
   return any == null ? [] : Array.isArray(any) ? any : [any];
 }
@@ -93059,6 +93348,34 @@ var PROXY_LOWERCASE_ALIASES = new Set([
 // ../shared/dist/runtime.js
 var DEFAULT_NODE_VERSION_MAJOR = "24";
 var DEFAULT_NODE_VERSION_LABEL = `${DEFAULT_NODE_VERSION_MAJOR} LTS`;
+// ../shared/dist/secret-source-paths.js
+var SECRET_BASENAMES = new Set([
+  ".npmrc",
+  ".pypirc",
+  ".netrc",
+  "_netrc",
+  ".git-credentials",
+  ".htpasswd",
+  ".pgpass",
+  ".my.cnf",
+  ".dev.vars",
+  "id_rsa",
+  "id_dsa",
+  "id_ecdsa",
+  "id_ed25519",
+  "credentials.json",
+  "secrets.toml",
+  "wp-config.php"
+]);
+var SECRET_PREFIXES = [".env.", ".dev.vars."];
+var SECRET_EXTENSIONS = [".pem", ".key", ".p12", ".pfx", ".jks", ".keystore"];
+var SECRET_DIRS = new Set([".ssh", ".aws", ".gnupg"]);
+var SECRET_PATH_SUFFIXES = [".docker/config.json", ".kube/config"];
+var STATIC_CREDENTIAL_PATH_PATTERN = `(?i)(?:^|/)(?:${[
+  ...[...SECRET_BASENAMES, ".env", ...SECRET_DIRS, ...SECRET_PATH_SUFFIXES].map((p) => p.replaceAll(".", "[.]")),
+  ...SECRET_PREFIXES.map((p) => `${p.replaceAll(".", "[.]")}[^/]*`),
+  ...SECRET_EXTENSIONS.map((p) => `[^/]*${p.replaceAll(".", "[.]")}`)
+].join("|")})(?:/|$)`;
 // ../shared/dist/signup-day.js
 var stockholmDate = new Intl.DateTimeFormat("sv-SE", {
   timeZone: "Europe/Stockholm",
@@ -93076,6 +93393,47 @@ var stockholmClock = new Intl.DateTimeFormat("en-GB", {
   second: "2-digit",
   hourCycle: "h23"
 });
+// ../shared/dist/static-platform-paths.js
+var STATIC_PLATFORM_ROOT_PATTERNS = [
+  "percher.toml",
+  ".percherignore",
+  "pb",
+  "Dockerfile",
+  "Caddyfile",
+  ".git",
+  ".env",
+  ".env.*",
+  ".percher-*"
+];
+var STATIC_PLATFORM_PATH_REGEX = `(?i)(?:^/+(?:${STATIC_PLATFORM_ROOT_PATTERNS.map((p) => p.replaceAll(".", "[.]").replaceAll("*", "[^/]*")).join("|")})(?:/|$)|${STATIC_CREDENTIAL_PATH_PATTERN.slice(4)})`;
+var reserved = new RegExp(STATIC_PLATFORM_PATH_REGEX.slice(4), "i");
+function isStaticPlatformPath(path) {
+  const segments = [];
+  for (const segment of path.replaceAll("\\", "/").split("/")) {
+    if (!segment || segment === ".")
+      continue;
+    if (segment === "..")
+      segments.pop();
+    else
+      segments.push(segment);
+  }
+  return reserved.test(`/${segments.join("/")}`);
+}
+function normalizeStaticOutputDir(output) {
+  const value = output ?? "";
+  if (typeof value !== "string" || value.startsWith("/") || value.includes("\\") || /^[a-z]:/i.test(value) || [...value].some((ch) => ch.charCodeAt(0) < 32 || ch.charCodeAt(0) === 127) || value.split("/").includes(".."))
+    throw new Error("Static output must stay inside the project as a relative directory.");
+  const normalized = value.split("/").filter((p) => p && p !== ".").join("/") || ".";
+  if (isStaticPlatformPath(normalized))
+    throw new Error("Static output cannot select reserved platform content.");
+  return normalized;
+}
+function staticPlatformDenyDirectives() {
+  return [
+    `@percher_platform path_regexp percher_platform ${STATIC_PLATFORM_PATH_REGEX}`,
+    "respond @percher_platform 404"
+  ];
+}
 // ../shared/dist/switches.js
 var ONE = ["1"];
 var TRUE = ["true"];
@@ -93090,6 +93448,10 @@ var bool = (name, readers, purpose, enabled, def = "disabled", disabled = OFF_SP
   default: def
 });
 var SWITCHES = [
+  bool("PERCHER_PB_CREDENTIAL_LEDGER", ["api", "worker"], "serialize owner PocketBase reset with durable credential evidence", ONE, "disabled"),
+  bool("PERCHER_EXPORT_V2", ["api", "dashboard"], "prepare verified encrypted exports before separate one-use binary delivery", ONE, "disabled"),
+  bool("PERCHER_BACKUP_VOLUME_REQUIRED", ["api", "worker"], "require verified backup Volume identity; missing or invalid state never falls back to root storage", ONE, "disabled", ["0"]),
+  bool("PERCHER_DOCKER_REQUIRE_SECRET_MOUNTS", ["api", "worker"], "refuse private Docker build arguments after owners migrate to secret mounts (rollout gate; default off)", ONE),
   bool("PERCHER_NODE_USE_DOCKERFILE", ["api"], 'Node/Bun apps build through the Percher Dockerfile instead of Nixpacks (default; "0" is the emergency lever)', ONE, "enabled", ["0"]),
   bool("PERCHER_PYTHON_USE_DOCKERFILE", ["api"], 'Python apps build through the Percher Dockerfile instead of Nixpacks (default; "0" is the emergency lever)', ONE, "enabled", ["0"]),
   bool("PERCHER_OPS_BUILD_TRIAGE", ["api"], "append the internal cold-build triage block to build logs", ONE),
@@ -93231,11 +93593,11 @@ function generateName(input) {
 // ../toml/dist/parse.js
 import { readFile } from "node:fs/promises";
 
-// ../../node_modules/.bun/@iarna+toml@2.2.5/node_modules/@iarna/toml/toml.js
+// ../../../../../../../../../../../home/matti/percher-ci-b2/node_modules/.bun/@iarna+toml@2.2.5/node_modules/@iarna/toml/toml.js
 var $parse = require_parse();
 var $stringify = require_stringify();
 
-// ../../node_modules/.bun/zod@4.3.6/node_modules/zod/v4/core/core.js
+// ../../../../../../../../../../../home/matti/percher-ci-b2/node_modules/.bun/zod@4.3.6/node_modules/zod/v4/core/core.js
 var NEVER = Object.freeze({
   status: "aborted"
 });
@@ -93311,7 +93673,7 @@ function config(newConfig) {
     Object.assign(globalConfig, newConfig);
   return globalConfig;
 }
-// ../../node_modules/.bun/zod@4.3.6/node_modules/zod/v4/core/util.js
+// ../../../../../../../../../../../home/matti/percher-ci-b2/node_modules/.bun/zod@4.3.6/node_modules/zod/v4/core/util.js
 function getEnumValues(entries) {
   const numericValues = Object.values(entries).filter((v) => typeof v === "number");
   const values = Object.entries(entries).filter(([k, _]) => numericValues.indexOf(+k) === -1).map(([_, v]) => v);
@@ -93734,7 +94096,7 @@ function issue(...args) {
   return { ...iss };
 }
 
-// ../../node_modules/.bun/zod@4.3.6/node_modules/zod/v4/core/errors.js
+// ../../../../../../../../../../../home/matti/percher-ci-b2/node_modules/.bun/zod@4.3.6/node_modules/zod/v4/core/errors.js
 var initializer = (inst, def) => {
   inst.name = "$ZodError";
   Object.defineProperty(inst, "_zod", {
@@ -93800,7 +94162,7 @@ function formatError(error, mapper = (issue) => issue.message) {
   return fieldErrors;
 }
 
-// ../../node_modules/.bun/zod@4.3.6/node_modules/zod/v4/core/parse.js
+// ../../../../../../../../../../../home/matti/percher-ci-b2/node_modules/.bun/zod@4.3.6/node_modules/zod/v4/core/parse.js
 var _parse = (_Err) => (schema, value, _ctx, _params) => {
   const ctx = _ctx ? Object.assign(_ctx, { async: false }) : { async: false };
   const result = schema._zod.run({ value, issues: [] }, ctx);
@@ -93877,7 +94239,7 @@ var _safeEncodeAsync = (_Err) => async (schema, value, _ctx) => {
 var _safeDecodeAsync = (_Err) => async (schema, value, _ctx) => {
   return _safeParseAsync(_Err)(schema, value, _ctx);
 };
-// ../../node_modules/.bun/zod@4.3.6/node_modules/zod/v4/core/regexes.js
+// ../../../../../../../../../../../home/matti/percher-ci-b2/node_modules/.bun/zod@4.3.6/node_modules/zod/v4/core/regexes.js
 var cuid = /^[cC][^\s-]{8,}$/;
 var cuid2 = /^[0-9a-z]+$/;
 var ulid = /^[0-9A-HJKMNP-TV-Za-hjkmnp-tv-z]{26}$/;
@@ -93933,7 +94295,7 @@ var boolean = /^(?:true|false)$/i;
 var lowercase = /^[^A-Z]*$/;
 var uppercase = /^[^a-z]*$/;
 
-// ../../node_modules/.bun/zod@4.3.6/node_modules/zod/v4/core/checks.js
+// ../../../../../../../../../../../home/matti/percher-ci-b2/node_modules/.bun/zod@4.3.6/node_modules/zod/v4/core/checks.js
 var $ZodCheck = /* @__PURE__ */ $constructor("$ZodCheck", (inst, def) => {
   var _a;
   inst._zod ?? (inst._zod = {});
@@ -94322,7 +94684,7 @@ var $ZodCheckOverwrite = /* @__PURE__ */ $constructor("$ZodCheckOverwrite", (ins
   };
 });
 
-// ../../node_modules/.bun/zod@4.3.6/node_modules/zod/v4/core/doc.js
+// ../../../../../../../../../../../home/matti/percher-ci-b2/node_modules/.bun/zod@4.3.6/node_modules/zod/v4/core/doc.js
 class Doc {
   constructor(args = []) {
     this.content = [];
@@ -94360,14 +94722,14 @@ class Doc {
   }
 }
 
-// ../../node_modules/.bun/zod@4.3.6/node_modules/zod/v4/core/versions.js
+// ../../../../../../../../../../../home/matti/percher-ci-b2/node_modules/.bun/zod@4.3.6/node_modules/zod/v4/core/versions.js
 var version = {
   major: 4,
   minor: 3,
   patch: 6
 };
 
-// ../../node_modules/.bun/zod@4.3.6/node_modules/zod/v4/core/schemas.js
+// ../../../../../../../../../../../home/matti/percher-ci-b2/node_modules/.bun/zod@4.3.6/node_modules/zod/v4/core/schemas.js
 var $ZodType = /* @__PURE__ */ $constructor("$ZodType", (inst, def) => {
   var _a;
   inst ?? (inst = {});
@@ -95669,7 +96031,7 @@ function handleRefineResult(result, payload, input, inst) {
     payload.issues.push(issue(_iss));
   }
 }
-// ../../node_modules/.bun/zod@4.3.6/node_modules/zod/v4/locales/en.js
+// ../../../../../../../../../../../home/matti/percher-ci-b2/node_modules/.bun/zod@4.3.6/node_modules/zod/v4/locales/en.js
 var error = () => {
   const Sizable = {
     string: { unit: "characters", verb: "to have" },
@@ -95775,7 +96137,7 @@ function en_default() {
     localeError: error()
   };
 }
-// ../../node_modules/.bun/zod@4.3.6/node_modules/zod/v4/core/registries.js
+// ../../../../../../../../../../../home/matti/percher-ci-b2/node_modules/.bun/zod@4.3.6/node_modules/zod/v4/core/registries.js
 var _a;
 var $output = Symbol("ZodOutput");
 var $input = Symbol("ZodInput");
@@ -95825,7 +96187,7 @@ function registry() {
 }
 (_a = globalThis).__zod_globalRegistry ?? (_a.__zod_globalRegistry = registry());
 var globalRegistry = globalThis.__zod_globalRegistry;
-// ../../node_modules/.bun/zod@4.3.6/node_modules/zod/v4/core/api.js
+// ../../../../../../../../../../../home/matti/percher-ci-b2/node_modules/.bun/zod@4.3.6/node_modules/zod/v4/core/api.js
 function _string(Class, params) {
   return new Class({
     type: "string",
@@ -96274,7 +96636,7 @@ function _check(fn, params) {
   ch._zod.check = fn;
   return ch;
 }
-// ../../node_modules/.bun/zod@4.3.6/node_modules/zod/v4/core/to-json-schema.js
+// ../../../../../../../../../../../home/matti/percher-ci-b2/node_modules/.bun/zod@4.3.6/node_modules/zod/v4/core/to-json-schema.js
 function initializeContext(params) {
   let target = params?.target ?? "draft-2020-12";
   if (target === "draft-4")
@@ -96619,7 +96981,7 @@ var createStandardJSONSchemaMethod = (schema, io, processors = {}) => (params) =
   extractDefs(ctx, schema);
   return finalize(ctx, schema);
 };
-// ../../node_modules/.bun/zod@4.3.6/node_modules/zod/v4/core/json-schema-processors.js
+// ../../../../../../../../../../../home/matti/percher-ci-b2/node_modules/.bun/zod@4.3.6/node_modules/zod/v4/core/json-schema-processors.js
 var formatMap = {
   guid: "uuid",
   url: "uri",
@@ -96945,7 +97307,7 @@ var optionalProcessor = (schema, ctx, _json, params) => {
   const seen = ctx.seen.get(schema);
   seen.ref = def.innerType;
 };
-// ../../node_modules/.bun/zod@4.3.6/node_modules/zod/v4/classic/iso.js
+// ../../../../../../../../../../../home/matti/percher-ci-b2/node_modules/.bun/zod@4.3.6/node_modules/zod/v4/classic/iso.js
 var ZodISODateTime = /* @__PURE__ */ $constructor("ZodISODateTime", (inst, def) => {
   $ZodISODateTime.init(inst, def);
   ZodStringFormat.init(inst, def);
@@ -96975,7 +97337,7 @@ function duration2(params) {
   return _isoDuration(ZodISODuration, params);
 }
 
-// ../../node_modules/.bun/zod@4.3.6/node_modules/zod/v4/classic/errors.js
+// ../../../../../../../../../../../home/matti/percher-ci-b2/node_modules/.bun/zod@4.3.6/node_modules/zod/v4/classic/errors.js
 var initializer2 = (inst, issues) => {
   $ZodError.init(inst, issues);
   inst.name = "ZodError";
@@ -97010,7 +97372,7 @@ var ZodRealError = $constructor("ZodError", initializer2, {
   Parent: Error
 });
 
-// ../../node_modules/.bun/zod@4.3.6/node_modules/zod/v4/classic/parse.js
+// ../../../../../../../../../../../home/matti/percher-ci-b2/node_modules/.bun/zod@4.3.6/node_modules/zod/v4/classic/parse.js
 var parse3 = /* @__PURE__ */ _parse(ZodRealError);
 var parseAsync2 = /* @__PURE__ */ _parseAsync(ZodRealError);
 var safeParse2 = /* @__PURE__ */ _safeParse(ZodRealError);
@@ -97024,7 +97386,7 @@ var safeDecode = /* @__PURE__ */ _safeDecode(ZodRealError);
 var safeEncodeAsync = /* @__PURE__ */ _safeEncodeAsync(ZodRealError);
 var safeDecodeAsync = /* @__PURE__ */ _safeDecodeAsync(ZodRealError);
 
-// ../../node_modules/.bun/zod@4.3.6/node_modules/zod/v4/classic/schemas.js
+// ../../../../../../../../../../../home/matti/percher-ci-b2/node_modules/.bun/zod@4.3.6/node_modules/zod/v4/classic/schemas.js
 var ZodType = /* @__PURE__ */ $constructor("ZodType", (inst, def) => {
   $ZodType.init(inst, def);
   Object.assign(inst["~standard"], {
@@ -97629,7 +97991,7 @@ function refine(fn, _params = {}) {
 function superRefine(fn) {
   return _superRefine(fn);
 }
-// ../../node_modules/.bun/zod@4.3.6/node_modules/zod/v4/classic/compat.js
+// ../../../../../../../../../../../home/matti/percher-ci-b2/node_modules/.bun/zod@4.3.6/node_modules/zod/v4/classic/compat.js
 var ZodIssueCode = {
   invalid_type: "invalid_type",
   too_big: "too_big",
@@ -97645,7 +98007,7 @@ var ZodIssueCode = {
 };
 var ZodFirstPartyTypeKind;
 (function(ZodFirstPartyTypeKind) {})(ZodFirstPartyTypeKind || (ZodFirstPartyTypeKind = {}));
-// ../../node_modules/.bun/zod@4.3.6/node_modules/zod/v4/classic/external.js
+// ../../../../../../../../../../../home/matti/percher-ci-b2/node_modules/.bun/zod@4.3.6/node_modules/zod/v4/classic/external.js
 config(en_default());
 // ../toml/dist/schema.js
 var appSchema = object({
@@ -98171,7 +98533,7 @@ import { posix } from "node:path";
 import { Transform } from "node:stream";
 import { createGunzip } from "node:zlib";
 
-// ../../node_modules/.bun/tar-stream@3.1.9/node_modules/tar-stream/index.js
+// ../../../../../../../../../../../home/matti/percher-ci-b2/node_modules/.bun/tar-stream@3.1.9/node_modules/tar-stream/index.js
 var $extract = require_extract();
 var $pack = require_pack();
 
@@ -99232,7 +99594,7 @@ import { join as join9, resolve as resolve5 } from "node:path";
 // ../core/dist/templates.js
 import { existsSync as existsSync5, mkdirSync as mkdirSync6, readdirSync, readFileSync as readFileSync6, statSync, writeFileSync as writeFileSync6 } from "node:fs";
 import { basename as basename2, join as join8, normalize, relative as relative2, resolve as resolve4 } from "node:path";
-var __dirname = "C:\\dev\\Percher-npm-1.4.0-20261023\\packages\\core\\dist";
+var __dirname = "/mnt/c/dev/Percher-lc-evidence/hardening-20261031/security-assessment/npm-release/ci/linux-source/packages/core/dist";
 var TEMPLATES_DIR = resolve4(import.meta.dirname ?? __dirname, "../templates");
 var PLACEHOLDER = "__APP_NAME__";
 function listTemplates() {
@@ -99621,6 +99983,30 @@ init_dist();
 
 // ../core/dist/structured-error-codes.js
 var MAPPINGS = {
+  APP_IMAGE_VOLUME_UNSUPPORTED: {
+    errorClass: "app_image_volume_unsupported",
+    phase: "start",
+    cause: "app_image_volume_unsupported",
+    title: "Unsupported image volumes",
+    explanation: () => "The image declares volumes outside Percher's managed mount destinations.",
+    suggestion: "Check the Dockerfile and base image. Use an image that declares VOLUME only at /app/data, /tmp or /var/tmp. /app/data is persistent; /tmp and /var/tmp are bounded temporary storage. Remove other declarations or choose another base image, then publish again."
+  },
+  IMAGE_MOUNT_ATTESTATION_UNAVAILABLE: {
+    errorClass: "infra_unavailable",
+    phase: "infra",
+    cause: "image_mount_attestation_unavailable",
+    title: "Image mount verification unavailable",
+    explanation: () => "Percher could not verify the image and managed mounts. This is a platform failure.",
+    suggestion: "Retry later. If it persists, contact support."
+  },
+  BUILD_SECRETS_MIGRATION_REQUIRED: {
+    errorClass: "build_secret_migration",
+    phase: "build",
+    cause: "docker_build_secret_migration",
+    title: "Migrate Dockerfile build secrets",
+    explanation: () => "Percher refused private Docker build arguments because they can persist in image history and cache.",
+    suggestion: "Replace private ARG/ENV consumers with RUN --mount=type=secret,id=KEY,env=KEY,required=true. Add # percher: build-secrets=mount after all parser directives, before the first instruction; keep the keys in [build] pass_env. Do not print or save values. See https://percher.app/docs/env-vars#build-time."
+  },
   SECURITY_GATE_BLOCKED: {
     errorClass: "security_blocked",
     phase: "build",
@@ -100063,6 +100449,16 @@ function unprovenPlatformClaim(failure) {
 }
 function recoveryFromErrorClass(errorClass, failure) {
   switch (errorClass) {
+    case "app_image_volume_unsupported":
+      return recoveryAsk({
+        prompt: "The image declares unsupported volumes. Check the Dockerfile and base image: VOLUME may name only /app/data, /tmp or /var/tmp. /app/data is persistent; /tmp and /var/tmp are bounded temporary storage. Remove other declarations or choose another base image before publishing again.",
+        reasonCode: "app_image_volume_unsupported"
+      });
+    case "build_secret_migration":
+      return recoveryAsk({
+        prompt: "This Dockerfile needs build-secret migration. Replace each private ARG/ENV consumer with RUN --mount=type=secret,id=KEY,env=KEY,required=true, then add # percher: build-secrets=mount after all parser directives, before the first instruction. Keep the keys in [build] pass_env. Do not print or save secret values. Review https://percher.app/docs/env-vars#build-time before publishing again.",
+        reasonCode: "build_failed"
+      });
     case "security_blocked":
       return recoveryAsk({
         prompt: "Publication was blocked by security policy. Review the vulnerability details, update affected app dependencies or wait for Percher's platform fix before publishing again.",
@@ -101087,8 +101483,8 @@ import { join as join13 } from "node:path";
 // ../core/dist/tarball.js
 var import_ignore = __toESM(require_ignore(), 1);
 import { createHash as createHash2 } from "node:crypto";
-import { existsSync as existsSync6, readdirSync as readdirSync2, readFileSync as readFileSync7, statSync as statSync2 } from "node:fs";
-import { join as join11, relative as relative4, sep as sep2 } from "node:path";
+import { closeSync as closeSync2, constants, existsSync as existsSync6, fstatSync, lstatSync as lstatSync2, openSync as openSync2, readdirSync as readdirSync2, readFileSync as readFileSync7, realpathSync } from "node:fs";
+import { isAbsolute as isAbsolute2, join as join11, relative as relative4, sep as sep2 } from "node:path";
 import { Readable } from "node:stream";
 import { createGzip } from "node:zlib";
 function isFilesOptions(options) {
@@ -101109,6 +101505,31 @@ var DEFAULT_IGNORE = [
   ".DS_Store"
 ];
 var ALWAYS_IGNORE_SECRETS = [".env", ".env.*"];
+function inspectSourcePath(root, path, entry = lstatSync2(path)) {
+  if (entry.isSymbolicLink()) {
+    throw new Error(`Refusing symlink in publish source: ${relative4(root, path)}`);
+  }
+  const rel = relative4(root, realpathSync(path));
+  if (isAbsolute2(rel) || rel === ".." || rel.startsWith(`..${sep2}`)) {
+    throw new Error("Publish source must stay inside the selected project");
+  }
+  return entry;
+}
+function readSourceFile(root, path) {
+  const entry = inspectSourcePath(root, path);
+  if (!entry.isFile())
+    throw new Error("Publish source must contain regular files");
+  const fd = openSync2(path, constants.O_RDONLY | (constants.O_NOFOLLOW ?? 0) | (constants.O_NONBLOCK ?? 0));
+  try {
+    const opened = fstatSync(fd);
+    if (!opened.isFile() || opened.dev !== entry.dev || opened.ino !== entry.ino) {
+      throw new Error("Publish source changed while packaging");
+    }
+    return readFileSync7(fd);
+  } finally {
+    closeSync2(fd);
+  }
+}
 function* walk(dir, baseDir, ig) {
   const entries = readdirSync2(dir);
   for (const name of entries) {
@@ -101116,10 +101537,11 @@ function* walk(dir, baseDir, ig) {
     const rel = relative4(baseDir, full).split(sep2).join("/");
     if (ig.ignores(rel))
       continue;
-    const stats = statSync2(full);
+    const stats = lstatSync2(full);
+    if ((stats.isDirectory() || stats.isSymbolicLink()) && ig.ignores(`${rel}/`))
+      continue;
+    inspectSourcePath(baseDir, full, stats);
     if (stats.isDirectory()) {
-      if (ig.ignores(`${rel}/`))
-        continue;
       yield* walk(full, baseDir, ig);
     } else if (stats.isFile()) {
       yield rel;
@@ -101155,6 +101577,9 @@ function buildTarball(fileBuffers) {
     contentHasher.update(`PATH:${f.path.length}:${f.path}
 `);
     contentHasher.update(`SIZE:${f.size}
+`);
+    if (f.mode !== undefined)
+      contentHasher.update(`MODE:${f.mode.toString(8)}
 `);
     contentHasher.update(f.data);
     contentHasher.update(`
@@ -101165,7 +101590,11 @@ function buildTarball(fileBuffers) {
   (async () => {
     for (const file of fileBuffers) {
       await new Promise((resolve, reject) => {
-        pack.entry({ name: file.path, size: file.data.length }, file.data, (err) => err ? reject(err) : resolve());
+        pack.entry({
+          name: file.path,
+          size: file.data.length,
+          ...file.mode !== undefined ? { mode: file.mode } : {}
+        }, file.data, (err) => err ? reject(err) : resolve());
       });
     }
     pack.finalize();
@@ -101199,22 +101628,23 @@ async function createTarball(options) {
   if (isFilesOptions(options)) {
     return createTarballFromFiles(options.files, options.config);
   }
+  const root = realpathSync(options.cwd);
   const ig = import_ignore.default();
   ig.add(DEFAULT_IGNORE);
-  const gitignorePath = join11(options.cwd, ".gitignore");
+  const gitignorePath = join11(root, ".gitignore");
   if (existsSync6(gitignorePath)) {
-    ig.add(readFileSync7(gitignorePath, "utf8"));
+    ig.add(readSourceFile(root, gitignorePath).toString("utf8"));
   }
-  const percherignorePath = join11(options.cwd, ".percherignore");
+  const percherignorePath = join11(root, ".percherignore");
   if (existsSync6(percherignorePath)) {
-    ig.add(readFileSync7(percherignorePath, "utf8"));
+    ig.add(readSourceFile(root, percherignorePath).toString("utf8"));
   }
   if (options.extraIgnore)
     ig.add(options.extraIgnore);
   ig.add(ALWAYS_IGNORE_SECRETS);
   const fileBuffers = [];
-  for (const rel of walk(options.cwd, options.cwd, ig)) {
-    const data = readFileSync7(join11(options.cwd, rel));
+  for (const rel of walk(root, root, ig)) {
+    const data = readSourceFile(root, join11(root, rel));
     fileBuffers.push({ path: rel, size: data.length, data });
   }
   return buildTarball(fileBuffers);
@@ -101229,14 +101659,21 @@ function createTarballFromFiles(files, _config) {
     }
     seen.add(path);
     const data = Buffer.from(file.data);
-    fileBuffers.push({ path, size: data.length, data });
+    if (file.mode !== undefined && file.mode !== 420 && file.mode !== 493)
+      throw new Error("unsupported source file mode");
+    fileBuffers.push({
+      path,
+      size: data.length,
+      data,
+      ...file.mode !== undefined ? { mode: file.mode } : {}
+    });
   }
   return buildTarball(fileBuffers);
 }
 
 // ../core/dist/watcher.js
 var import_ignore2 = __toESM(require_ignore(), 1);
-import { existsSync as existsSync7, lstatSync as lstatSync2, readFileSync as readFileSync8, watch } from "node:fs";
+import { existsSync as existsSync7, lstatSync as lstatSync3, readFileSync as readFileSync8, watch } from "node:fs";
 import { join as join12, sep as sep3 } from "node:path";
 var DEFAULT_IGNORE2 = [
   "node_modules",
@@ -101272,7 +101709,7 @@ function createWatcher(options) {
     if (ig.ignores(rel))
       return;
     try {
-      if (lstatSync2(join12(options.cwd, rel)).isDirectory() && ig.ignores(`${rel}/`))
+      if (lstatSync3(join12(options.cwd, rel)).isDirectory() && ig.ignores(`${rel}/`))
         return;
     } catch {}
     pending.add(rel);
@@ -101843,6 +102280,10 @@ async function doctor(ctx, input = {}) {
     checks.push({ name: "App", status: "skip", message: reason });
     return summarize(checks, { appProvided: !!input.app, tomlProblems });
   }
+  return doctorServer(ctx, { ...input, app: appName }, checks, !!input.app);
+}
+async function doctorServer(ctx, input, checks = [], appProvided = true) {
+  const appName = input.app;
   let appStatus;
   let lastDeployStatus;
   let lastDeployId;
@@ -102112,7 +102553,7 @@ ${rc.errors.map((e) => `  • [${e.kind}] ${e.text}${e.url ? ` (${e.url}${e.line
   }
   return summarize(checks, {
     appName,
-    appProvided: !!input.app,
+    appProvided,
     appStatus,
     lastDeployStatus,
     lastDeployId,
@@ -102684,10 +103125,11 @@ async function envList(ctx, input = {}) {
   return { values, detailed };
 }
 // ../core/dist/commands/export.js
-import { randomUUID as randomUUID2 } from "node:crypto";
+init_dist();
+import { createHash as createHash3, randomUUID as randomUUID2 } from "node:crypto";
 import { createWriteStream as createWriteStream2 } from "node:fs";
 import { rename as rename2, unlink as unlink2 } from "node:fs/promises";
-import { isAbsolute as isAbsolute2, resolve as resolvePath } from "node:path";
+import { isAbsolute as isAbsolute3, resolve as resolvePath } from "node:path";
 var exportInputSchema = object({
   app: string2().optional(),
   out: string2().optional(),
@@ -102707,9 +103149,10 @@ function resolveAppName3(ctx, provided) {
   }
   return name;
 }
-async function streamToFile(outPath, source) {
+async function streamToFile(outPath, source, options) {
+  options?.signal?.throwIfAborted();
   const tmpPath = `${outPath}.part-${randomUUID2()}`;
-  const out = createWriteStream2(tmpPath);
+  const out = createWriteStream2(tmpPath, { flags: "wx", mode: 384 });
   const reader = source.getReader();
   const closed = new Promise((resolve) => out.once("close", () => resolve()));
   let onWriteError;
@@ -102718,14 +103161,31 @@ async function streamToFile(outPath, source) {
   });
   out.once("error", onWriteError);
   writeFailed.catch(() => {});
+  const hash = options ? createHash3("sha256") : undefined;
+  const abort = () => {
+    const reason = options?.signal?.reason instanceof Error ? options.signal.reason : new Error("Export aborted");
+    out.destroy(reason);
+    reader.cancel(reason).catch(() => {});
+  };
+  options?.signal?.addEventListener("abort", abort, { once: true });
+  if (options?.signal?.aborted)
+    abort();
   let bytes = 0;
   try {
     for (;; ) {
       const { done, value } = await Promise.race([reader.read(), writeFailed]);
+      options?.signal?.throwIfAborted();
       if (done)
         break;
       if (value && value.byteLength > 0) {
+        if (options && value.byteLength > options.bytes - bytes)
+          throw new PercherApiError("Export size did not match its verified header.", {
+            status: 502,
+            code: "EXPORT_INTEGRITY_FAILED"
+          });
         bytes += value.byteLength;
+        hash?.update(value);
+        options?.signal?.throwIfAborted();
         if (!out.write(value)) {
           await Promise.race([
             new Promise((resolve) => out.once("drain", resolve)),
@@ -102734,15 +103194,24 @@ async function streamToFile(outPath, source) {
         }
       }
     }
+    options?.signal?.throwIfAborted();
     await new Promise((resolve, reject) => {
       out.end((err) => err ? reject(err) : resolve());
     });
     await closed;
+    options?.signal?.throwIfAborted();
+    if (options && (bytes !== options.bytes || hash?.digest("hex") !== options.sha256))
+      throw new PercherApiError("Export checksum or size verification failed. The previous file was preserved.", { status: 502, code: "EXPORT_INTEGRITY_FAILED" });
   } catch (err) {
+    reader.cancel().catch(() => {});
     out.destroy();
     await closed;
     await unlink2(tmpPath).catch(() => {});
+    options?.signal?.throwIfAborted();
     throw err;
+  } finally {
+    options?.signal?.removeEventListener("abort", abort);
+    reader.releaseLock();
   }
   try {
     await rename2(tmpPath, outPath);
@@ -102753,35 +103222,93 @@ async function streamToFile(outPath, source) {
   return { bytes };
 }
 function resolveOutPath(ctxCwd, filename) {
-  if (isAbsolute2(filename))
+  if (isAbsolute3(filename))
     return filename;
   return resolvePath(ctxCwd, filename);
 }
 async function exportApp(ctx, input) {
   const name = resolveAppName3(ctx, input.app);
-  const mint = await ctx.client.export.mint(name, { deliveryKind: input.deliveryKind });
-  const dl = await ctx.client.export.download(mint.downloadUrl);
-  if (!dl.body) {
-    throw new PercherCoreError("Export download returned an empty body", {
-      code: "export.empty-body",
-      hint: "Try again — the link is single-use, so a new mint is required."
+  const started = Date.now();
+  const controller = new AbortController;
+  const expired = () => controller.abort(new PercherApiError("Export preparation expired. Start a new export.", {
+    status: 410,
+    code: "EXPORT_EXPIRED"
+  }));
+  let timer = setTimeout(expired, 900000);
+  let response;
+  try {
+    const mint = await ctx.client.export.mintV2(name, {
+      deliveryKind: input.deliveryKind,
+      signal: controller.signal
+    });
+    const originalDeadline = Date.parse(mint.expiresAt);
+    const localDeadline = Math.min(originalDeadline, started + 900000);
+    clearTimeout(timer);
+    if (localDeadline <= Date.now())
+      expired();
+    else
+      timer = setTimeout(expired, localDeadline - Date.now());
+    controller.signal.throwIfAborted();
+    let state = await ctx.client.export.prepareV2(mint.preparationToken, controller.signal);
+    let revision = -1;
+    let polls = 0;
+    for (;; ) {
+      controller.signal.throwIfAborted();
+      if (Date.now() >= localDeadline) {
+        expired();
+        controller.signal.throwIfAborted();
+      }
+      if (state.operationId !== mint.operationId || state.deadline !== originalDeadline || state.revision < revision)
+        throw new PercherApiError("Export preparation status changed unexpectedly.", {
+          status: 502,
+          code: "EXPORT_INVALID_RESPONSE"
+        });
+      revision = state.revision;
+      if (state.state === "READY")
+        break;
+      if (state.state === "CLEANUP_REQUIRED")
+        throw new PercherApiError("Export preparation requires cleanup. Contact support before retrying.", { status: 409, code: "EXPORT_CLEANUP_REQUIRED" });
+      if (state.state === "NOT_REQUESTED")
+        throw new PercherApiError("Export preparation was not queued. Retry later.", {
+          status: 409,
+          code: "EXPORT_NOT_REQUESTED"
+        });
+      if (++polls > 900) {
+        expired();
+        controller.signal.throwIfAborted();
+      }
+      await abortableSleep(Math.min(1000, localDeadline - Date.now()), controller.signal);
+      controller.signal.throwIfAborted();
+      state = await ctx.client.export.statusV2(mint.preparationToken, controller.signal);
+    }
+    const grant = await ctx.client.export.grantV2(mint.preparationToken, controller.signal);
+    if (Date.parse(grant.expiresAt) > originalDeadline)
+      throw new PercherApiError("Export grant exceeded the preparation deadline.", {
+        status: 502,
+        code: "EXPORT_INVALID_RESPONSE"
+      });
+    const download = await ctx.client.export.downloadV2(grant.downloadUrl, controller.signal);
+    response = download.response;
+    if (!response.body)
+      throw new PercherCoreError("Export download returned an empty body", {
+        code: "export.empty-body"
+      });
+    const headerName = response.headers.get("Content-Disposition")?.match(/filename="?([^";]+)"?/)?.[1];
+    const safeHeader = headerName && /^[A-Za-z0-9][A-Za-z0-9._-]{0,127}$/.test(headerName) ? headerName : undefined;
+    const fallback = `${name.replace(/[^A-Za-z0-9._-]/g, "_")}-export.tar.gz`;
+    const outPath = resolveOutPath(ctx.cwd, input.out ?? safeHeader ?? fallback);
+    const { bytes } = await streamToFile(outPath, response.body, {
+      signal: controller.signal,
+      bytes: download.bytes,
+      sha256: download.sha256
     });
+    return { appName: name, outPath, bytes, expiresAt: mint.expiresAt, includedSecrets: false };
+  } finally {
+    clearTimeout(timer);
+    controller.abort();
+    if (response?.body && !response.body.locked)
+      response.body.cancel().catch(() => {});
   }
-  const filenameFromHeader = (() => {
-    const cd = dl.headers.get("Content-Disposition") ?? "";
-    const m = cd.match(/filename="?([^";]+)"?/);
-    return m?.[1];
-  })();
-  const filename = input.out ?? filenameFromHeader ?? `${name}-export.tar.gz`;
-  const outPath = resolveOutPath(ctx.cwd, filename);
-  const { bytes } = await streamToFile(outPath, dl.body);
-  return {
-    appName: name,
-    outPath,
-    bytes,
-    expiresAt: mint.expiresAt,
-    includedSecrets: false
-  };
 }
 async function exportGitBundle(ctx, input) {
   const name = resolveAppName3(ctx, input.app);
@@ -103136,6 +103663,16 @@ var INIT_TEMPLATE_FRAMEWORKS = new Set([
   "vite"
 ]);
 function renderStaticFrameworkDockerfile(input) {
+  const outputDir = normalizeStaticOutputDir(input.outputDir);
+  const sanitize = [
+    'const fs=require("node:fs"),path=require("node:path")',
+    "const root=fs.realpathSync(process.argv[1]),dir=fs.realpathSync(process.argv[2]),dest=process.argv[3]",
+    `const deny=new RegExp(${JSON.stringify(STATIC_PLATFORM_PATH_REGEX.slice(4))},"i")`,
+    'const reserved=p=>deny.test("/"+p.split(path.sep).join("/"))',
+    'if((dir!==root&&!dir.startsWith(root+path.sep))||reserved(path.relative(root,dir)))throw Error("Static output escapes the project or selects platform content")',
+    'if(fs.existsSync(dest))throw Error("Reserved static staging directory already exists")',
+    'fs.cpSync(dir,dest,{recursive:true,filter:p=>{if(reserved(path.relative(dir,p))||reserved(path.relative(root,p)))return false;if(fs.lstatSync(p).isSymbolicLink())throw Error("Static content cannot contain symlinks");return true}})'
+  ].join(";");
   return `# Multi-stage build: a Bun stage compiles the static bundle, then a
 # minimal Caddy image serves it. This project uses runtime = "docker"
 # (not "static") because Percher's static runtime serves pre-built
@@ -103148,27 +103685,26 @@ WORKDIR /app
 COPY . .
 RUN bun install && bun run build
 
+# Preserve build inputs for deployment; only this filtered copy reaches /srv.
+FROM build AS static-content
+RUN bun -e ${shellQuote(sanitize)} '/app' ${shellQuote(`/app/${outputDir}`)} '/percher-static-content'
+
 # --- Serve stage: minimal Caddy image --------------------------------
 # Build pinned Caddy source with refreshed security modules. The scratch
 # runtime carries no shell, package manager, or file capabilities and listens
 # on the unprivileged port :${STATIC_DOCKER_PORT}.
 FROM golang:1.26.10-alpine3.23@sha256:0525c952defebc693cdaf62cdf43afa32be5a7f377e99260642ea19c240c708e AS caddy-source
-ADD --checksum=sha256:78e660d838e45c0b8c89338b325946238f153641aa9925df9ef2ad5e8eced31b \\
-  https://github.com/caddyserver/caddy/commit/b2693fb63a30e6d7be0972c3645e9a2c0a500e93.patch /tmp/caddy-cel-go.patch
-RUN go mod download github.com/caddyserver/caddy/v2@v2.11.4 \\
- && cp -R /go/pkg/mod/github.com/caddyserver/caddy/v2@v2.11.4 /src \\
+RUN go mod download github.com/caddyserver/caddy/v2@v2.11.7 \\
+ && cp -R /go/pkg/mod/github.com/caddyserver/caddy/v2@v2.11.7 /src \\
  && chmod -R u+w /src
 WORKDIR /src
-RUN apk add --no-cache patch \\
- && patch -p1 < /tmp/caddy-cel-go.patch \\
- && go get github.com/go-chi/chi/v5@v5.3.0 github.com/google/cel-go@v0.29.2 \\
-      github.com/klauspost/compress@v1.18.7 go.opentelemetry.io/otel@v1.45.0 \\
-      go.opentelemetry.io/otel/sdk/log@v0.21.0 \\
-      go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc@v0.21.0 \\
-      go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp@v0.21.0 \\
-      go.opentelemetry.io/otel/exporters/stdout/stdoutlog@v0.21.0 \\
-      go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.45.0 \\
-      go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.45.0 \\
+RUN go get github.com/go-chi/chi/v5@v5.3.2 github.com/klauspost/compress@v1.20.1 \\
+      go.opentelemetry.io/otel@v1.46.0 go.opentelemetry.io/otel/sdk/log@v0.22.0 \\
+      go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc@v0.22.0 \\
+      go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp@v0.22.0 \\
+      go.opentelemetry.io/otel/exporters/stdout/stdoutlog@v0.22.0 \\
+      go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.46.0 \\
+      go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.46.0 \\
       golang.org/x/crypto@v0.57.0 golang.org/x/net@v0.60.0 \\
       golang.org/x/text@v0.42.0 google.golang.org/grpc@v1.83.2 \\
  && go mod tidy \\
@@ -103184,7 +103720,7 @@ COPY --from=caddy-source /etc/ssl/certs/ca-certificates.crt /etc/ssl/certs/ca-ce
 COPY --from=caddy-source /out/caddy /usr/bin/caddy
 COPY --from=caddy-source /out/percher-healthcheck /usr/bin/percher-healthcheck
 COPY Caddyfile /etc/caddy/Caddyfile
-COPY --from=build /app/${input.outputDir} /srv
+COPY --from=static-content /percher-static-content /srv
 LABEL dev.percher.health-client="static-http-v1"
 # HOME points at the writable tmpfs so non-root Caddy can persist its
 # XDG state (storage-clean lock, config autosave) under Percher's
@@ -103196,11 +103732,17 @@ CMD ["caddy", "run", "--config", "/etc/caddy/Caddyfile", "--adapter", "caddyfile
 `;
 }
 function renderStaticFrameworkCaddyfile(input) {
-  const directives = ["bind 0.0.0.0", "root * /srv", "encode gzip zstd"];
+  const directives = [
+    "bind 0.0.0.0",
+    "root * /srv",
+    "encode gzip zstd",
+    "route {",
+    ...staticPlatformDenyDirectives().map((line) => `	${line}`)
+  ];
   if (input.spa) {
-    directives.push("try_files {path} /index.html");
+    directives.push("\ttry_files {path} /index.html");
   }
-  directives.push("file_server");
+  directives.push("\tfile_server", "}");
   const body = directives.map((d) => `	${d}`).join(`
 `);
   return `:${STATIC_DOCKER_PORT} {
@@ -103217,6 +103759,9 @@ function readGoPins(dockerfile) {
   }
   return { go: /^FROM golang:(\d+\.\d+\.\d+)/m.exec(dockerfile)?.[1] ?? null, modules };
 }
+function shellQuote(value) {
+  return "'" + value.replaceAll("'", "'\\''") + "'";
+}
 
 // ../core/dist/commands/import-project.js
 var importInputSchema = object({
@@ -106509,7 +107054,7 @@ function applyRewrite(path, replacement, kind, pattern, note, flags, state) {
 // ../core/dist/commands/migrate-supabase-walker.js
 var import_ignore3 = __toESM(require_ignore(), 1);
 import { mkdir as mkdir2, readdir, readFile as readFile3, stat as stat2, writeFile as writeFile2 } from "node:fs/promises";
-import { dirname as dirname6, isAbsolute as isAbsolute3, join as join19, relative as relative5, resolve as resolve7, sep as sep4 } from "node:path";
+import { dirname as dirname6, isAbsolute as isAbsolute4, join as join19, relative as relative5, resolve as resolve7, sep as sep4 } from "node:path";
 var REWRITABLE_EXTENSIONS = new Set([".ts", ".tsx", ".js", ".jsx", ".mjs", ".cjs"]);
 var DEFAULT_EXCLUDES = [
   "node_modules",
@@ -106820,7 +107365,7 @@ async function writeWalkResult(input) {
     const abs = resolve7(targetAbs, file.relativePath);
     const rel = relative5(targetAbs, abs);
     const isParentTraversal = rel === ".." || rel.startsWith(`..${sep4}`) || rel.startsWith("../");
-    if (rel.length === 0 || isParentTraversal || isAbsolute3(rel)) {
+    if (rel.length === 0 || isParentTraversal || isAbsolute4(rel)) {
       throw new Error(`writeWalkResult refused path-traversing file "${file.relativePath}" → "${abs}" (would escape targetDir "${targetAbs}").`);
     }
     await mkdir2(dirname6(abs), { recursive: true });
@@ -107557,7 +108102,7 @@ function failure3(rootAbs, mode, err, suggestion) {
 }
 // ../core/dist/commands/migrate-supabase-schema.js
 import { mkdir as mkdir4, writeFile as writeFile4 } from "node:fs/promises";
-import { isAbsolute as isAbsolute4, join as join22, relative as relative8, resolve as resolve10 } from "node:path";
+import { isAbsolute as isAbsolute5, join as join22, relative as relative8, resolve as resolve10 } from "node:path";
 
 // ../core/dist/commands/migrate-supabase-scripts.js
 function generateDataImportScripts(preview) {
@@ -108070,7 +108615,7 @@ async function migrateSupabaseSchema(ctx, input) {
 }
 function resolveOutputDir(cwd, requested) {
   const raw = requested ?? "./migration-preview";
-  return isAbsolute4(raw) ? raw : resolve10(cwd, raw);
+  return isAbsolute5(raw) ? raw : resolve10(cwd, raw);
 }
 async function writePreviewFiles(ctx, outputDir, preview) {
   await mkdir4(outputDir, { recursive: true });
@@ -108316,9 +108861,9 @@ import { existsSync as existsSync15 } from "node:fs";
 import { join as join25 } from "node:path";
 
 // ../shared/dist/pow.js
-import { createHash as createHash3 } from "node:crypto";
+import { createHash as createHash4 } from "node:crypto";
 function digest(nonce, solution) {
-  return createHash3("sha256").update(`${nonce}:${solution}`).digest("hex");
+  return createHash4("sha256").update(`${nonce}:${solution}`).digest("hex");
 }
 function leadingZeroBits(hexDigest) {
   let bits = 0;
@@ -108717,7 +109262,7 @@ async function runDeployWithRetry(opts) {
 
 // ../core/dist/commands/env-scan.js
 init_dist();
-import { readdirSync as readdirSync3, readFileSync as readFileSync11, statSync as statSync3 } from "node:fs";
+import { readdirSync as readdirSync3, readFileSync as readFileSync11, statSync as statSync2 } from "node:fs";
 import { join as join23 } from "node:path";
 function platformInjectedClientEnvKeys(config) {
   const data = config.data;
@@ -108811,7 +109356,7 @@ function* walkDir(dir, base) {
     const full = join23(dir, name);
     let st;
     try {
-      st = statSync3(full);
+      st = statSync2(full);
     } catch {
       continue;
     }
@@ -110290,6 +110835,19 @@ var publishInlineInputSchema = object({
   noCache: boolean2().optional().describe("Skip the image cache and force a fresh build."),
   waitForLive: boolean2().optional().describe("If true (default), block until the deploy is live or failed. If false, return as soon as it is queued so the agent can resume with percher_wait_for_deploy.")
 });
+// ../core/dist/commands/publish-patch.js
+var publishPatchInputSchema = object({
+  app: string2().min(1).describe("Explicit app name or id. No local-state fallback."),
+  expectedBase: string2().regex(/^[0-9a-f]{40}$/).describe("Full live version commit from percher_versions; prefixes and branch names are refused."),
+  files: array(object({
+    path: string2().min(1).max(1024),
+    content: string2(),
+    encoding: _enum(["utf8", "base64"]).optional()
+  }).strict()).max(2000),
+  delete: array(string2().min(1).max(1024)).max(2000),
+  dryRun: boolean2().optional().describe("Classify requested changes without creating a deployment or returning unchanged source."),
+  confirm: boolean2().optional().describe("Required true for publishing, after the user requested the change.")
+}).strict().refine((input) => input.dryRun === true || input.confirm === true, "Publishing requires confirm: true.");
 // ../core/dist/commands/push.js
 init_dist();
 import { existsSync as existsSync16 } from "node:fs";
@@ -111511,7 +112069,7 @@ async function sleep(ctx, input = {}) {
 var statusInputSchema = object({
   json: boolean2().optional()
 });
-async function status(ctx, _input = {}) {
+async function status2(ctx, _input = {}) {
   let health;
   try {
     health = await ctx.client.platform.health();
@@ -114242,7 +114800,7 @@ function registerSharingCommands(cli, ctx) {
 var import_picocolors15 = __toESM(require_picocolors(), 1);
 function registerStatusCommands(cli, ctx) {
   cli.command("status", "Show Percher platform status (API + worker health)").option("--json", "Output JSON instead of formatted text").action(async (options) => {
-    const result = await status(ctx, { json: Boolean(options.json) });
+    const result = await status2(ctx, { json: Boolean(options.json) });
     if (options.json) {
       await writeLine2(ctx, JSON.stringify(result, null, 2));
       if (result.verdict === "unreachable")
@@ -114291,7 +114849,7 @@ import { createInterface } from "node:readline";
 // package.json
 var package_default2 = {
   name: "percher",
-  version: "1.4.0",
+  version: "1.4.1",
   description: "CLI for the Percher hosting platform — publish apps with one command",
   type: "module",
   bin: {
@@ -114319,10 +114877,10 @@ var package_default2 = {
     typecheck: "tsc --noEmit"
   },
   dependencies: {
-    "@percher/shared": "^1.3.0",
-    "@percher/client": "^1.4.0",
-    "@percher/core": "^1.4.0",
-    "@percher/toml": "^1.0.5",
+    "@percher/shared": "^1.3.1",
+    "@percher/client": "^1.4.1",
+    "@percher/core": "^1.4.1",
+    "@percher/toml": "^1.0.6",
     cac: "^7.0.0",
     picocolors: "^1.1.1"
   },