@dropthis/cli 0.8.0 → 0.9.1

package/dist/cli.cjs

@@ -210,7 +210,7 @@ function nextActionForApiError(error2) {
     return "Fetch the drop, merge your changes, and retry with the current revision.";
   }
   if (error2.statusCode === 404 || error2.code === "not_found") {
-    return "Check the drop id or slug and retry; list your drops with dropthis drops list.";
+    return "Check the drop id or slug and retry; list your drops with dropthis list.";
   }
   if (error2.statusCode === 401 || error2.code === "missing_api_key") {
     return "Authenticate with dropthis login or set DROPTHIS_API_KEY.";
@@ -591,21 +591,36 @@ var COMMAND_ANNOTATIONS = {
   publish: {
     auth: "required",
     examples: [
-      "dropthis ./file.html",
+      "dropthis ./report.html",
       "dropthis publish ./site --json",
       "dropthis publish ./site --url",
       "dropthis publish ./dist --dry-run"
     ]
   },
-  drops: {
+  "update-content": {
     auth: "required",
-    examples: [
-      "dropthis drops list --json",
-      "dropthis drops update drop_abc ./site --json",
-      "dropthis drops update drop_abc --title 'New Title' --dry-run"
-    ]
+    examples: ["dropthis update-content drop_abc ./site --json"]
+  },
+  "update-settings": {
+    auth: "required",
+    examples: ["dropthis update-settings drop_abc --title 'Launch' --json"]
+  },
+  get: {
+    auth: "required",
+    examples: ["dropthis get drop_abc --json"]
+  },
+  list: {
+    auth: "required",
+    examples: ["dropthis list --json"]
+  },
+  delete: {
+    auth: "required",
+    examples: ["dropthis delete drop_abc --yes --json"]
+  },
+  deployments: {
+    auth: "required",
+    examples: ["dropthis deployments drop_abc --json"]
   },
-  deployments: { auth: "required" },
   "deployments list": {
     auth: "required",
     examples: ["dropthis deployments list drop_abc --json"]
@@ -754,13 +769,13 @@ async function runDoctor(_input, deps) {
   const authSource = credential?.source ?? "missing";
   const storageBackend = stored?.storage ?? "none";
   const pairs = [
-    ["Version", "0.8.0"],
+    ["Version", "0.9.1"],
     ["Auth", authSource],
     ["Storage", storageBackend]
   ];
   writeKv(deps, pairs, {
     ok: true,
-    version: "0.8.0",
+    version: "0.9.1",
     auth: { source: authSource },
     storage: { backend: storageBackend }
   });
@@ -1177,7 +1192,7 @@ async function runPublish(input, raw, deps) {
   const spin = shouldSpin(deps.outputMode) ? createSpinner("Publishing\u2026", deps.stderr) : void 0;
   try {
     const options = withIdempotencyKey(await parseDropOptions(raw), "pub");
-    const doPublish = (c) => hasInput ? c.publish(input, options) : (() => {
+    const doPublish = (c) => hasInput ? c.drops.publish(input, options) : (() => {
       throw new Error("Publish requires <input>.");
     })();
     const result = await doPublish(client);
@@ -1260,32 +1275,17 @@ async function handlePublishDryRun(input, raw, deps, client) {
   }
 }
 
-// src/commands/update.ts
-var prompts4 = __toESM(require("@clack/prompts"), 1);
-var NO_UPDATE_MESSAGE = "Nothing to update. Provide an input path or at least one update option.";
-var NO_UPDATE_NEXT_ACTION = "Run dropthis drops update --help, or retry with an input path (for example, dropthis drops update <dropId> ./dist) or one of: --title, --slug, --visibility, --password, --no-password, --noindex, --index, --expires-at, or --metadata.";
-var DEPLOY_REJECTS_SETTINGS = "A deployment changes content only \u2014 it can't change settings in the same call.";
-var DEPLOY_SETTINGS_NEXT_ACTION = "Deploy the new content first (dropthis drops update <dropId> ./dist), then change settings separately (dropthis drops update <dropId> --title ... --visibility ...). Settings on an existing drop never require re-uploading content.";
-var SETTINGS_KEYS = [
-  "slug",
-  "title",
-  "visibility",
-  "password",
-  "noindex",
-  "expiresAt",
-  "metadata"
-];
-function hasSettingsFields(options) {
-  return SETTINGS_KEYS.some((key) => options[key] !== void 0);
-}
-function contentDeployOptions(options) {
+// src/commands/update-content.ts
+var NO_CONTENT_MESSAGE = "update-content requires content. Provide a file, folder, URL, or text to ship a new deployment.";
+var NO_CONTENT_NEXT_ACTION = "Pass an input, e.g. dropthis update-content <dropId> ./dist. To change title, visibility, password, slug, expiry, or metadata, use dropthis update-settings <dropId> instead.";
+function contentOptions(options) {
   const out = {};
   if (options.entry !== void 0) out.entry = options.entry;
   if (options.contentType !== void 0) out.contentType = options.contentType;
   if (options.path !== void 0) out.path = options.path;
   return out;
 }
-async function runUpdate(target, input, raw, deps) {
+async function runUpdateContent(dropId, input, raw, deps) {
   try {
     await requireCredential({
       ...raw.apiKey ?? deps.apiKey ? { apiKey: raw.apiKey ?? deps.apiKey } : {},
@@ -1296,48 +1296,30 @@ async function runUpdate(target, input, raw, deps) {
     return writeAuthError(deps);
   }
   if (raw.dryRun) {
-    return handleUpdateDryRun(target, input, raw, deps);
+    return handleDryRun(dropId, input, raw, deps);
   }
   let spin;
   try {
-    assertDropId(target);
-    let updateInput = input;
-    let parsed = await parseDropOptions(raw);
-    if (!updateInput && !hasUpdateFields(parsed)) {
-      if (shouldPromptForUpdate(deps)) {
-        const prompted = await promptForUpdate(target, deps.prompts ?? prompts4);
-        if (!prompted) return { exitCode: 0 };
-        updateInput = prompted.input;
-        parsed = { ...parsed, ...prompted.options };
-      } else {
-        return writeError(
-          deps,
-          "invalid_usage",
-          NO_UPDATE_MESSAGE,
-          NO_UPDATE_NEXT_ACTION
-        );
-      }
-    }
-    if (updateInput && hasSettingsFields(parsed)) {
+    assertDropId(dropId);
+    const hasInput = Array.isArray(input) ? input.length > 0 : input !== void 0;
+    if (!hasInput) {
       return writeError(
         deps,
         "invalid_usage",
-        DEPLOY_REJECTS_SETTINGS,
-        DEPLOY_SETTINGS_NEXT_ACTION
+        NO_CONTENT_MESSAGE,
+        NO_CONTENT_NEXT_ACTION
       );
     }
+    const parsed = await parseDropOptions(raw);
     const revisionOptions = raw.ifRevision !== void 0 ? { ifRevision: Number(raw.ifRevision) } : {};
-    spin = shouldSpin(deps.outputMode) ? createSpinner("Updating\u2026", deps.stderr) : void 0;
-    const result = updateInput ? await deps.client.deploy(
-      target,
-      updateInput,
+    spin = shouldSpin(deps.outputMode) ? createSpinner("Updating content\u2026", deps.stderr) : void 0;
+    const result = await deps.client.drops.updateContent(
+      dropId,
+      input,
       withIdempotencyKey(
-        { ...contentDeployOptions(parsed), ...revisionOptions },
+        { ...contentOptions(parsed), ...revisionOptions },
         "upd"
       )
-    ) : await deps.client.update(
-      target,
-      withIdempotencyKey({ ...parsed, ...revisionOptions }, "upd")
     );
     if (result.error) {
       spin?.fail();
@@ -1355,24 +1337,130 @@ async function runUpdate(target, input, raw, deps) {
     return writeError(deps, code, message);
   }
 }
-function hasUpdateFields(options) {
-  const { idempotencyKey: _, ...fields } = options;
-  return Object.keys(fields).length > 0;
+async function handleDryRun(dropId, input, raw, deps) {
+  if (raw.url) {
+    return writeError(
+      deps,
+      "invalid_usage",
+      "--url and --dry-run cannot be combined.",
+      "Remove --url; dry-run outputs JSON describing what would be published."
+    );
+  }
+  try {
+    assertDropId(dropId);
+    const hasInput = Array.isArray(input) ? input.length > 0 : input !== void 0;
+    if (!hasInput) {
+      return writeError(
+        deps,
+        "invalid_usage",
+        NO_CONTENT_MESSAGE,
+        NO_CONTENT_NEXT_ACTION
+      );
+    }
+    const options = await parseDropOptions(raw);
+    if (!deps.client.prepare) {
+      throw new Error("Client does not support dry-run.");
+    }
+    const prepared = await deps.client.prepare(input, options);
+    const output = formatDryRunManifest(prepared, { target: dropId });
+    if (prepared.kind === "staged") {
+      validateManifestFileCount(prepared.manifest.files.length);
+    }
+    deps.stdout(`${JSON.stringify(output, null, 2)}
+`);
+    return { exitCode: 0 };
+  } catch (error2) {
+    const code = isFileSystemError(error2) ? "local_input_error" : "invalid_usage";
+    const message = error2 instanceof Error ? error2.message : "Dry-run failed.";
+    return writeError(deps, code, message);
+  }
 }
-function shouldPromptForUpdate(deps) {
+function assertDropId(target) {
+  if (!target.startsWith("drop_")) {
+    throw new Error(
+      "update-content needs the full drop_\u2026 id from the publish response, not the URL slug, for example drop_..."
+    );
+  }
+}
+
+// src/commands/update-settings.ts
+var prompts4 = __toESM(require("@clack/prompts"), 1);
+var NO_SETTINGS_MESSAGE = "Nothing to update. Provide at least one settings option.";
+var NO_SETTINGS_NEXT_ACTION = "Run dropthis update-settings --help, or retry with one of: --title, --slug, --visibility, --password, --no-password, --noindex, --index, --expires-at, --metadata, or --metadata-file. To replace the content at the URL instead, use dropthis update-content <dropId> ./dist.";
+async function runUpdateSettings(dropId, raw, deps) {
+  try {
+    await requireCredential({
+      ...raw.apiKey ?? deps.apiKey ? { apiKey: raw.apiKey ?? deps.apiKey } : {},
+      env: deps.env,
+      store: deps.store
+    });
+  } catch {
+    return writeAuthError(deps);
+  }
+  if (raw.dryRun) {
+    return handleDryRun2(dropId, raw, deps);
+  }
+  let spin;
+  try {
+    assertDropId2(dropId);
+    let parsed = await parseDropOptions(raw);
+    if (!hasSettingsFields(parsed)) {
+      if (shouldPrompt(deps)) {
+        const prompted = await promptForSettings(
+          dropId,
+          deps.prompts ?? prompts4
+        );
+        if (!prompted) return { exitCode: 0 };
+        parsed = { ...parsed, ...prompted };
+      } else {
+        return writeError(
+          deps,
+          "invalid_usage",
+          NO_SETTINGS_MESSAGE,
+          NO_SETTINGS_NEXT_ACTION
+        );
+      }
+    }
+    const revisionOptions = raw.ifRevision !== void 0 ? { ifRevision: Number(raw.ifRevision) } : {};
+    spin = shouldSpin(deps.outputMode) ? createSpinner("Updating settings\u2026", deps.stderr) : void 0;
+    const result = await deps.client.drops.updateSettings(
+      dropId,
+      withIdempotencyKey({ ...parsed, ...revisionOptions }, "upd")
+    );
+    if (result.error) {
+      spin?.fail();
+      return writeApiError(deps, result.error);
+    }
+    spin?.stop();
+    if (raw.url) deps.stdout(`${result.data.url}
+`);
+    else writeResult(deps, result.data.url, "Updated", result.data);
+    return { exitCode: 0 };
+  } catch (error2) {
+    const message = error2 instanceof Error ? error2.message : "Update failed.";
+    spin?.fail();
+    return writeError(deps, "invalid_usage", message);
+  }
+}
+function hasSettingsFields(options) {
+  const {
+    idempotencyKey: _,
+    entry: __,
+    contentType: ___,
+    path: ____,
+    ...settings
+  } = options;
+  return Object.values(settings).some((value) => value !== void 0);
+}
+function shouldPrompt(deps) {
   return deps.outputMode === "human" && deps.interactive === true;
 }
-async function promptForUpdate(target, prompt) {
-  prompt.intro(`Update ${target}`);
+async function promptForSettings(target, prompt) {
+  prompt.intro(`Update settings for ${target}`);
   const fields = await prompt.multiselect({
-    message: "What do you want to update?",
+    message: "What do you want to change?",
     required: true,
     options: [
-      {
-        value: "content",
-        label: "Content",
-        hint: "replace files, folder, URL, or text"
-      },
       { value: "title", label: "Title", hint: "--title" },
       { value: "slug", label: "Slug", hint: "--slug" },
       { value: "visibility", label: "Visibility", hint: "--visibility" },
@@ -1396,21 +1484,12 @@ async function promptForUpdate(target, prompt) {
   }
   const selected = new Set(fields);
   const options = {};
-  let input;
-  if (selected.has("content")) {
-    const value = await prompt.text({
-      message: "Content path, URL, or text",
-      validate: requireNonEmpty("Enter content or a path.")
-    });
-    if (prompt.isCancel(value)) return cancelUpdate(prompt);
-    input = value.trim();
-  }
   if (selected.has("title")) {
     const value = await prompt.text({
       message: "Title",
       validate: requireNonEmpty("Enter a title.")
     });
-    if (prompt.isCancel(value)) return cancelUpdate(prompt);
+    if (prompt.isCancel(value)) return cancel2(prompt);
     options.title = value.trim();
   }
   if (selected.has("slug")) {
@@ -1418,7 +1497,7 @@ async function promptForUpdate(target, prompt) {
       message: "Slug",
       validate: requireNonEmpty("Enter a slug.")
     });
-    if (prompt.isCancel(value)) return cancelUpdate(prompt);
+    if (prompt.isCancel(value)) return cancel2(prompt);
     options.slug = value.trim();
   }
   if (selected.has("visibility")) {
@@ -1429,7 +1508,7 @@ async function promptForUpdate(target, prompt) {
         { value: "unlisted", label: "Unlisted" }
       ]
     });
-    if (prompt.isCancel(value)) return cancelUpdate(prompt);
+    if (prompt.isCancel(value)) return cancel2(prompt);
     options.visibility = value;
   }
   if (selected.has("password")) {
@@ -1440,13 +1519,13 @@ async function promptForUpdate(target, prompt) {
         { value: "remove", label: "Remove password" }
       ]
     });
-    if (prompt.isCancel(action)) return cancelUpdate(prompt);
+    if (prompt.isCancel(action)) return cancel2(prompt);
     if (action === "set") {
       const value = await prompt.password({
         message: "Password",
         validate: requireNonEmpty("Enter a password.")
       });
-      if (prompt.isCancel(value)) return cancelUpdate(prompt);
+      if (prompt.isCancel(value)) return cancel2(prompt);
       options.password = value;
     } else {
       options.password = null;
@@ -1460,7 +1539,7 @@ async function promptForUpdate(target, prompt) {
         { value: "index", label: "Allow indexing" }
       ]
     });
-    if (prompt.isCancel(value)) return cancelUpdate(prompt);
+    if (prompt.isCancel(value)) return cancel2(prompt);
     options.noindex = value === "noindex";
   }
   if (selected.has("expiresAt")) {
@@ -1469,7 +1548,7 @@ async function promptForUpdate(target, prompt) {
       placeholder: "2025-12-31T23:59:59Z",
       validate: validateIsoDate
     });
-    if (prompt.isCancel(value)) return cancelUpdate(prompt);
+    if (prompt.isCancel(value)) return cancel2(prompt);
     options.expiresAt = value.trim();
   }
   if (selected.has("metadata")) {
@@ -1478,12 +1557,12 @@ async function promptForUpdate(target, prompt) {
       placeholder: '{"source":"cli"}',
       validate: validateJsonObject
     });
-    if (prompt.isCancel(value)) return cancelUpdate(prompt);
+    if (prompt.isCancel(value)) return cancel2(prompt);
     options.metadata = parseJsonObject2(value);
   }
-  return { ...input ? { input } : {}, options };
+  return options;
 }
-function cancelUpdate(prompt) {
+function cancel2(prompt) {
   prompt.cancel("Update cancelled.");
   return void 0;
 }
@@ -1511,54 +1590,40 @@ function parseJsonObject2(value) {
   }
   return parsed;
 }
-async function handleUpdateDryRun(target, input, raw, deps) {
+async function handleDryRun2(dropId, raw, deps) {
   if (raw.url) {
     return writeError(
       deps,
       "invalid_usage",
       "--url and --dry-run cannot be combined.",
-      "Remove --url; dry-run outputs JSON describing what would be published."
+      "Remove --url; dry-run outputs JSON describing what would change."
     );
   }
   try {
-    assertDropId(target);
+    assertDropId2(dropId);
     const options = await parseDropOptions(raw);
-    if (!input) {
-      const fields = {};
-      if (options.slug) fields.slug = options.slug;
-      if (options.title) fields.title = options.title;
-      if (options.visibility) fields.visibility = options.visibility;
-      if (options.password !== void 0) fields.password = options.password;
-      if (options.noindex !== void 0) fields.noindex = options.noindex;
-      if (options.expiresAt) fields.expires_at = options.expiresAt;
-      if (options.metadata) fields.metadata = options.metadata;
-      deps.stdout(
-        `${JSON.stringify({ ok: true, dryRun: true, kind: "options_update", target, fields }, null, 2)}
+    const fields = {};
+    if (options.slug) fields.slug = options.slug;
+    if (options.title) fields.title = options.title;
+    if (options.visibility) fields.visibility = options.visibility;
+    if (options.password !== void 0) fields.password = options.password;
+    if (options.noindex !== void 0) fields.noindex = options.noindex;
+    if (options.expiresAt) fields.expires_at = options.expiresAt;
+    if (options.metadata) fields.metadata = options.metadata;
+    deps.stdout(
+      `${JSON.stringify({ ok: true, dryRun: true, kind: "settings_update", target: dropId, fields }, null, 2)}
 `
-      );
-      return { exitCode: 0 };
-    }
-    if (!deps.client.prepare) {
-      throw new Error("Client does not support dry-run.");
-    }
-    const prepared = await deps.client.prepare(input, options);
-    const output = formatDryRunManifest(prepared, { target });
-    if (prepared.kind === "staged") {
-      validateManifestFileCount(prepared.manifest.files.length);
-    }
-    deps.stdout(`${JSON.stringify(output, null, 2)}
-`);
+    );
     return { exitCode: 0 };
   } catch (error2) {
-    const code = isFileSystemError(error2) ? "local_input_error" : "invalid_usage";
     const message = error2 instanceof Error ? error2.message : "Dry-run failed.";
-    return writeError(deps, code, message);
+    return writeError(deps, "invalid_usage", message);
   }
 }
-function assertDropId(target) {
+function assertDropId2(target) {
   if (!target.startsWith("drop_")) {
     throw new Error(
-      "Update target must be a drop id returned by --json output, for example drop_..."
+      "update-settings needs the full drop_\u2026 id from the publish response, not the URL slug, for example drop_..."
     );
   }
 }
@@ -1768,7 +1833,7 @@ function buildProgram(options = {}) {
       `  ${import_picocolors4.default.cyan("dropthis login")}`,
       `  ${import_picocolors4.default.cyan("dropthis publish ./dist")}`
     ].join("\n")
-  ).version("0.8.0").configureHelp({
+  ).version("0.9.1").configureHelp({
     subcommandTerm(cmd) {
       const args = cmd.registeredArguments.map((a) => {
         const name = a.name();
@@ -1788,7 +1853,7 @@ function buildProgram(options = {}) {
   program.option("-q, --quiet", "Suppress status output and imply JSON");
   program.option("--no-interactive", "Disable interactive prompts");
   program.command("publish [input...]", { isDefault: true }).description(
-    "Publish files, folders, URLs, strings, or stdin.\nMultiple files are bundled into one drop.\nUse - to read stdin explicitly, or pipe without args."
+    "Publish content to a permanent public URL (also: share, post, put online, make public, get a link).\nFiles, folders, URLs, strings, or stdin; multiple files bundle into one drop. Use - for stdin, or pipe without args.\nCreates a NEW drop each run \u2014 to change one you already published, use update-content (the files) or update-settings (title/visibility/password/slug/expiry/metadata) with its drop_\u2026 id, not publish again."
   ).option("--title <title>", "Drop title").option("--visibility <v>", "public or unlisted (default: public)").option("--password <password>", "Require password to view").option("--noindex", "Prevent search-engine indexing").option("--expires-at <datetime>", "Auto-delete after this ISO 8601 date").option(
     "--content-type <mime>",
     "Override MIME type (auto-detected from extension)"
@@ -1840,46 +1905,35 @@ function buildProgram(options = {}) {
     const result = await runPublish(publishInput, dropOpts, deps);
     process.exitCode = result.exitCode;
   });
-  const drops = program.command("drops").description("Manage published drops");
-  drops.command("list").description("List your drops").option("--limit <n>", "Page size", parseInteger).option("--cursor <cursor>", "Pagination cursor").option("--json", "Force JSON output").action(
-    async (commandOptions) => {
-      const deps = await commandDeps(program, options, store, commandOptions);
-      const result = await runDropsList(commandOptions, deps);
-      process.exitCode = result.exitCode;
-    }
-  );
-  drops.command("get <dropId>").description("Show drop details").option("--json", "Force JSON output").action(async (dropId, commandOptions) => {
-    const deps = await commandDeps(program, options, store, commandOptions);
-    const result = await runDropsGet(dropId, commandOptions, deps);
-    process.exitCode = result.exitCode;
-  });
-  drops.command("update <dropId> [input]").description("Update content or metadata").option("--slug <slug>", "Change the vanity slug").option("--title <title>", "Change title").option("--visibility <v>", "Set to public or unlisted").option("--password <password>", "Require password to view").option("--no-password", "Remove password protection").option("--noindex", "Prevent search-engine indexing").option("--index", "Allow search-engine indexing").option("--expires-at <datetime>", "Auto-delete after this ISO 8601 date").option(
-    "--content-type <mime>",
-    "Override MIME type (auto-detected from extension)"
+  program.command("update-content <dropId> [input...]").description(
+    "Replace a drop's content, same URL (pass the full drop_\u2026 id, not the slug).\nShips a new deployment. Settings stay unchanged \u2014 use update-settings for title, visibility, password, slug, expiry, or metadata."
   ).option(
     "--entry <path>",
     "Entry file for multi-file bundles (default: index.html)"
   ).option(
-    "--metadata <json>",
-    `Attach JSON key-value pairs, e.g. '{"source":"ci"}'`
-  ).option("--metadata-file <path>", "Read metadata JSON from a file").option("--path <name>", "Set filename for stdin content").option(
+    "--content-type <mime>",
+    "Override MIME type (auto-detected from extension)"
+  ).option("--path <name>", "Set filename for stdin content").option(
     "--if-revision <n>",
     "Fail if current revision doesn't match (optimistic lock)",
     parseInteger
   ).option("--url", "Print only the published URL (no JSON envelope)").option(
     "--dry-run",
-    "Show what would be updated without updating (JSON; cannot combine with --url)"
+    "Show what would be shipped without updating (JSON; cannot combine with --url)"
   ).option("--json", "Force JSON output").option(
     "--idempotency-key <key>",
     "Prevent duplicate updates on retry (auto-generated)"
   ).action(
-    async (dropId, input, commandOptions) => {
-      const stdinIsTTY = options.stdinIsTTY ?? process.stdin.isTTY ?? false;
-      const global = globalOptions(program, commandOptions);
+    async (dropId, inputs, commandOptions) => {
       const deps = await commandDeps(program, options, store, commandOptions);
+      const stdinIsTTY = options.stdinIsTTY ?? process.stdin.isTTY ?? false;
       let updateInput;
       try {
-        updateInput = input ? await resolveCommandInput(input, options.stdin) : void 0;
+        updateInput = await resolvePublishInputs(
+          inputs,
+          options.stdin,
+          stdinIsTTY
+        );
       } catch (err) {
         const msg = err instanceof Error ? err.message : "Invalid input.";
         process.exitCode = writeError(
@@ -1897,14 +1951,63 @@ function buildProgram(options = {}) {
         process.exitCode = writeError(deps, "invalid_usage", msg).exitCode;
         return;
       }
-      const result = await runUpdate(dropId, updateInput, dropOpts, {
+      const result = await runUpdateContent(
+        dropId,
+        updateInput,
+        dropOpts,
+        deps
+      );
+      process.exitCode = result.exitCode;
+    }
+  );
+  program.command("update-settings <dropId>").description(
+    "Change a drop's title, visibility, password, vanity slug, expiry, or metadata (pass the full drop_\u2026 id, not the slug).\nContent stays unchanged \u2014 use update-content to replace the files at the URL."
+  ).option("--slug <slug>", "Change the vanity slug").option("--title <title>", "Change title").option("--visibility <v>", "Set to public or unlisted").option("--password <password>", "Require password to view").option("--no-password", "Remove password protection").option("--noindex", "Prevent search-engine indexing").option("--index", "Allow search-engine indexing").option("--expires-at <datetime>", "Auto-delete after this ISO 8601 date").option(
+    "--metadata <json>",
+    `Attach JSON key-value pairs, e.g. '{"source":"ci"}'`
+  ).option("--metadata-file <path>", "Read metadata JSON from a file").option(
+    "--if-revision <n>",
+    "Fail if current revision doesn't match (optimistic lock)",
+    parseInteger
+  ).option("--url", "Print only the published URL (no JSON envelope)").option(
+    "--dry-run",
+    "Show what would change without updating (JSON; cannot combine with --url)"
+  ).option("--json", "Force JSON output").option(
+    "--idempotency-key <key>",
+    "Prevent duplicate updates on retry (auto-generated)"
+  ).action(
+    async (dropId, commandOptions) => {
+      const stdinIsTTY = options.stdinIsTTY ?? process.stdin.isTTY ?? false;
+      const global = globalOptions(program, commandOptions);
+      const deps = await commandDeps(program, options, store, commandOptions);
+      let dropOpts;
+      try {
+        dropOpts = toDropOptions(commandOptions);
+      } catch (err) {
+        const msg = err instanceof Error ? err.message : "Invalid option.";
+        process.exitCode = writeError(deps, "invalid_usage", msg).exitCode;
+        return;
+      }
+      const result = await runUpdateSettings(dropId, dropOpts, {
         ...deps,
         interactive: isInteractive(stdinIsTTY, deps.env, global)
       });
       process.exitCode = result.exitCode;
     }
   );
-  drops.command("delete <dropId>").description("Delete a drop").option("--yes", "Confirm deletion").option("--json", "Force JSON output").action(
+  program.command("get <dropId>").description("Show drop details (pass the full drop_\u2026 id)").option("--json", "Force JSON output").action(async (dropId, commandOptions) => {
+    const deps = await commandDeps(program, options, store, commandOptions);
+    const result = await runDropsGet(dropId, commandOptions, deps);
+    process.exitCode = result.exitCode;
+  });
+  program.command("list").description("List your drops").option("--limit <n>", "Page size", parseInteger).option("--cursor <cursor>", "Pagination cursor").option("--json", "Force JSON output").action(
+    async (commandOptions) => {
+      const deps = await commandDeps(program, options, store, commandOptions);
+      const result = await runDropsList(commandOptions, deps);
+      process.exitCode = result.exitCode;
+    }
+  );
+  program.command("delete <dropId>").description("Delete a drop (pass the full drop_\u2026 id)").option("--yes", "Confirm deletion").option("--json", "Force JSON output").action(
     async (dropId, commandOptions) => {
       const stdinIsTTY = options.stdinIsTTY ?? process.stdin.isTTY ?? false;
       const global = globalOptions(program, commandOptions);
@@ -1920,6 +2023,26 @@ function buildProgram(options = {}) {
       process.exitCode = result.exitCode;
     }
   );
+  const deployments = program.command("deployments").description("View deployment history");
+  deployments.command("list <dropId>").description("List deployments for a drop").option("--limit <n>", "Page size", parseInteger).option("--cursor <cursor>", "Pagination cursor").option("--json", "Force JSON output").action(
+    async (dropId, commandOptions) => {
+      const deps = await commandDeps(program, options, store, commandOptions);
+      const result = await runDeploymentsList(dropId, commandOptions, deps);
+      process.exitCode = result.exitCode;
+    }
+  );
+  deployments.command("get <dropId> <deploymentId>").description("Show deployment details").option("--json", "Force JSON output").action(
+    async (dropId, deploymentId, commandOptions) => {
+      const deps = await commandDeps(program, options, store, commandOptions);
+      const result = await runDeploymentsGet(
+        dropId,
+        deploymentId,
+        commandOptions,
+        deps
+      );
+      process.exitCode = result.exitCode;
+    }
+  );
   const apiKeys = program.command("api-keys").description("Manage API keys");
   apiKeys.command("create").description("Create an API key").option("--label <label>", "API key label", "CLI").option("--json", "Force JSON output").action(async (commandOptions) => {
     const deps = await commandDeps(program, options, store, commandOptions);
@@ -1947,26 +2070,6 @@ function buildProgram(options = {}) {
       process.exitCode = result.exitCode;
     }
   );
-  const deployments = program.command("deployments").description("View deployment history");
-  deployments.command("list <dropId>").description("List deployments for a drop").option("--limit <n>", "Page size", parseInteger).option("--cursor <cursor>", "Pagination cursor").option("--json", "Force JSON output").action(
-    async (dropId, commandOptions) => {
-      const deps = await commandDeps(program, options, store, commandOptions);
-      const result = await runDeploymentsList(dropId, commandOptions, deps);
-      process.exitCode = result.exitCode;
-    }
-  );
-  deployments.command("get <dropId> <deploymentId>").description("Show deployment details").option("--json", "Force JSON output").action(
-    async (dropId, deploymentId, commandOptions) => {
-      const deps = await commandDeps(program, options, store, commandOptions);
-      const result = await runDeploymentsGet(
-        dropId,
-        deploymentId,
-        commandOptions,
-        deps
-      );
-      process.exitCode = result.exitCode;
-    }
-  );
   program.command("login").description("Authenticate with email OTP").option("--email <email>", "Email address").option("--otp <otp>", "One-time passcode").option("--json", "Force JSON output").action(
     async (commandOptions) => {
       if (!commandOptions.email || !commandOptions.otp) {
@@ -2191,11 +2294,6 @@ function parseInteger(value) {
   if (Number.isNaN(n)) throw new import_commander.InvalidArgumentError("Expected an integer.");
   return n;
 }
-async function resolveCommandInput(input, stdin) {
-  if (input !== "-") return input;
-  const buf = await readStdinBytes(stdin ?? process.stdin);
-  return buf.toString("utf8");
-}
 async function resolvePublishInputs(inputs, stdin, stdinIsTTY) {
   if (inputs.length === 0) {
     if (stdinIsTTY) return void 0;