pockethost 4.0.0 → 4.1.0

package/CHANGELOG.md

@@ -2,6 +2,21 @@
 
 Formerly published as `phio`. Versions below 3.0.0 are phio's history.
 
+## 4.1.0
+
+### Minor Changes
+
+- New file commands that work over HTTPS with your token, replacing SFTP:
+  - `pockethost files [path] [-r]` lists files on the instance.
+  - `pockethost pull [paths...]` downloads files into the current folder (everything except `pb_data` by default;
+    `--data` includes it, and `node_modules` is skipped unless you name it). Files that haven't changed since the last
+    pull are skipped.
+  - `pockethost upload <local> [remote]` uploads a file or folder, for example an existing `pb_data` or your
+    `node_modules` (deploys never touch `node_modules`). Large files go up in 32 MB chunks, eight files at a time.
+  - `pockethost rm <paths...> [-r]` deletes files, for example a migration that keeps the instance from starting.
+  - Add `-I <instance>` to target an instance other than the linked one. `pb_data` needs the instance powered off.
+- `pockethost sftp`, `deploy --sftp` and `dev --sftp` print a notice: SFTP shuts down on February 6, 2027.
+
 ## 4.0.0
 
 ### Major Changes

package/LICENSE.md

@@ -0,0 +1,16 @@
+The MIT License (MIT)
+
+Permission is hereby granted, free of charge, to any person obtaining a copy of this software
+and associated documentation files (the "Software"), to deal in the Software without restriction,
+including without limitation the rights to use, copy, modify, merge, publish, distribute,
+sublicense, and/or sell copies of the Software, and to permit persons to whom the Software
+is furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all copies or
+substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING
+BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
+NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM,
+DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.

package/README.md

@@ -31,7 +31,11 @@ pockethost list          # alias: pockethost ls
 pockethost link [instance]
 pockethost dev [instance]
 pockethost deploy [instance]
-pockethost sftp [instance]
+pockethost files [path]
+pockethost pull [paths...]
+pockethost upload <local> [remote]
+pockethost rm <paths...>
+pockethost sftp [instance]   # shuts down Feb 6, 2027
 pockethost logs [instance]
 ```
 
@@ -39,7 +43,11 @@ pockethost logs [instance]
 - **`pockethost deploy`**: deploy once
 - **`pockethost login`**: open Account → API Tokens and save the token you paste
 - **`pockethost token`**: save, clear, or check the token
-- **`pockethost sftp`**: interactive SFTP session (uses system `sftp` when available)
+- **`pockethost files`**: list files on the instance (`-r` for everything below a folder)
+- **`pockethost pull`**: download instance files into this folder (`--data` includes `pb_data`)
+- **`pockethost upload`**: upload a file or folder, such as an existing `pb_data`
+- **`pockethost rm`**: delete files on the instance
+- **`pockethost sftp`**: interactive SFTP session. SFTP shuts down on February 6, 2027
 - **`pockethost logs`**: tail instance logs
 
 `dev` and `deploy` accept `-v/--verbose`, `-i/--include`, `-e/--exclude`, and `--sftp` (sync over SFTP instead of

package/dist/cli.js

@@ -156,7 +156,7 @@ var require_DLList = __commonJS({
 var require_Events = __commonJS({
   "../../node_modules/.pnpm/bottleneck@2.19.5/node_modules/bottleneck/lib/Events.js"(exports2, module2) {
     "use strict";
-    function asyncGeneratorStep2(gen, resolve3, reject, _next, _throw, key, arg) {
+    function asyncGeneratorStep2(gen, resolve4, reject, _next, _throw, key, arg) {
       try {
         var info = gen[key](arg);
         var value = info.value;
@@ -165,7 +165,7 @@ var require_Events = __commonJS({
         return;
       }
       if (info.done) {
-        resolve3(value);
+        resolve4(value);
       } else {
         Promise.resolve(value).then(_next, _throw);
       }
@@ -173,13 +173,13 @@ var require_Events = __commonJS({
     function _asyncToGenerator2(fn) {
       return function() {
         var self = this, args = arguments;
-        return new Promise(function(resolve3, reject) {
+        return new Promise(function(resolve4, reject) {
           var gen = fn.apply(self, args);
           function _next(value) {
-            asyncGeneratorStep2(gen, resolve3, reject, _next, _throw, "next", value);
+            asyncGeneratorStep2(gen, resolve4, reject, _next, _throw, "next", value);
           }
           function _throw(err) {
-            asyncGeneratorStep2(gen, resolve3, reject, _next, _throw, "throw", err);
+            asyncGeneratorStep2(gen, resolve4, reject, _next, _throw, "throw", err);
           }
           _next(void 0);
         });
@@ -371,7 +371,7 @@ var require_BottleneckError = __commonJS({
 var require_Job = __commonJS({
   "../../node_modules/.pnpm/bottleneck@2.19.5/node_modules/bottleneck/lib/Job.js"(exports2, module2) {
     "use strict";
-    function asyncGeneratorStep2(gen, resolve3, reject, _next, _throw, key, arg) {
+    function asyncGeneratorStep2(gen, resolve4, reject, _next, _throw, key, arg) {
       try {
         var info = gen[key](arg);
         var value = info.value;
@@ -380,7 +380,7 @@ var require_Job = __commonJS({
         return;
       }
       if (info.done) {
-        resolve3(value);
+        resolve4(value);
       } else {
         Promise.resolve(value).then(_next, _throw);
       }
@@ -388,13 +388,13 @@ var require_Job = __commonJS({
     function _asyncToGenerator2(fn) {
       return function() {
         var self = this, args = arguments;
-        return new Promise(function(resolve3, reject) {
+        return new Promise(function(resolve4, reject) {
           var gen = fn.apply(self, args);
           function _next(value) {
-            asyncGeneratorStep2(gen, resolve3, reject, _next, _throw, "next", value);
+            asyncGeneratorStep2(gen, resolve4, reject, _next, _throw, "next", value);
           }
           function _throw(err) {
-            asyncGeneratorStep2(gen, resolve3, reject, _next, _throw, "throw", err);
+            asyncGeneratorStep2(gen, resolve4, reject, _next, _throw, "throw", err);
           }
           _next(void 0);
         });
@@ -575,7 +575,7 @@ var require_Job = __commonJS({
 var require_LocalDatastore = __commonJS({
   "../../node_modules/.pnpm/bottleneck@2.19.5/node_modules/bottleneck/lib/LocalDatastore.js"(exports2, module2) {
     "use strict";
-    function asyncGeneratorStep2(gen, resolve3, reject, _next, _throw, key, arg) {
+    function asyncGeneratorStep2(gen, resolve4, reject, _next, _throw, key, arg) {
       try {
         var info = gen[key](arg);
         var value = info.value;
@@ -584,7 +584,7 @@ var require_LocalDatastore = __commonJS({
         return;
       }
       if (info.done) {
-        resolve3(value);
+        resolve4(value);
       } else {
         Promise.resolve(value).then(_next, _throw);
       }
@@ -592,13 +592,13 @@ var require_LocalDatastore = __commonJS({
     function _asyncToGenerator2(fn) {
       return function() {
         var self = this, args = arguments;
-        return new Promise(function(resolve3, reject) {
+        return new Promise(function(resolve4, reject) {
           var gen = fn.apply(self, args);
           function _next(value) {
-            asyncGeneratorStep2(gen, resolve3, reject, _next, _throw, "next", value);
+            asyncGeneratorStep2(gen, resolve4, reject, _next, _throw, "next", value);
           }
           function _throw(err) {
-            asyncGeneratorStep2(gen, resolve3, reject, _next, _throw, "throw", err);
+            asyncGeneratorStep2(gen, resolve4, reject, _next, _throw, "throw", err);
           }
           _next(void 0);
         });
@@ -667,8 +667,8 @@ var require_LocalDatastore = __commonJS({
         })();
       }
       yieldLoop(t = 0) {
-        return new this.Promise(function(resolve3, reject) {
-          return setTimeout(resolve3, t);
+        return new this.Promise(function(resolve4, reject) {
+          return setTimeout(resolve4, t);
         });
       }
       computePenalty() {
@@ -1138,7 +1138,7 @@ var require_Scripts = __commonJS({
 var require_RedisConnection = __commonJS({
   "../../node_modules/.pnpm/bottleneck@2.19.5/node_modules/bottleneck/lib/RedisConnection.js"(exports, module) {
     "use strict";
-    function asyncGeneratorStep(gen, resolve3, reject, _next, _throw, key, arg) {
+    function asyncGeneratorStep(gen, resolve4, reject, _next, _throw, key, arg) {
       try {
         var info = gen[key](arg);
         var value = info.value;
@@ -1147,7 +1147,7 @@ var require_RedisConnection = __commonJS({
         return;
       }
       if (info.done) {
-        resolve3(value);
+        resolve4(value);
       } else {
         Promise.resolve(value).then(_next, _throw);
       }
@@ -1155,13 +1155,13 @@ var require_RedisConnection = __commonJS({
     function _asyncToGenerator(fn) {
       return function() {
         var self = this, args = arguments;
-        return new Promise(function(resolve3, reject) {
+        return new Promise(function(resolve4, reject) {
           var gen = fn.apply(self, args);
           function _next(value) {
-            asyncGeneratorStep(gen, resolve3, reject, _next, _throw, "next", value);
+            asyncGeneratorStep(gen, resolve4, reject, _next, _throw, "next", value);
           }
           function _throw(err) {
-            asyncGeneratorStep(gen, resolve3, reject, _next, _throw, "throw", err);
+            asyncGeneratorStep(gen, resolve4, reject, _next, _throw, "throw", err);
           }
           _next(void 0);
         });
@@ -1202,7 +1202,7 @@ var require_RedisConnection = __commonJS({
         }
         _setup(client, sub) {
           client.setMaxListeners(0);
-          return new this.Promise((resolve3, reject) => {
+          return new this.Promise((resolve4, reject) => {
             client.on("error", (e) => {
               return this.Events.trigger("error", e);
             });
@@ -1213,14 +1213,14 @@ var require_RedisConnection = __commonJS({
               });
             }
             if (client.ready) {
-              return resolve3();
+              return resolve4();
             } else {
-              return client.once("ready", resolve3);
+              return client.once("ready", resolve4);
             }
           });
         }
         _loadScript(name) {
-          return new this.Promise((resolve3, reject) => {
+          return new this.Promise((resolve4, reject) => {
             var payload;
             payload = Scripts.payload(name);
             return this.client.multi([["script", "load", payload]]).exec((err, replies) => {
@@ -1228,7 +1228,7 @@ var require_RedisConnection = __commonJS({
                 return reject(err);
               }
               this.shas[name] = replies[0];
-              return resolve3(replies[0]);
+              return resolve4(replies[0]);
             });
           });
         }
@@ -1241,12 +1241,12 @@ var require_RedisConnection = __commonJS({
           var _this = this;
           return _asyncToGenerator(function* () {
             yield _this.ready;
-            return new _this.Promise((resolve3, reject) => {
+            return new _this.Promise((resolve4, reject) => {
               return _this.client.multi([cmd]).exec_atomic(function(err, replies) {
                 if (err != null) {
                   return reject(err);
                 } else {
-                  return resolve3(replies[0]);
+                  return resolve4(replies[0]);
                 }
               });
             });
@@ -1254,13 +1254,13 @@ var require_RedisConnection = __commonJS({
         }
         __addLimiter__(instance) {
           return this.Promise.all([instance.channel(), instance.channel_client()].map((channel) => {
-            return new this.Promise((resolve3, reject) => {
+            return new this.Promise((resolve4, reject) => {
               var handler;
               handler = (chan) => {
                 if (chan === channel) {
                   this.subscriber.removeListener("subscribe", handler);
                   this.limiters[channel] = instance;
-                  return resolve3();
+                  return resolve4();
                 }
               };
               this.subscriber.on("subscribe", handler);
@@ -1274,13 +1274,13 @@ var require_RedisConnection = __commonJS({
             /* @__PURE__ */ (function() {
               var _ref = _asyncToGenerator(function* (channel) {
                 if (!_this2.terminated) {
-                  yield new _this2.Promise((resolve3, reject) => {
+                  yield new _this2.Promise((resolve4, reject) => {
                     return _this2.subscriber.unsubscribe(channel, function(err, chan) {
                       if (err != null) {
                         return reject(err);
                       }
                       if (chan === channel) {
-                        return resolve3();
+                        return resolve4();
                       }
                     });
                   });
@@ -1365,7 +1365,7 @@ var require_IORedisConnection = __commonJS({
     function _arrayWithHoles(arr) {
       if (Array.isArray(arr)) return arr;
     }
-    function asyncGeneratorStep(gen, resolve3, reject, _next, _throw, key, arg) {
+    function asyncGeneratorStep(gen, resolve4, reject, _next, _throw, key, arg) {
       try {
         var info = gen[key](arg);
         var value = info.value;
@@ -1374,7 +1374,7 @@ var require_IORedisConnection = __commonJS({
         return;
       }
       if (info.done) {
-        resolve3(value);
+        resolve4(value);
       } else {
         Promise.resolve(value).then(_next, _throw);
       }
@@ -1382,13 +1382,13 @@ var require_IORedisConnection = __commonJS({
     function _asyncToGenerator(fn) {
       return function() {
         var self = this, args = arguments;
-        return new Promise(function(resolve3, reject) {
+        return new Promise(function(resolve4, reject) {
           var gen = fn.apply(self, args);
           function _next(value) {
-            asyncGeneratorStep(gen, resolve3, reject, _next, _throw, "next", value);
+            asyncGeneratorStep(gen, resolve4, reject, _next, _throw, "next", value);
           }
           function _throw(err) {
-            asyncGeneratorStep(gen, resolve3, reject, _next, _throw, "throw", err);
+            asyncGeneratorStep(gen, resolve4, reject, _next, _throw, "throw", err);
           }
           _next(void 0);
         });
@@ -1434,7 +1434,7 @@ var require_IORedisConnection = __commonJS({
         }
         _setup(client, sub) {
           client.setMaxListeners(0);
-          return new this.Promise((resolve3, reject) => {
+          return new this.Promise((resolve4, reject) => {
             client.on("error", (e) => {
               return this.Events.trigger("error", e);
             });
@@ -1445,9 +1445,9 @@ var require_IORedisConnection = __commonJS({
               });
             }
             if (client.status === "ready") {
-              return resolve3();
+              return resolve4();
             } else {
-              return client.once("ready", resolve3);
+              return client.once("ready", resolve4);
             }
           });
         }
@@ -1473,10 +1473,10 @@ var require_IORedisConnection = __commonJS({
         }
         __addLimiter__(instance) {
           return this.Promise.all([instance.channel(), instance.channel_client()].map((channel) => {
-            return new this.Promise((resolve3, reject) => {
+            return new this.Promise((resolve4, reject) => {
               return this.subscriber.subscribe(channel, () => {
                 this.limiters[channel] = instance;
-                return resolve3();
+                return resolve4();
               });
             });
           }));
@@ -1574,7 +1574,7 @@ var require_RedisDatastore = __commonJS({
     function _arrayWithHoles2(arr) {
       if (Array.isArray(arr)) return arr;
     }
-    function asyncGeneratorStep2(gen, resolve3, reject, _next, _throw, key, arg) {
+    function asyncGeneratorStep2(gen, resolve4, reject, _next, _throw, key, arg) {
       try {
         var info = gen[key](arg);
         var value = info.value;
@@ -1583,7 +1583,7 @@ var require_RedisDatastore = __commonJS({
         return;
       }
       if (info.done) {
-        resolve3(value);
+        resolve4(value);
       } else {
         Promise.resolve(value).then(_next, _throw);
       }
@@ -1591,13 +1591,13 @@ var require_RedisDatastore = __commonJS({
     function _asyncToGenerator2(fn) {
       return function() {
         var self = this, args = arguments;
-        return new Promise(function(resolve3, reject) {
+        return new Promise(function(resolve4, reject) {
           var gen = fn.apply(self, args);
           function _next(value) {
-            asyncGeneratorStep2(gen, resolve3, reject, _next, _throw, "next", value);
+            asyncGeneratorStep2(gen, resolve4, reject, _next, _throw, "next", value);
           }
           function _throw(err) {
-            asyncGeneratorStep2(gen, resolve3, reject, _next, _throw, "throw", err);
+            asyncGeneratorStep2(gen, resolve4, reject, _next, _throw, "throw", err);
           }
           _next(void 0);
         });
@@ -1733,7 +1733,7 @@ var require_RedisDatastore = __commonJS({
           if (!(name === "init" || name === "register_client")) {
             yield _this3.ready;
           }
-          return new _this3.Promise((resolve3, reject) => {
+          return new _this3.Promise((resolve4, reject) => {
             var all_args, arr;
             all_args = [Date.now(), _this3.clientId].concat(args);
             _this3.instance.Events.trigger("debug", `Calling Redis script: ${name}.lua`, all_args);
@@ -1741,7 +1741,7 @@ var require_RedisDatastore = __commonJS({
               if (err != null) {
                 return reject(err);
               }
-              return resolve3(replies);
+              return resolve4(replies);
             });
             return _this3.connection.__scriptFn__(name)(...arr);
           }).catch((e) => {
@@ -1972,7 +1972,7 @@ var require_States = __commonJS({
 var require_Sync = __commonJS({
   "../../node_modules/.pnpm/bottleneck@2.19.5/node_modules/bottleneck/lib/Sync.js"(exports2, module2) {
     "use strict";
-    function asyncGeneratorStep2(gen, resolve3, reject, _next, _throw, key, arg) {
+    function asyncGeneratorStep2(gen, resolve4, reject, _next, _throw, key, arg) {
       try {
         var info = gen[key](arg);
         var value = info.value;
@@ -1981,7 +1981,7 @@ var require_Sync = __commonJS({
         return;
       }
       if (info.done) {
-        resolve3(value);
+        resolve4(value);
       } else {
         Promise.resolve(value).then(_next, _throw);
       }
@@ -1989,13 +1989,13 @@ var require_Sync = __commonJS({
     function _asyncToGenerator2(fn) {
       return function() {
         var self = this, args = arguments;
-        return new Promise(function(resolve3, reject) {
+        return new Promise(function(resolve4, reject) {
           var gen = fn.apply(self, args);
           function _next(value) {
-            asyncGeneratorStep2(gen, resolve3, reject, _next, _throw, "next", value);
+            asyncGeneratorStep2(gen, resolve4, reject, _next, _throw, "next", value);
           }
           function _throw(err) {
-            asyncGeneratorStep2(gen, resolve3, reject, _next, _throw, "throw", err);
+            asyncGeneratorStep2(gen, resolve4, reject, _next, _throw, "throw", err);
           }
           _next(void 0);
         });
@@ -2018,19 +2018,19 @@ var require_Sync = __commonJS({
       _tryToRun() {
         var _this = this;
         return _asyncToGenerator2(function* () {
-          var args, cb, error, reject, resolve3, returned, task;
+          var args, cb, error, reject, resolve4, returned, task;
           if (_this._running < 1 && _this._queue.length > 0) {
             _this._running++;
             var _this$_queue$shift = _this._queue.shift();
             task = _this$_queue$shift.task;
             args = _this$_queue$shift.args;
-            resolve3 = _this$_queue$shift.resolve;
+            resolve4 = _this$_queue$shift.resolve;
             reject = _this$_queue$shift.reject;
             cb = yield _asyncToGenerator2(function* () {
               try {
                 returned = yield task(...args);
                 return function() {
-                  return resolve3(returned);
+                  return resolve4(returned);
                 };
               } catch (error1) {
                 error = error1;
@@ -2046,16 +2046,16 @@ var require_Sync = __commonJS({
         })();
       }
       schedule(task, ...args) {
-        var promise, reject, resolve3;
-        resolve3 = reject = null;
+        var promise, reject, resolve4;
+        resolve4 = reject = null;
         promise = new this.Promise(function(_resolve, _reject) {
-          resolve3 = _resolve;
+          resolve4 = _resolve;
           return reject = _reject;
         });
         this._queue.push({
           task,
           args,
-          resolve: resolve3,
+          resolve: resolve4,
           reject
         });
         this._tryToRun();
@@ -2108,7 +2108,7 @@ var require_Group = __commonJS({
     function _arrayWithHoles2(arr) {
       if (Array.isArray(arr)) return arr;
     }
-    function asyncGeneratorStep2(gen, resolve3, reject, _next, _throw, key, arg) {
+    function asyncGeneratorStep2(gen, resolve4, reject, _next, _throw, key, arg) {
       try {
         var info = gen[key](arg);
         var value = info.value;
@@ -2117,7 +2117,7 @@ var require_Group = __commonJS({
         return;
       }
       if (info.done) {
-        resolve3(value);
+        resolve4(value);
       } else {
         Promise.resolve(value).then(_next, _throw);
       }
@@ -2125,13 +2125,13 @@ var require_Group = __commonJS({
     function _asyncToGenerator2(fn) {
       return function() {
         var self = this, args = arguments;
-        return new Promise(function(resolve3, reject) {
+        return new Promise(function(resolve4, reject) {
           var gen = fn.apply(self, args);
           function _next(value) {
-            asyncGeneratorStep2(gen, resolve3, reject, _next, _throw, "next", value);
+            asyncGeneratorStep2(gen, resolve4, reject, _next, _throw, "next", value);
           }
           function _throw(err) {
-            asyncGeneratorStep2(gen, resolve3, reject, _next, _throw, "throw", err);
+            asyncGeneratorStep2(gen, resolve4, reject, _next, _throw, "throw", err);
           }
           _next(void 0);
         });
@@ -2394,7 +2394,7 @@ var require_Bottleneck = __commonJS({
     function _arrayWithHoles2(arr) {
       if (Array.isArray(arr)) return arr;
     }
-    function asyncGeneratorStep2(gen, resolve3, reject, _next, _throw, key, arg) {
+    function asyncGeneratorStep2(gen, resolve4, reject, _next, _throw, key, arg) {
       try {
         var info = gen[key](arg);
         var value = info.value;
@@ -2403,7 +2403,7 @@ var require_Bottleneck = __commonJS({
         return;
       }
       if (info.done) {
-        resolve3(value);
+        resolve4(value);
       } else {
         Promise.resolve(value).then(_next, _throw);
       }
@@ -2411,13 +2411,13 @@ var require_Bottleneck = __commonJS({
     function _asyncToGenerator2(fn) {
       return function() {
         var self = this, args = arguments;
-        return new Promise(function(resolve3, reject) {
+        return new Promise(function(resolve4, reject) {
           var gen = fn.apply(self, args);
           function _next(value) {
-            asyncGeneratorStep2(gen, resolve3, reject, _next, _throw, "next", value);
+            asyncGeneratorStep2(gen, resolve4, reject, _next, _throw, "next", value);
           }
           function _throw(err) {
-            asyncGeneratorStep2(gen, resolve3, reject, _next, _throw, "throw", err);
+            asyncGeneratorStep2(gen, resolve4, reject, _next, _throw, "throw", err);
           }
           _next(void 0);
         });
@@ -2655,14 +2655,14 @@ var require_Bottleneck = __commonJS({
               counts = this._states.counts;
               return counts[0] + counts[1] + counts[2] + counts[3] === at2;
             };
-            return new this.Promise((resolve3, reject) => {
+            return new this.Promise((resolve4, reject) => {
               if (finished()) {
-                return resolve3();
+                return resolve4();
               } else {
                 return this.on("done", () => {
                   if (finished()) {
                     this.removeAllListeners("done");
-                    return resolve3();
+                    return resolve4();
                   }
                 });
               }
@@ -2770,9 +2770,9 @@ var require_Bottleneck = __commonJS({
             options2 = parser2.load(options2, this.jobDefaults);
           }
           task = (...args2) => {
-            return new this.Promise(function(resolve3, reject) {
+            return new this.Promise(function(resolve4, reject) {
               return fn(...args2, function(...args3) {
-                return (args3[0] != null ? reject : resolve3)(args3);
+                return (args3[0] != null ? reject : resolve4)(args3);
               });
             });
           };
@@ -6444,7 +6444,7 @@ function useColor() {
 var program = new Command();
 
 // package.json
-var version = "4.0.0";
+var version = "4.1.0";
 
 // src/lib/projectRoot.ts
 import { existsSync as existsSync2 } from "fs";
@@ -6774,7 +6774,7 @@ var syncFileDescription = "DO NOT DELETE THIS FILE. This file is used to keep tr
 import fs2 from "fs";
 import crypto from "crypto";
 async function fileHash(filename, algorithm) {
-  return new Promise((resolve3, reject) => {
+  return new Promise((resolve4, reject) => {
     let shasum = crypto.createHash(algorithm);
     try {
       let s = fs2.createReadStream(filename);
@@ -6786,7 +6786,7 @@ async function fileHash(filename, algorithm) {
       });
       s.on("end", function() {
         const hash = shasum.digest("hex");
-        return resolve3(hash);
+        return resolve4(hash);
       });
     } catch (error) {
       return reject("calc fail");
@@ -8960,9 +8960,9 @@ function getDefaultSettings(withoutDefaults) {
     timeout: withoutDefaults.timeout ?? 3e4
   };
 }
-function applyExcludeFilter(stat4, excludeFilters) {
+function applyExcludeFilter(stat5, excludeFilters) {
   if (excludeFilters.length > 0) {
-    const pathWithFolderSlash = stat4.path + (stat4.isDirectory() ? "/" : "");
+    const pathWithFolderSlash = stat5.path + (stat5.isDirectory() ? "/" : "");
     const excludeMatch = multimatch(pathWithFolderSlash, excludeFilters, {
       matchBase: true,
       dot: true
@@ -12314,8 +12314,8 @@ async function getLocalFiles(args, logger) {
   logger.verbose(`Local files:`, JSON.stringify({ files }, null, 2));
   const records = [];
   for (const path5 of files) {
-    const stat4 = lstatSync(path5);
-    if (stat4.isDirectory()) {
+    const stat5 = lstatSync(path5);
+    if (stat5.isDirectory()) {
       records.push({
         type: "folder",
         name: path5,
@@ -12323,16 +12323,16 @@ async function getLocalFiles(args, logger) {
       });
       continue;
     }
-    if (stat4.isFile()) {
+    if (stat5.isFile()) {
       records.push({
         type: "file",
         name: path5,
-        size: stat4.size,
+        size: stat5.size,
         hash: await fileHash(args["local-dir"] + path5, "sha256")
       });
       continue;
     }
-    if (stat4.isSymbolicLink()) {
+    if (stat5.isSymbolicLink()) {
       console.warn(
         "This script is currently unable to handle symbolic links - please add a feature request if you need this"
       );
@@ -13398,9 +13398,9 @@ var NodeFsHandler = class {
     if (this.fsw.closed) {
       return;
     }
-    const dirname4 = sp.dirname(file);
+    const dirname5 = sp.dirname(file);
     const basename3 = sp.basename(file);
-    const parent = this.fsw._getWatchedDir(dirname4);
+    const parent = this.fsw._getWatchedDir(dirname5);
     let prevStats = stats;
     if (parent.has(basename3))
       return;
@@ -13427,7 +13427,7 @@ var NodeFsHandler = class {
             prevStats = newStats2;
           }
         } catch (error) {
-          this.fsw._remove(dirname4, basename3);
+          this.fsw._remove(dirname5, basename3);
         }
       } else if (parent.has(basename3)) {
         const at2 = newStats.atimeMs;
@@ -13524,7 +13524,7 @@ var NodeFsHandler = class {
         this._addToNodeFs(path5, initialAdd, wh, depth + 1);
       }
     }).on(EV.ERROR, this._boundHandleError);
-    return new Promise((resolve3, reject) => {
+    return new Promise((resolve4, reject) => {
       if (!stream)
         return reject();
       stream.once(STR_END, () => {
@@ -13533,7 +13533,7 @@ var NodeFsHandler = class {
           return;
         }
         const wasThrottled = throttler ? throttler.clear() : false;
-        resolve3(void 0);
+        resolve4(void 0);
         previous.getChildren().filter((item) => {
           return item !== directory && !current.has(item);
         }).forEach((item) => {
@@ -13677,11 +13677,11 @@ function createPattern(matcher) {
       if (matcher.path === string)
         return true;
       if (matcher.recursive) {
-        const relative4 = sp2.relative(matcher.path, string);
-        if (!relative4) {
+        const relative5 = sp2.relative(matcher.path, string);
+        if (!relative5) {
           return false;
         }
-        return !relative4.startsWith("..") && !sp2.isAbsolute(relative4);
+        return !relative5.startsWith("..") && !sp2.isAbsolute(relative5);
       }
       return false;
     };
@@ -14260,8 +14260,8 @@ var FSWatcher = class extends EventEmitter2 {
     }
     return this._userIgnored(path5, stats);
   }
-  _isntIgnored(path5, stat4) {
-    return !this._isIgnored(path5, stat4);
+  _isntIgnored(path5, stat5) {
+    return !this._isIgnored(path5, stat5);
   }
   /**
    * Provides a set of common helpers and properties relating to symlink handling.
@@ -14697,7 +14697,17 @@ var describeToken = (w) => {
 // src/lib/sftpAuth.ts
 var SshKeyNotRegisteredError = class extends Error {
 };
+var SFTP_SUNSET_DATE = "February 6, 2027";
+var warnedSunset = false;
+var warnSftpSunset = () => {
+  if (warnedSunset) return;
+  warnedSunset = true;
+  console.warn(
+    `\u26A0\uFE0F  SFTP shuts down on ${SFTP_SUNSET_DATE}. Use 'pockethost deploy' / 'pockethost dev' (HTTPS) for code, and 'pockethost files', 'pull', 'upload' and 'rm' for everything else. https://pockethost.io/blog/sftp-sunset`
+  );
+};
 var sftpCredentials = async () => {
+  warnSftpSunset();
   const cred = await resolveDeployCredential();
   const key = ensureLocalDeployKey();
   const who = await tokenWhoami(cred.token, key.fingerprint);
@@ -15122,8 +15132,273 @@ var DeployCommand = () => {
   });
 };
 
+// src/commands/FilesCommand.ts
+import { existsSync as existsSync5, readdirSync as readdirSync2, statSync } from "fs";
+import { join as join5, relative as relative4, resolve as resolve3, sep as sep3 } from "path";
+
+// src/lib/filesApi.ts
+import { createReadStream, createWriteStream } from "fs";
+import { mkdir, rename, stat as stat4, utimes } from "fs/promises";
+import { dirname as dirname4 } from "path";
+import { Readable as Readable2 } from "stream";
+import { pipeline } from "stream/promises";
+var FILE_CHUNK_BYTES = 32 * 1024 * 1024;
+var normalizeRemotePath = (p = "") => p.replace(/\\/g, "/").replace(/^\.?\/+/, "").replace(/\/+$/, "").replace(/^\.$/, "");
+var errorFrom = async (res, instanceName) => {
+  const text = await res.text().catch(() => "");
+  let message = text.slice(0, 300) || `HTTP ${res.status}`;
+  try {
+    message = JSON.parse(text).message || message;
+  } catch {
+  }
+  if (res.status === 404 && /not found$/.test(message) && message.includes("."))
+    message = `Instance '${instanceName}' not found, or this token cannot access it.`;
+  return new DeployApiError(res.status, message);
+};
+var createFilesClient = async (instanceName) => {
+  const api = createDeployClient(instanceName, await resolveDeployCredential());
+  const url = (path5, q2) => {
+    const u = new URL(`${api.base}/files${path5}`);
+    for (const [k2, v2] of Object.entries(q2)) u.searchParams.set(k2, `${v2}`);
+    return u.toString();
+  };
+  const send = async (method, path5, q2, body) => {
+    let res;
+    try {
+      res = await fetch(url(path5, q2), {
+        method,
+        headers: {
+          ...api.headers,
+          ...body ? { "Content-Type": "application/octet-stream" } : {}
+        },
+        body
+      });
+    } catch (e) {
+      throw new DeployApiError(
+        0,
+        `Could not reach ${api.base}: ${e.message}`
+      );
+    }
+    if (!res.ok) throw await errorFrom(res, instanceName);
+    return res;
+  };
+  const list = async (path5 = "", recursive = false) => {
+    const res = await send("GET", "", {
+      path: normalizeRemotePath(path5),
+      recursive: recursive ? 1 : 0
+    });
+    return await res.json();
+  };
+  const download = async (remote, dest) => {
+    const res = await send("GET", "/raw", { path: normalizeRemotePath(remote) });
+    await mkdir(dirname4(dest), { recursive: true });
+    const tmp = `${dest}.pockethost-download`;
+    await pipeline(Readable2.fromWeb(res.body), createWriteStream(tmp));
+    await rename(tmp, dest);
+    const mtime = Number(res.headers.get("x-ph-mtime"));
+    if (mtime > 0) await utimes(dest, /* @__PURE__ */ new Date(), new Date(mtime));
+  };
+  const upload = async (local, remote, onProgress) => {
+    const { size } = await stat4(local);
+    const path5 = normalizeRemotePath(remote);
+    if (size === 0) {
+      await send(
+        "PUT",
+        "/raw",
+        { path: path5, offset: 0, final: 1 },
+        new Uint8Array(0)
+      );
+      return size;
+    }
+    let offset = 0;
+    for await (const chunk of createReadStream(local, {
+      highWaterMark: FILE_CHUNK_BYTES
+    })) {
+      const buf = chunk;
+      const final = offset + buf.length >= size;
+      await send(
+        "PUT",
+        "/raw",
+        { path: path5, offset, final: final ? 1 : 0 },
+        new Uint8Array(buf)
+      );
+      offset += buf.length;
+      onProgress?.(offset, size);
+    }
+    if (offset !== size)
+      throw new Error(`${local} changed size during upload; run it again`);
+    return size;
+  };
+  const remove = async (remote, recursive = false) => {
+    await send("DELETE", "", {
+      path: normalizeRemotePath(remote),
+      recursive: recursive ? 1 : 0
+    });
+  };
+  return { base: api.base, list, download, upload, remove };
+};
+
+// src/commands/FilesCommand.ts
+var DATA_DIR = "pb_data";
+var NODE_MODULES = "node_modules";
+var UPLOAD_CONCURRENCY = 8;
+var hasNodeModules = (p) => p.split("/").includes(NODE_MODULES);
+var requireInstance = (instance) => {
+  const name = instance || savedInstanceName();
+  if (!name)
+    throw new Error(
+      `No instance given and none linked. Pass --instance <name> or run 'pockethost link <instance>'.`
+    );
+  return name;
+};
+var instanceOption = (cmd) => cmd.option(
+  "-I, --instance <name>",
+  "Instance name (defaults to the linked instance)"
+);
+var dataHint = (e) => {
+  const msg = e?.message ?? `${e}`;
+  return /power off/i.test(msg) ? `${msg} Power it off in the dashboard, run this again, then power it back on.` : msg;
+};
+var fmtDate = (ms2) => new Date(ms2).toISOString().replace("T", " ").slice(0, 16);
+var FilesCommand = () => instanceOption(
+  new Command("files").alias("ls-files").description(
+    "List files on your instance (pb_hooks, pb_migrations, pb_public, pb_data, ...)"
+  ).argument("[path]", "Folder or file on the instance", "").option("-r, --recursive", "List everything below the folder").option("--json", "Print JSON")
+).action(async (path5, options2) => {
+  const files = await createFilesClient(requireInstance(options2.instance));
+  const out = await files.list(path5, !!options2.recursive).catch((e) => {
+    throw new Error(dataHint(e));
+  });
+  if (options2.json) {
+    console.log(JSON.stringify(out.entries, null, 2));
+    return;
+  }
+  if (out.entries.length === 0) console.log(`(empty)`);
+  for (const e of out.entries) {
+    const size = e.isDirectory ? "-" : prettyBytes(e.size);
+    console.log(
+      `${fmtDate(e.mtime)}  ${size.padStart(10)}  ${e.path}${e.isDirectory ? "/" : ""}`
+    );
+  }
+  if (out.truncated) console.log(`(list truncated)`);
+});
+var isCurrent = (local, e) => {
+  if (!existsSync5(local)) return false;
+  const st2 = statSync(local);
+  return st2.size === e.size && Math.abs(st2.mtimeMs - e.mtime) < 1e3;
+};
+var PullCommand = () => instanceOption(
+  new Command("pull").description(
+    "Download files from your instance into this folder. Default: everything except pb_data"
+  ).argument(
+    "[paths...]",
+    "Files or folders on the instance (e.g. pb_hooks pb_data/backups)"
+  ).option("--data", "Include pb_data (the instance must be powered off)").option("-d, --dir <dir>", "Local folder to download into", ".").option("-n, --dry-run", "Show what would be downloaded").option("-v, --verbose", "Print every file")
+).action(async (paths, options2) => {
+  const instanceName = requireInstance(options2.instance);
+  const files = await createFilesClient(instanceName);
+  const dir = resolve3(options2.dir);
+  let roots = paths.map((p) => normalizeRemotePath(p)).filter(Boolean);
+  if (roots.length === 0) {
+    const top = await files.list("");
+    roots = top.entries.map((e) => e.path).filter((p) => (options2.data || p !== DATA_DIR) && p !== NODE_MODULES);
+    if (!options2.data && top.entries.some((e) => e.path === DATA_DIR))
+      console.log(`Skipping pb_data (add --data to include it).`);
+    if (top.entries.some((e) => e.path === NODE_MODULES))
+      console.log(
+        `Skipping node_modules (run 'pockethost pull node_modules' if you need it).`
+      );
+  }
+  const wanted = [];
+  for (const root of roots) {
+    const { entries } = await files.list(root, true).catch((e) => {
+      throw new Error(`${root}: ${dataHint(e)}`);
+    });
+    wanted.push(
+      ...entries.filter(
+        (e) => !e.isDirectory && (hasNodeModules(root) || !hasNodeModules(e.path))
+      )
+    );
+  }
+  const todo = wanted.filter((e) => !isCurrent(join5(dir, e.path), e));
+  const bytes = todo.reduce((n7, e) => n7 + e.size, 0);
+  console.log(
+    `${options2.dryRun ? "Would download" : "Downloading"} ${todo.length} of ${wanted.length} file(s) (${prettyBytes(bytes)}) from ${instanceName} into ${dir}`
+  );
+  for (const e of todo) {
+    if (options2.verbose || options2.dryRun) console.log(`   ${e.path}`);
+    if (!options2.dryRun) await files.download(e.path, join5(dir, e.path));
+  }
+  if (!options2.dryRun) console.log(`\u2705 Done.`);
+});
+var walkLocal = (abs) => {
+  const st2 = statSync(abs);
+  if (!st2.isDirectory()) return [abs];
+  return readdirSync2(abs).filter((n7) => !n7.startsWith(".git")).flatMap((n7) => walkLocal(join5(abs, n7)));
+};
+var UploadCommand = () => instanceOption(
+  new Command("upload").description(
+    "Upload a file or folder to your instance, e.g. an existing pb_data or node_modules. Writing to pb_data needs the instance powered off"
+  ).argument("<local>", "Local file or folder").argument(
+    "[remote]",
+    "Where to put it on the instance (defaults to the same relative path, e.g. pb_data/data.db)"
+  ).option("-v, --verbose", "Print every file")
+).action(async (local, remote, options2) => {
+  const instanceName = requireInstance(options2.instance);
+  const abs = resolve3(local);
+  if (!existsSync5(abs)) throw new Error(`${local} not found`);
+  const target = normalizeRemotePath(
+    remote ?? relative4(process.cwd(), abs).split(sep3).join("/")
+  );
+  if (!target || target.startsWith(".."))
+    throw new Error(
+      `Give a remote path, e.g. 'pockethost upload ${local} pb_data/data.db'`
+    );
+  const files = await createFilesClient(instanceName);
+  const all = walkLocal(abs);
+  const total = all.reduce((n7, f) => n7 + statSync(f).size, 0);
+  console.log(
+    `\u2B06\uFE0F  Uploading ${all.length} file(s) (${prettyBytes(total)}) to ${instanceName}:${target}`
+  );
+  let next = 0;
+  let done = 0;
+  const worker = async () => {
+    while (next < all.length) {
+      const f = all[next++];
+      const rel = relative4(abs, f).split(sep3).join("/");
+      const dest = rel ? `${target}/${rel}` : target;
+      await files.upload(f, dest).catch((e) => {
+        next = all.length;
+        throw new Error(`${dest}: ${dataHint(e)}`);
+      });
+      done++;
+      if (options2.verbose) console.log(`   ${dest}`);
+      else if (all.length > 50 && done % 250 === 0)
+        console.log(`   ${done}/${all.length}`);
+    }
+  };
+  await Promise.all(
+    Array.from({ length: Math.min(UPLOAD_CONCURRENCY, all.length) }, worker)
+  );
+  console.log(`\u2705 Done.`);
+});
+var RmCommand = () => instanceOption(
+  new Command("rm").description(
+    "Delete files on your instance, e.g. a migration that keeps it from starting"
+  ).argument("<paths...>", "Files or folders on the instance").option("-r, --recursive", "Delete folders and everything in them")
+).action(async (paths, options2) => {
+  const instanceName = requireInstance(options2.instance);
+  const files = await createFilesClient(instanceName);
+  for (const p of paths) {
+    await files.remove(p, !!options2.recursive).catch((e) => {
+      throw new Error(`${p}: ${dataHint(e)}`);
+    });
+    console.log(`\u{1F5D1}\uFE0F  Deleted ${instanceName}:${normalizeRemotePath(p)}`);
+  }
+});
+
 // src/commands/InfoCommand.ts
-import { existsSync as existsSync5, readFileSync as readFileSync5 } from "fs";
+import { existsSync as existsSync6, readFileSync as readFileSync5 } from "fs";
 
 // ../../node_modules/.pnpm/@inquirer+core@11.2.1_@types+node@20.19.43/node_modules/@inquirer/core/dist/lib/key.js
 var keybindings = ["emacs", "vim"];
@@ -16515,13 +16790,13 @@ var PromisePolyfill = class extends Promise {
   // Available starting from Node 22
   // https://developer.mozilla.org/en-US/docs/Web/JavaScript/Reference/Global_Objects/Promise/withResolvers
   static withResolver() {
-    let resolve3;
+    let resolve4;
     let reject;
     const promise = new Promise((res, rej) => {
-      resolve3 = res;
+      resolve4 = res;
       reject = rej;
     });
-    return { promise, resolve: resolve3, reject };
+    return { promise, resolve: resolve4, reject };
   }
 };
 
@@ -16558,7 +16833,7 @@ function createPrompt(view) {
     });
     output.mute();
     const screen = new ScreenManager(rl);
-    const { promise, resolve: resolve3, reject } = PromisePolyfill.withResolver();
+    const { promise, resolve: resolve4, reject } = PromisePolyfill.withResolver();
     const cancel = () => reject(new CancelPromptError());
     if (signal) {
       const abort = () => reject(new AbortPromptError({ cause: signal.reason }));
@@ -16589,7 +16864,7 @@ function createPrompt(view) {
           try {
             const nextView = view(config2, (value) => {
               if (effectsSettled) {
-                resolve3(value);
+                resolve4(value);
               } else {
                 pendingDone = { value };
               }
@@ -16612,7 +16887,7 @@ function createPrompt(view) {
           if (pendingDone !== null) {
             const { value } = pendingDone;
             pendingDone = null;
-            resolve3(value);
+            resolve4(value);
           }
         });
       };
@@ -16932,7 +17207,7 @@ var TokenCommand = () => new Command("token").description(`Show, save or remove
 // src/commands/InfoCommand.ts
 var sshKeyStatus = async () => {
   const { publicKeyPath } = getDeployKeyPaths();
-  if (!existsSync5(publicKeyPath))
+  if (!existsSync6(publicKeyPath))
     return `none yet (created the first time you use SFTP)`;
   const fingerprint = fingerprintForPublicKey(
     readFileSync5(publicKeyPath, "utf8").trim()
@@ -17169,7 +17444,7 @@ function fetchEventSource(input, {
   fetch: inputFetch,
   ...rest
 }) {
-  return new Promise((resolve3, reject) => {
+  return new Promise((resolve4, reject) => {
     const headers = { ...inputHeaders };
     if (!headers.accept) {
       headers.accept = EventStreamContentType;
@@ -17193,7 +17468,7 @@ function fetchEventSource(input, {
     }
     inputSignal?.addEventListener("abort", () => {
       dispose();
-      resolve3();
+      resolve4();
     });
     const fetch2 = inputFetch ?? globalThis.fetch;
     const onopen = inputOnOpen ?? defaultOnOpen;
@@ -17220,7 +17495,7 @@ function fetchEventSource(input, {
         }, onmessage)));
         onclose?.();
         dispose();
-        resolve3();
+        resolve4();
       } catch (err) {
         if (!curRequestController.signal.aborted) {
           try {
@@ -17263,14 +17538,14 @@ var watchInstanceLog = async (instanceName, update, nInitial = 100) => {
       retryTimeout = null;
     }
   };
-  const streamingPromise = new Promise((resolve3, reject) => {
+  const streamingPromise = new Promise((resolve4, reject) => {
     signal.addEventListener("abort", () => {
       clearPendingTimeouts();
-      resolve3();
+      resolve4();
     });
     const continuallyFetchFromEventSource = () => {
       if (isAborting) {
-        resolve3();
+        resolve4();
         return;
       }
       fetchEventSource(`${api.base}/logs?n=${nInitial}`, {
@@ -17432,7 +17707,7 @@ var SftpCommand = () => {
 
 // src/cli.ts
 ensureProjectRoot();
-program.name(`pockethost`).version(version).description(`Deploy, sync, and tail logs for your PocketHost instances`).addCommand(LoginCommand()).addCommand(TokenCommand()).addCommand(LogsCommand()).addCommand(DevCommand()).addCommand(ListCommand()).addCommand(LinkCommand()).addCommand(DeployCommand()).addCommand(SftpCommand()).addCommand(LogoutCommand()).addCommand(InfoCommand());
+program.name(`pockethost`).version(version).description(`Deploy, sync, and tail logs for your PocketHost instances`).addCommand(LoginCommand()).addCommand(TokenCommand()).addCommand(LogsCommand()).addCommand(DevCommand()).addCommand(ListCommand()).addCommand(LinkCommand()).addCommand(DeployCommand()).addCommand(FilesCommand()).addCommand(PullCommand()).addCommand(UploadCommand()).addCommand(RmCommand()).addCommand(SftpCommand()).addCommand(LogoutCommand()).addCommand(InfoCommand());
 program.exitOverride();
 program.parseAsync(process.argv).catch((err) => {
   if (err.code === "commander.helpDisplayed" || err.code === "commander.help" || err.code === "commander.version") {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "pockethost",
-  "version": "4.0.0",
+  "version": "4.1.0",
   "description": "The PocketHost CLI: deploy, sync, and tail logs for your PocketHost instances",
   "repository": {
     "type": "git",
@@ -25,15 +25,6 @@
   "engines": {
     "node": ">=20"
   },
-  "scripts": {
-    "build": "node scripts/build.mjs",
-    "check:types": "tsc --noEmit",
-    "dev": "node --import tsx ./src/cli.ts",
-    "start": "node --import tsx ./src/cli.ts",
-    "test": "vitest run",
-    "prepublishOnly": "pnpm check:types && pnpm test",
-    "prepack": "pnpm build"
-  },
   "files": [
     "dist",
     "CHANGELOG.md",
@@ -66,5 +57,12 @@
     "semi": false,
     "singleQuote": true,
     "trailingComma": "es5"
+  },
+  "scripts": {
+    "build": "node scripts/build.mjs",
+    "check:types": "tsc --noEmit",
+    "dev": "node --import tsx ./src/cli.ts",
+    "start": "node --import tsx ./src/cli.ts",
+    "test": "vitest run"
   }
-}
+}