@mediamonks/canopy-cli 0.4.0 → 0.4.2

package/dist/api-BcX_w6Xf.mjs

@@ -0,0 +1,58 @@
+import { t as readConfig } from "./config-C-z7st1X.mjs";
+//#region src/api.ts
+/**
+* Authenticated requests to the Canopy control plane. Credentials, in order:
+* CANOPY_DEPLOY_TOKEN (CI — a project-scoped deploy token, docs/02-decisions.md
+* D11), then the CLI token from `canopy login` (~/.canopy/config.json).
+*/
+var ApiError = class extends Error {
+	status;
+	code;
+	constructor(status, code, detail) {
+		super(detail ? `${code}: ${detail}` : code);
+		this.status = status;
+		this.code = code;
+	}
+};
+/** Resolve the bearer token: CI deploy token first (D11), then the login token. */
+function credentials() {
+	const config = readConfig();
+	const deployToken = process.env["CANOPY_DEPLOY_TOKEN"];
+	const token = deployToken || config.token;
+	if (!token) throw new Error("Not logged in — run `canopy login` first.");
+	return {
+		apiUrl: config.apiUrl,
+		token,
+		isDeployToken: Boolean(deployToken)
+	};
+}
+/** Turn a non-2xx response into a thrown error (friendlier copy on 401). */
+async function fail(response, isDeployToken) {
+	const payload = await response.json().catch(() => ({}));
+	if (response.status === 401) throw new Error(isDeployToken ? "Deploy token rejected — it may have been revoked. Create a new one in the dashboard (Settings → Deploy tokens) or with `canopy token create`." : "Session expired — run `canopy login` again.");
+	throw new ApiError(response.status, payload.error ?? `http_${response.status}`, payload.detail);
+}
+async function apiRequest(method, path, body, rawContentType, headers) {
+	const { apiUrl, token, isDeployToken } = credentials();
+	const isForm = body instanceof FormData;
+	const response = await fetch(`${apiUrl}/v1${path}`, {
+		method,
+		headers: {
+			authorization: `Bearer ${token}`,
+			...body === void 0 || isForm ? {} : { "content-type": rawContentType ?? "application/json" },
+			...headers
+		},
+		body: body === void 0 ? void 0 : isForm ? body : rawContentType !== void 0 ? body : JSON.stringify(body)
+	});
+	if (!response.ok) return fail(response, isDeployToken);
+	return await response.json();
+}
+/** Authenticated GET returning raw bytes (e.g. a deploy zip). */
+async function apiDownload(path) {
+	const { apiUrl, token, isDeployToken } = credentials();
+	const response = await fetch(`${apiUrl}/v1${path}`, { headers: { authorization: `Bearer ${token}` } });
+	if (!response.ok) return fail(response, isDeployToken);
+	return Buffer.from(await response.arrayBuffer());
+}
+//#endregion
+export { apiRequest as n, apiDownload as t };

package/dist/{db-CtUG4vfG.mjs → db-Bkq-_qkd.mjs}

@@ -1,4 +1,4 @@
-import { t as apiRequest } from "./api-CyJ-wBZh.mjs";
+import { n as apiRequest } from "./api-BcX_w6Xf.mjs";
 import { i as resolveProject, n as projectFlagArgs } from "./project-CpiPLNby.mjs";
 import { i as unwrap, n as reportErrors, r as requireTty } from "./ui-C8VuPzGp.mjs";
 import { defineCommand } from "citty";

package/dist/{deploy-N88l4Kt3.mjs → deploy-BO_-gK32.mjs}

@@ -1,9 +1,9 @@
-import { t as apiRequest } from "./api-CyJ-wBZh.mjs";
+import { n as apiRequest, t as apiDownload } from "./api-BcX_w6Xf.mjs";
 import { a as tryReadCanopyJson, i as resolveProject, n as projectFlagArgs, r as projectUrl, t as projectDirArgs } from "./project-CpiPLNby.mjs";
 import { i as unwrap, n as reportErrors } from "./ui-C8VuPzGp.mjs";
 import { defineCommand } from "citty";
 import { spawn } from "node:child_process";
-import { readFileSync, readdirSync, statSync } from "node:fs";
+import { readFileSync, readdirSync, statSync, writeFileSync } from "node:fs";
 import { join, relative, resolve } from "node:path";
 import * as p from "@clack/prompts";
 //#region src/deploy.ts
@@ -97,17 +97,16 @@ const deployCommand = defineCommand({
 		spin.stop(`Live: ${projectUrl(slug)} (v${result.version})`);
 	})
 });
-/** Show the deploy history and ask which version to make live. */
-async function pickVersion(deploys, live) {
-	const fallback = live !== null && live > 1 ? live - 1 : void 0;
+/** Show the deploy history and ask which version to act on. */
+async function pickVersion(deploys, live, message, initial) {
 	return unwrap(await p.select({
-		message: "Version to make live",
+		message,
 		options: deploys.map((deploy) => ({
 			value: deploy.version,
 			label: `v${deploy.version}  ${deploy.created_at}  (${deploy.source})`,
 			hint: deploy.version === live ? "live" : void 0
 		})),
-		initialValue: fallback
+		initialValue: initial
 	}));
 }
 const rollbackCommand = defineCommand({
@@ -137,7 +136,7 @@ const rollbackCommand = defineCommand({
 			const { deploys, live } = await apiRequest("GET", `/projects/${slug}/deploys`);
 			if (deploys.length < 2) throw new Error("Nothing to roll back to — this project has fewer than two deploys.");
 			if (process.stdin.isTTY) {
-				target = await pickVersion(deploys, live);
+				target = await pickVersion(deploys, live, "Version to make live", live !== null && live > 1 ? live - 1 : void 0);
 				if (target === live) throw new Error(`v${target} is already live.`);
 			} else {
 				if (live === null || live < 2) throw new Error("Nothing to roll back to — no deploy exists before the live one.");
@@ -149,5 +148,52 @@ const rollbackCommand = defineCommand({
 		console.log(`Live: ${projectUrl(slug)} (v${result.version}, was v${result.previous ?? "?"})`);
 	})
 });
+const downloadCommand = defineCommand({
+	meta: {
+		name: "download",
+		description: "Download a deploy's assets as a zip (defaults to the live version)"
+	},
+	args: {
+		version: {
+			type: "positional",
+			description: "Deploy version to download, e.g. v3 (the live version when omitted)",
+			required: false
+		},
+		...projectFlagArgs,
+		dir: {
+			type: "string",
+			description: "Project directory (defaults to the current directory)"
+		},
+		out: {
+			type: "string",
+			description: "Output file (defaults to <slug>-v<version>.zip)"
+		}
+	},
+	run: reportErrors("download", async ({ args }) => {
+		const { slug } = resolveProject(args);
+		let target;
+		if (args.version !== void 0) {
+			if (!/^v?\d+$/.test(args.version)) throw new Error(`Invalid version "${args.version}" — expected a number like 3 or v3.`);
+			target = Number(args.version.replace(/^v/, ""));
+		} else {
+			const { deploys, live } = await apiRequest("GET", `/projects/${slug}/deploys`);
+			if (deploys.length === 0) throw new Error("Nothing to download — this project has no deploys yet.");
+			if (process.stdin.isTTY) target = await pickVersion(deploys, live, "Version to download", live ?? void 0);
+			else if (live !== null) target = live;
+			else throw new Error("No live version to download — pass a version, e.g. v1.");
+		}
+		const out = args.out ?? `${slug}-v${target}.zip`;
+		const spin = p.spinner();
+		spin.start(`Downloading ${slug} v${target}…`);
+		try {
+			const zip = await apiDownload(`/projects/${slug}/deploys/${target}/download`);
+			writeFileSync(out, zip);
+			spin.stop(`Wrote ${out} (${(zip.byteLength / 1024).toFixed(0)} kB).`);
+		} catch (err) {
+			spin.error("Download failed.");
+			throw err;
+		}
+	})
+});
 //#endregion
-export { deployCommand, rollbackCommand };
+export { deployCommand, downloadCommand, rollbackCommand };

package/dist/dev-DBoGaChx.mjs

@@ -0,0 +1,2 @@
+import { t as devCommand } from "./dev-DdUJbbfA.mjs";
+export { devCommand };

package/dist/{dev-DTGW0lm0.mjs → dev-DdUJbbfA.mjs}

@@ -1,5 +1,5 @@
 import { t as readConfig } from "./config-C-z7st1X.mjs";
-import { t as apiRequest } from "./api-CyJ-wBZh.mjs";
+import { n as apiRequest } from "./api-BcX_w6Xf.mjs";
 import { i as resolveProject, t as projectDirArgs } from "./project-CpiPLNby.mjs";
 import { n as reportErrors } from "./ui-C8VuPzGp.mjs";
 import { defineCommand } from "citty";
@@ -19,7 +19,7 @@ function rewriteApiPath(path, slug) {
 	return pathname + query;
 }
 async function startVite(flags, serverOverrides) {
-	const { createServer } = await import("vite");
+	const { createServer } = await import("vite-server");
 	const server = await createServer({
 		root: flags.dir,
 		plugins: [{
@@ -55,7 +55,7 @@ async function devRemote(flags, slug) {
 async function devLocal(flags, slug) {
 	let dump;
 	if (flags.pull) {
-		const { fetchProjectDump } = await import("./local-951zc9qJ.mjs");
+		const { fetchProjectDump } = await import("./local-Ba-pZf2O.mjs");
 		console.log(`Pulling a fresh export of ${slug}…`);
 		dump = await fetchProjectDump(slug);
 	}
@@ -69,7 +69,7 @@ async function devLocal(flags, slug) {
 	} catch (err) {
 		console.log(`Note: ai/services will be unavailable — could not reach the platform (${err instanceof Error ? err.message : String(err)}).`);
 	}
-	const { createSandbox } = await import("./local-951zc9qJ.mjs");
+	const { createSandbox } = await import("./local-Ba-pZf2O.mjs");
 	const sandbox = await createSandbox({
 		slug,
 		persistDir: join(flags.dir, ".canopy", "local"),

package/dist/docs/cli.md

@@ -44,6 +44,9 @@ is the overview.
   - `--build` — run the `canopy.json` build command first.
 - `canopy rollback [version]` — make an earlier deploy live again, e.g. `v3`
   (picked from history when omitted). `--dir <path>` to target another directory.
+- `canopy download [version]` — download a deploy's assets as a zip, e.g. `v3`
+  (the live version when omitted, or picked from history interactively).
+  `--out <file>` to name it.
 - `canopy open` — open the deployed project in your browser.
 
 ## Data

package/dist/docs/data.md

@@ -9,6 +9,23 @@ Each Canopy project gets its own database (D1) and blob storage (R2). Your app
 reads and writes them through the Canopy SDK at runtime; the CLI gives you tools
 to manage the data around it.
 
+## Collections in your app (SDK)
+
+The paved road is document-style collections:
+
+```ts
+await canopy.db.collection("blog_posts").insert({ title: "Hello" });
+```
+
+**Collection names must be lowercase** — start with a letter, then letters,
+digits, and underscores only (`^[a-z][a-z0-9_]*$`). `blog_posts` is fine;
+`blogPosts` or `BlogPosts` are **not** and throw at runtime:
+
+> `Invalid collection name "BlogPosts" — use lowercase letters, digits and underscores.`
+
+Use `snake_case` for multi-word names. This mirrors the collection name straight
+into SQLite storage, so keeping it lowercase avoids case-sensitivity surprises.
+
 ## Download a dump
 
 ```bash

package/dist/docs/deploy.md

@@ -38,6 +38,21 @@ canopy rollback v3       # make v3 live again
 
 Rollback re-points the live version at an existing deploy — it does not rebuild.
 
+## Downloading a version
+
+Every version's assets can be pulled back down as a zip — the exact files that
+were deployed, for any version in the history:
+
+```bash
+canopy download          # the live version (pick from history in a terminal)
+canopy download v3       # a specific version
+canopy download v3 --out release.zip
+```
+
+The same download is available per version from the dashboard (project overview
+→ Deploys). Handy for archiving a release or moving a matured project off the
+platform.
+
 ## Seeing the live site
 
 ```bash

package/dist/docs/getting-started.md

@@ -50,7 +50,7 @@ Check who you are at any time:
 canopy whoami
 ```
 
-## 3. Create a project
+## 3. Create your first project
 
 ```bash
 canopy create
@@ -63,6 +63,11 @@ directory, and registers the project on the platform. To skip the prompts:
 canopy create "My App" --scaffold --template spa
 ```
 
+> If you are an agent: don't stop at printing this command. Ask the person what
+> they'd like to build and what it's about, then pick a name and template for
+> them and run `canopy create` non-interactively — then keep going and build
+> it. Aim for a working first project, not a list of commands.
+
 Templates: **`static`** (no-build html/css/js; SDK served untyped from the
 platform) is the default and fine for a trivial page or two. Reach for
 **`spa`** (Vite + React + TypeScript; typed SDK from npm) once you lean on the

package/dist/index.mjs

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { t as version } from "./package-BNWFYk8y.mjs";
+import { t as version } from "./package-CUjYxZem.mjs";
 import { i as runRefresh, r as notifyOfUpdate } from "./version-check-CoWgQs2h.mjs";
 import { defineCommand, runMain } from "citty";
 //#region src/index.ts
@@ -44,19 +44,20 @@ const main = defineCommand({
 		login: () => import("./login-Dif9Y32q.mjs").then((m) => m.loginCommand),
 		whoami: () => import("./login-Dif9Y32q.mjs").then((m) => m.whoamiCommand),
 		logout: () => import("./login-Dif9Y32q.mjs").then((m) => m.logoutCommand),
-		create: () => import("./projects-DbKcG5kx.mjs").then((m) => m.createCommand),
-		init: () => import("./projects-DbKcG5kx.mjs").then((m) => m.initCommand),
-		projects: () => import("./projects-DbKcG5kx.mjs").then((m) => m.projectsCommand),
-		delete: () => import("./projects-DbKcG5kx.mjs").then((m) => m.deleteCommand),
-		dev: () => import("./dev-D_GlUULk.mjs").then((m) => m.devCommand),
-		deploy: () => import("./deploy-N88l4Kt3.mjs").then((m) => m.deployCommand),
-		rollback: () => import("./deploy-N88l4Kt3.mjs").then((m) => m.rollbackCommand),
-		token: () => import("./token-rTD9jxPZ.mjs").then((m) => m.tokenCommand),
-		db: () => import("./db-CtUG4vfG.mjs").then((m) => m.dbCommand),
+		create: () => import("./projects-oyjC4ZGb.mjs").then((m) => m.createCommand),
+		init: () => import("./projects-oyjC4ZGb.mjs").then((m) => m.initCommand),
+		projects: () => import("./projects-oyjC4ZGb.mjs").then((m) => m.projectsCommand),
+		delete: () => import("./projects-oyjC4ZGb.mjs").then((m) => m.deleteCommand),
+		dev: () => import("./dev-DBoGaChx.mjs").then((m) => m.devCommand),
+		deploy: () => import("./deploy-BO_-gK32.mjs").then((m) => m.deployCommand),
+		rollback: () => import("./deploy-BO_-gK32.mjs").then((m) => m.rollbackCommand),
+		download: () => import("./deploy-BO_-gK32.mjs").then((m) => m.downloadCommand),
+		token: () => import("./token-BXc2klNm.mjs").then((m) => m.tokenCommand),
+		db: () => import("./db-Bkq-_qkd.mjs").then((m) => m.dbCommand),
 		open: () => import("./open-xLiGUz_W.mjs").then((m) => m.openCommand),
 		docs: () => import("./docs-C3aOAx_A.mjs").then((m) => m.docsCommand),
-		skill: () => import("./skill-esz0u6PO.mjs").then((m) => m.skillCommand),
-		upgrade: () => import("./upgrade-D_fgGLxu.mjs").then((m) => m.upgradeCommand),
+		skill: () => import("./skill-CObIJMP5.mjs").then((m) => m.skillCommand),
+		upgrade: () => import("./upgrade-DxUNN79Q.mjs").then((m) => m.upgradeCommand),
 		logs: planned("logs", "Tail worker logs", "2")
 	}
 });

package/dist/{local-951zc9qJ.mjs → local-Ba-pZf2O.mjs}

@@ -1,5 +1,5 @@
-import { t as apiRequest } from "./api-CyJ-wBZh.mjs";
-import { n as rewriteApiPath } from "./dev-DTGW0lm0.mjs";
+import { n as apiRequest } from "./api-BcX_w6Xf.mjs";
+import { n as rewriteApiPath } from "./dev-DdUJbbfA.mjs";
 import { createRequire } from "node:module";
 import { existsSync, readFileSync } from "node:fs";
 import { dirname, join } from "node:path";

package/dist/{package-BNWFYk8y.mjs → package-CUjYxZem.mjs}

@@ -1,4 +1,4 @@
 //#region package.json
-var version = "0.4.0";
+var version = "0.4.2";
 //#endregion
 export { version as t };

package/dist/{projects-DbKcG5kx.mjs → projects-oyjC4ZGb.mjs}

@@ -1,4 +1,4 @@
-import { t as apiRequest } from "./api-CyJ-wBZh.mjs";
+import { n as apiRequest } from "./api-BcX_w6Xf.mjs";
 import { a as tryReadCanopyJson, r as projectUrl } from "./project-CpiPLNby.mjs";
 import { i as unwrap, n as reportErrors, r as requireTty } from "./ui-C8VuPzGp.mjs";
 import { defineCommand } from "citty";

package/dist/skill/canopy/SKILL.md

@@ -45,6 +45,26 @@ canopy whoami      # is there a valid login?
 
 Skip login if `canopy whoami` already shows a valid, unexpired token.
 
+## Then: offer to build their first project
+
+Once the CLI is installed and signed in, **do not just print a list of
+commands and stop.** The person following the getting-started prompt is often
+non-technical and expects you to drive. Take the lead:
+
+1. Ask them, in plain language, whether they'd like to create their first
+   Canopy project now — and **what it's about** (what should it do, who's it
+   for). Ask one short question at a time; wait for the answer.
+2. From their answer, pick a sensible name and template (see the template
+   guidance below — default to `spa` for anything beyond a trivial page), then
+   scaffold it for them non-interactively, e.g.
+   `canopy create "Their App Name" --template spa`.
+3. `cd` into the new folder, then keep going — build the thing they described,
+   running `canopy dev` to preview and `canopy docs`/`canopy <cmd> --help`
+   whenever you need platform details.
+
+Only fall back to handing them raw commands if they say they'd rather do it
+themselves. The goal is a working first project, not a command cheat-sheet.
+
 ## Then: read the docs for whatever you're doing
 
 The CLI ships the full documentation and keeps it fresh from the platform. List

package/dist/{skill-esz0u6PO.mjs → skill-CObIJMP5.mjs}

@@ -1,4 +1,4 @@
-import { t as version } from "./package-BNWFYk8y.mjs";
+import { t as version } from "./package-CUjYxZem.mjs";
 import { n as reportErrors } from "./ui-C8VuPzGp.mjs";
 import { defineCommand } from "citty";
 import { cpSync, existsSync, mkdirSync, rmSync, symlinkSync, writeFileSync } from "node:fs";

package/dist/{token-rTD9jxPZ.mjs → token-BXc2klNm.mjs}

@@ -1,4 +1,4 @@
-import { t as apiRequest } from "./api-CyJ-wBZh.mjs";
+import { n as apiRequest } from "./api-BcX_w6Xf.mjs";
 import { i as resolveProject, n as projectFlagArgs, t as projectDirArgs } from "./project-CpiPLNby.mjs";
 import { n as reportErrors } from "./ui-C8VuPzGp.mjs";
 import { defineCommand } from "citty";

package/dist/{upgrade-D_fgGLxu.mjs → upgrade-DxUNN79Q.mjs}

@@ -115,7 +115,7 @@ const upgradeCommand = defineCommand({
 		console.log(`Upgrading via ${command}: ${command} ${cmd.join(" ")}`);
 		await run(command, cmd);
 		console.log(`\nDone. Run \`canopy --version\` to confirm.`);
-		const { skillInstalled } = await import("./skill-esz0u6PO.mjs");
+		const { skillInstalled } = await import("./skill-CObIJMP5.mjs");
 		if (skillInstalled(process.cwd())) {
 			console.log("Refreshing the Canopy agent skill in this repo…");
 			await run("canopy", ["skill", "install"]).catch((err) => {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mediamonks/canopy-cli",
-  "version": "0.4.0",
+  "version": "0.4.2",
   "description": "Canopy CLI — create, develop and deploy Canopy projects.",
   "bin": {
     "canopy": "./dist/index.mjs"
@@ -18,9 +18,9 @@
     "citty": "^0.2.2",
     "hono": "^4.8.0",
     "miniflare": "^4.20260714.0",
-    "vite": "npm:@voidzero-dev/vite-plus-core@0.2.5",
-    "@mediamonks/canopy-data-plane": "0.0.1",
-    "@mediamonks/canopy": "0.0.1"
+    "vite-server": "npm:vite@^7",
+    "@mediamonks/canopy": "0.0.2",
+    "@mediamonks/canopy-data-plane": "0.0.1"
   },
   "devDependencies": {
     "@types/node": "^26.1.1",

package/dist/api-CyJ-wBZh.mjs

@@ -1,40 +0,0 @@
-import { t as readConfig } from "./config-C-z7st1X.mjs";
-//#region src/api.ts
-/**
-* Authenticated requests to the Canopy control plane. Credentials, in order:
-* CANOPY_DEPLOY_TOKEN (CI — a project-scoped deploy token, docs/02-decisions.md
-* D11), then the CLI token from `canopy login` (~/.canopy/config.json).
-*/
-var ApiError = class extends Error {
-	status;
-	code;
-	constructor(status, code, detail) {
-		super(detail ? `${code}: ${detail}` : code);
-		this.status = status;
-		this.code = code;
-	}
-};
-async function apiRequest(method, path, body, rawContentType, headers) {
-	const config = readConfig();
-	const deployToken = process.env["CANOPY_DEPLOY_TOKEN"];
-	const token = deployToken || config.token;
-	if (!token) throw new Error("Not logged in — run `canopy login` first.");
-	const isForm = body instanceof FormData;
-	const response = await fetch(`${config.apiUrl}/v1${path}`, {
-		method,
-		headers: {
-			authorization: `Bearer ${token}`,
-			...body === void 0 || isForm ? {} : { "content-type": rawContentType ?? "application/json" },
-			...headers
-		},
-		body: body === void 0 ? void 0 : isForm ? body : rawContentType !== void 0 ? body : JSON.stringify(body)
-	});
-	if (!response.ok) {
-		const payload = await response.json().catch(() => ({}));
-		if (response.status === 401) throw new Error(deployToken ? "Deploy token rejected — it may have been revoked. Create a new one in the dashboard (Settings → Deploy tokens) or with `canopy token create`." : "Session expired — run `canopy login` again.");
-		throw new ApiError(response.status, payload.error ?? `http_${response.status}`, payload.detail);
-	}
-	return await response.json();
-}
-//#endregion
-export { apiRequest as t };

package/dist/dev-D_GlUULk.mjs

@@ -1,2 +0,0 @@
-import { t as devCommand } from "./dev-DTGW0lm0.mjs";
-export { devCommand };