@canner-ca/cli 0.5.3 → 0.5.4

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@canner-ca/cli",
-  "version": "0.5.3",
+  "version": "0.5.4",
   "description": "Canner deploy CLI — git push from any terminal, no GitHub required",
   "type": "module",
   "bin": {

package/src/cli.mjs

@@ -28,7 +28,7 @@ import { randomUUID } from 'node:crypto';
 import { stdin as input, stdout as output } from 'node:process';
 import { create as tarCreate } from 'tar';
 
-const VERSION = '0.5.3';
+const VERSION = '0.5.4';
 const DEFAULT_API_BASE = 'https://api.canner.ca';
 const CONFIG_DIR = join(homedir(), '.canner');
 const CREDENTIALS_PATH = join(CONFIG_DIR, 'credentials');
@@ -692,7 +692,7 @@ async function resolveTokenId(creds, ref) {
 // ---------------------------------------------------------------------------
 // canner env [--reveal] [--slug X]                      — list env vars
 //   (sensitive values redacted by default, in text AND --json; --reveal opts out)
-// canner env set KEY=VALUE [--env production|preview] [--sensitive] [--slug X]
+// canner env set KEY=VALUE [--env production|preview|runtime] [--sensitive] [--slug X]
 // canner env rm <KEY|id> [--env ...] [--slug X]         — delete an env var
 // ---------------------------------------------------------------------------
 async function cmdEnv(args) {
@@ -760,10 +760,11 @@ async function cmdEnv(args) {
   die(`unknown env subcommand "${sub}". Use: list | set | rm.`, 2);
 }
 
-// Map a --env flag to the API's environment field. Accepts production/preview;
+// Map a --env flag to the API's environment field. Accepts production / preview / runtime
+// (runtime = the running app on production deploys only: never builds, the release command or previews);
 // anything else (or absent) means "all environments" (null).
 function normalizeEnvScope(flag) {
-  if (flag === 'production' || flag === 'preview') return flag;
+  if (flag === 'production' || flag === 'preview' || flag === 'runtime') return flag;
   return null;
 }
 
@@ -2075,9 +2076,9 @@ async function cmdDb(args) {
 
   if (sub === 'least-privilege') {
     // One step to the usual safe arrangement: the app logs in as a limited role, the owner (which can change the schema) is
-    // given to the BUILD only, as DATABASE_URL_MIGRATE, and every migration ledger stays read-only for the app's role.
+    // given to the release command only, as DATABASE_URL_MIGRATE, and every migration ledger stays read-only for the app's role.
     const label = args._[1] ?? 'primary';
-    requireYes(args, 'The app will run as a limited role (it can read and write data but cannot change the schema) from its next deploy, and the database owner will be given to the build only, as DATABASE_URL_MIGRATE: run your migrations there.');
+    requireYes(args, 'The app will run as a limited role (it can read and write data but cannot change the schema) from its next deploy, and the database owner will be given to the release command only, as DATABASE_URL_MIGRATE: run your migrations there.');
     const r = await apiJSON(creds, 'POST', `${base}/databases/${encodeURIComponent(label)}/least-privilege`, {
       confirm: true,
       ...(typeof args.label === 'string' ? { label: args.label } : {}),