@mediamonks/canopy-cli 0.4.1 → 0.4.3

package/dist/api-BcX_w6Xf.mjs

@@ -0,0 +1,58 @@
+import { t as readConfig } from "./config-C-z7st1X.mjs";
+//#region src/api.ts
+/**
+* Authenticated requests to the Canopy control plane. Credentials, in order:
+* CANOPY_DEPLOY_TOKEN (CI — a project-scoped deploy token, docs/02-decisions.md
+* D11), then the CLI token from `canopy login` (~/.canopy/config.json).
+*/
+var ApiError = class extends Error {
+	status;
+	code;
+	constructor(status, code, detail) {
+		super(detail ? `${code}: ${detail}` : code);
+		this.status = status;
+		this.code = code;
+	}
+};
+/** Resolve the bearer token: CI deploy token first (D11), then the login token. */
+function credentials() {
+	const config = readConfig();
+	const deployToken = process.env["CANOPY_DEPLOY_TOKEN"];
+	const token = deployToken || config.token;
+	if (!token) throw new Error("Not logged in — run `canopy login` first.");
+	return {
+		apiUrl: config.apiUrl,
+		token,
+		isDeployToken: Boolean(deployToken)
+	};
+}
+/** Turn a non-2xx response into a thrown error (friendlier copy on 401). */
+async function fail(response, isDeployToken) {
+	const payload = await response.json().catch(() => ({}));
+	if (response.status === 401) throw new Error(isDeployToken ? "Deploy token rejected — it may have been revoked. Create a new one in the dashboard (Settings → Deploy tokens) or with `canopy token create`." : "Session expired — run `canopy login` again.");
+	throw new ApiError(response.status, payload.error ?? `http_${response.status}`, payload.detail);
+}
+async function apiRequest(method, path, body, rawContentType, headers) {
+	const { apiUrl, token, isDeployToken } = credentials();
+	const isForm = body instanceof FormData;
+	const response = await fetch(`${apiUrl}/v1${path}`, {
+		method,
+		headers: {
+			authorization: `Bearer ${token}`,
+			...body === void 0 || isForm ? {} : { "content-type": rawContentType ?? "application/json" },
+			...headers
+		},
+		body: body === void 0 ? void 0 : isForm ? body : rawContentType !== void 0 ? body : JSON.stringify(body)
+	});
+	if (!response.ok) return fail(response, isDeployToken);
+	return await response.json();
+}
+/** Authenticated GET returning raw bytes (e.g. a deploy zip). */
+async function apiDownload(path) {
+	const { apiUrl, token, isDeployToken } = credentials();
+	const response = await fetch(`${apiUrl}/v1${path}`, { headers: { authorization: `Bearer ${token}` } });
+	if (!response.ok) return fail(response, isDeployToken);
+	return Buffer.from(await response.arrayBuffer());
+}
+//#endregion
+export { apiRequest as n, apiDownload as t };

package/dist/{db-CtUG4vfG.mjs → db-Bkq-_qkd.mjs}

@@ -1,4 +1,4 @@
-import { t as apiRequest } from "./api-CyJ-wBZh.mjs";
+import { n as apiRequest } from "./api-BcX_w6Xf.mjs";
 import { i as resolveProject, n as projectFlagArgs } from "./project-CpiPLNby.mjs";
 import { i as unwrap, n as reportErrors, r as requireTty } from "./ui-C8VuPzGp.mjs";
 import { defineCommand } from "citty";

package/dist/{deploy-N88l4Kt3.mjs → deploy-BO_-gK32.mjs}

@@ -1,9 +1,9 @@
-import { t as apiRequest } from "./api-CyJ-wBZh.mjs";
+import { n as apiRequest, t as apiDownload } from "./api-BcX_w6Xf.mjs";
 import { a as tryReadCanopyJson, i as resolveProject, n as projectFlagArgs, r as projectUrl, t as projectDirArgs } from "./project-CpiPLNby.mjs";
 import { i as unwrap, n as reportErrors } from "./ui-C8VuPzGp.mjs";
 import { defineCommand } from "citty";
 import { spawn } from "node:child_process";
-import { readFileSync, readdirSync, statSync } from "node:fs";
+import { readFileSync, readdirSync, statSync, writeFileSync } from "node:fs";
 import { join, relative, resolve } from "node:path";
 import * as p from "@clack/prompts";
 //#region src/deploy.ts
@@ -97,17 +97,16 @@ const deployCommand = defineCommand({
 		spin.stop(`Live: ${projectUrl(slug)} (v${result.version})`);
 	})
 });
-/** Show the deploy history and ask which version to make live. */
-async function pickVersion(deploys, live) {
-	const fallback = live !== null && live > 1 ? live - 1 : void 0;
+/** Show the deploy history and ask which version to act on. */
+async function pickVersion(deploys, live, message, initial) {
 	return unwrap(await p.select({
-		message: "Version to make live",
+		message,
 		options: deploys.map((deploy) => ({
 			value: deploy.version,
 			label: `v${deploy.version}  ${deploy.created_at}  (${deploy.source})`,
 			hint: deploy.version === live ? "live" : void 0
 		})),
-		initialValue: fallback
+		initialValue: initial
 	}));
 }
 const rollbackCommand = defineCommand({
@@ -137,7 +136,7 @@ const rollbackCommand = defineCommand({
 			const { deploys, live } = await apiRequest("GET", `/projects/${slug}/deploys`);
 			if (deploys.length < 2) throw new Error("Nothing to roll back to — this project has fewer than two deploys.");
 			if (process.stdin.isTTY) {
-				target = await pickVersion(deploys, live);
+				target = await pickVersion(deploys, live, "Version to make live", live !== null && live > 1 ? live - 1 : void 0);
 				if (target === live) throw new Error(`v${target} is already live.`);
 			} else {
 				if (live === null || live < 2) throw new Error("Nothing to roll back to — no deploy exists before the live one.");
@@ -149,5 +148,52 @@ const rollbackCommand = defineCommand({
 		console.log(`Live: ${projectUrl(slug)} (v${result.version}, was v${result.previous ?? "?"})`);
 	})
 });
+const downloadCommand = defineCommand({
+	meta: {
+		name: "download",
+		description: "Download a deploy's assets as a zip (defaults to the live version)"
+	},
+	args: {
+		version: {
+			type: "positional",
+			description: "Deploy version to download, e.g. v3 (the live version when omitted)",
+			required: false
+		},
+		...projectFlagArgs,
+		dir: {
+			type: "string",
+			description: "Project directory (defaults to the current directory)"
+		},
+		out: {
+			type: "string",
+			description: "Output file (defaults to <slug>-v<version>.zip)"
+		}
+	},
+	run: reportErrors("download", async ({ args }) => {
+		const { slug } = resolveProject(args);
+		let target;
+		if (args.version !== void 0) {
+			if (!/^v?\d+$/.test(args.version)) throw new Error(`Invalid version "${args.version}" — expected a number like 3 or v3.`);
+			target = Number(args.version.replace(/^v/, ""));
+		} else {
+			const { deploys, live } = await apiRequest("GET", `/projects/${slug}/deploys`);
+			if (deploys.length === 0) throw new Error("Nothing to download — this project has no deploys yet.");
+			if (process.stdin.isTTY) target = await pickVersion(deploys, live, "Version to download", live ?? void 0);
+			else if (live !== null) target = live;
+			else throw new Error("No live version to download — pass a version, e.g. v1.");
+		}
+		const out = args.out ?? `${slug}-v${target}.zip`;
+		const spin = p.spinner();
+		spin.start(`Downloading ${slug} v${target}…`);
+		try {
+			const zip = await apiDownload(`/projects/${slug}/deploys/${target}/download`);
+			writeFileSync(out, zip);
+			spin.stop(`Wrote ${out} (${(zip.byteLength / 1024).toFixed(0)} kB).`);
+		} catch (err) {
+			spin.error("Download failed.");
+			throw err;
+		}
+	})
+});
 //#endregion
-export { deployCommand, rollbackCommand };
+export { deployCommand, downloadCommand, rollbackCommand };

package/dist/{dev-DTGW0lm0.mjs → dev-CGiJJ5mj.mjs}

@@ -1,9 +1,11 @@
 import { t as readConfig } from "./config-C-z7st1X.mjs";
-import { t as apiRequest } from "./api-CyJ-wBZh.mjs";
+import { n as apiRequest } from "./api-BcX_w6Xf.mjs";
 import { i as resolveProject, t as projectDirArgs } from "./project-CpiPLNby.mjs";
 import { n as reportErrors } from "./ui-C8VuPzGp.mjs";
+import { createRequire } from "node:module";
 import { defineCommand } from "citty";
 import { join } from "node:path";
+import { pathToFileURL } from "node:url";
 //#region src/dev.ts
 /**
 * Mirror the gateway's project-host rewrite (apps/gateway/src/index.ts):
@@ -18,9 +20,31 @@ function rewriteApiPath(path, slug) {
 	if (dataPlane) pathname = `/v1/projects/${slug}/${dataPlane[1]}${dataPlane[2] ?? ""}`;
 	return pathname + query;
 }
+/**
+* Load Vite's `createServer`, preferring the Vite installed in the *project*
+* over the copy bundled with the CLI.
+*
+* Why the project's own Vite: the dev server and the project's
+* vite.config/plugins must run on ONE Vite instance. When they don't — e.g. the
+* CLI serves with its Vite while the project's `vite.config.ts` and
+* `@vitejs/plugin-react` pull in a second, separately-installed Vite (even the
+* same version) — internal module resolution breaks: the server fails to
+* resolve `/@vite/client` and the browser gets the HTML fallback instead of the
+* client runtime. Scaffolds that ship a vite.config (spa/worker) always have
+* their own Vite; the no-build `static` scaffold has none, so we fall back to
+* the CLI's bundled Vite (aliased "vite-server"). Upstream Vite is used rather
+* than the repo's Vite+ fork, whose native binding rides the devDependency-only
+* `vite-plus` package and is absent from a user's global `npm i -g` install.
+*/
+async function loadCreateServer(dir) {
+	try {
+		return (await import(pathToFileURL(createRequire(join(dir, "package.json")).resolve("vite")).href)).createServer;
+	} catch {
+		return (await import("vite-server")).createServer;
+	}
+}
 async function startVite(flags, serverOverrides) {
-	const { createServer } = await import("vite");
-	const server = await createServer({
+	const server = await (await loadCreateServer(flags.dir))({
 		root: flags.dir,
 		plugins: [{
 			name: "canopy-platform-api-external",
@@ -55,7 +79,7 @@ async function devRemote(flags, slug) {
 async function devLocal(flags, slug) {
 	let dump;
 	if (flags.pull) {
-		const { fetchProjectDump } = await import("./local-951zc9qJ.mjs");
+		const { fetchProjectDump } = await import("./local-DSGE-qxT.mjs");
 		console.log(`Pulling a fresh export of ${slug}…`);
 		dump = await fetchProjectDump(slug);
 	}
@@ -69,7 +93,7 @@ async function devLocal(flags, slug) {
 	} catch (err) {
 		console.log(`Note: ai/services will be unavailable — could not reach the platform (${err instanceof Error ? err.message : String(err)}).`);
 	}
-	const { createSandbox } = await import("./local-951zc9qJ.mjs");
+	const { createSandbox } = await import("./local-DSGE-qxT.mjs");
 	const sandbox = await createSandbox({
 		slug,
 		persistDir: join(flags.dir, ".canopy", "local"),

package/dist/dev-fNEcOnTg.mjs

@@ -0,0 +1,2 @@
+import { t as devCommand } from "./dev-CGiJJ5mj.mjs";
+export { devCommand };

package/dist/docs/cli.md

@@ -44,6 +44,9 @@ is the overview.
   - `--build` — run the `canopy.json` build command first.
 - `canopy rollback [version]` — make an earlier deploy live again, e.g. `v3`
   (picked from history when omitted). `--dir <path>` to target another directory.
+- `canopy download [version]` — download a deploy's assets as a zip, e.g. `v3`
+  (the live version when omitted, or picked from history interactively).
+  `--out <file>` to name it.
 - `canopy open` — open the deployed project in your browser.
 
 ## Data

package/dist/docs/deploy.md

@@ -38,6 +38,21 @@ canopy rollback v3       # make v3 live again
 
 Rollback re-points the live version at an existing deploy — it does not rebuild.
 
+## Downloading a version
+
+Every version's assets can be pulled back down as a zip — the exact files that
+were deployed, for any version in the history:
+
+```bash
+canopy download          # the live version (pick from history in a terminal)
+canopy download v3       # a specific version
+canopy download v3 --out release.zip
+```
+
+The same download is available per version from the dashboard (project overview
+→ Deploys). Handy for archiving a release or moving a matured project off the
+platform.
+
 ## Seeing the live site
 
 ```bash

package/dist/index.mjs

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { t as version } from "./package-CA5g4zPx.mjs";
+import { t as version } from "./package-M9p3aYWG.mjs";
 import { i as runRefresh, r as notifyOfUpdate } from "./version-check-CoWgQs2h.mjs";
 import { defineCommand, runMain } from "citty";
 //#region src/index.ts
@@ -44,19 +44,20 @@ const main = defineCommand({
 		login: () => import("./login-Dif9Y32q.mjs").then((m) => m.loginCommand),
 		whoami: () => import("./login-Dif9Y32q.mjs").then((m) => m.whoamiCommand),
 		logout: () => import("./login-Dif9Y32q.mjs").then((m) => m.logoutCommand),
-		create: () => import("./projects-DbKcG5kx.mjs").then((m) => m.createCommand),
-		init: () => import("./projects-DbKcG5kx.mjs").then((m) => m.initCommand),
-		projects: () => import("./projects-DbKcG5kx.mjs").then((m) => m.projectsCommand),
-		delete: () => import("./projects-DbKcG5kx.mjs").then((m) => m.deleteCommand),
-		dev: () => import("./dev-D_GlUULk.mjs").then((m) => m.devCommand),
-		deploy: () => import("./deploy-N88l4Kt3.mjs").then((m) => m.deployCommand),
-		rollback: () => import("./deploy-N88l4Kt3.mjs").then((m) => m.rollbackCommand),
-		token: () => import("./token-rTD9jxPZ.mjs").then((m) => m.tokenCommand),
-		db: () => import("./db-CtUG4vfG.mjs").then((m) => m.dbCommand),
+		create: () => import("./projects-oyjC4ZGb.mjs").then((m) => m.createCommand),
+		init: () => import("./projects-oyjC4ZGb.mjs").then((m) => m.initCommand),
+		projects: () => import("./projects-oyjC4ZGb.mjs").then((m) => m.projectsCommand),
+		delete: () => import("./projects-oyjC4ZGb.mjs").then((m) => m.deleteCommand),
+		dev: () => import("./dev-fNEcOnTg.mjs").then((m) => m.devCommand),
+		deploy: () => import("./deploy-BO_-gK32.mjs").then((m) => m.deployCommand),
+		rollback: () => import("./deploy-BO_-gK32.mjs").then((m) => m.rollbackCommand),
+		download: () => import("./deploy-BO_-gK32.mjs").then((m) => m.downloadCommand),
+		token: () => import("./token-BXc2klNm.mjs").then((m) => m.tokenCommand),
+		db: () => import("./db-Bkq-_qkd.mjs").then((m) => m.dbCommand),
 		open: () => import("./open-xLiGUz_W.mjs").then((m) => m.openCommand),
 		docs: () => import("./docs-C3aOAx_A.mjs").then((m) => m.docsCommand),
-		skill: () => import("./skill-DMs7GNl7.mjs").then((m) => m.skillCommand),
-		upgrade: () => import("./upgrade-BMTdpOxO.mjs").then((m) => m.upgradeCommand),
+		skill: () => import("./skill-BYuy0tS3.mjs").then((m) => m.skillCommand),
+		upgrade: () => import("./upgrade-fRFEV1GC.mjs").then((m) => m.upgradeCommand),
 		logs: planned("logs", "Tail worker logs", "2")
 	}
 });

package/dist/{local-951zc9qJ.mjs → local-DSGE-qxT.mjs}

@@ -1,5 +1,5 @@
-import { t as apiRequest } from "./api-CyJ-wBZh.mjs";
-import { n as rewriteApiPath } from "./dev-DTGW0lm0.mjs";
+import { n as apiRequest } from "./api-BcX_w6Xf.mjs";
+import { n as rewriteApiPath } from "./dev-CGiJJ5mj.mjs";
 import { createRequire } from "node:module";
 import { existsSync, readFileSync } from "node:fs";
 import { dirname, join } from "node:path";

package/dist/{package-CA5g4zPx.mjs → package-M9p3aYWG.mjs}

@@ -1,4 +1,4 @@
 //#region package.json
-var version = "0.4.1";
+var version = "0.4.3";
 //#endregion
 export { version as t };

package/dist/{projects-DbKcG5kx.mjs → projects-oyjC4ZGb.mjs}

@@ -1,4 +1,4 @@
-import { t as apiRequest } from "./api-CyJ-wBZh.mjs";
+import { n as apiRequest } from "./api-BcX_w6Xf.mjs";
 import { a as tryReadCanopyJson, r as projectUrl } from "./project-CpiPLNby.mjs";
 import { i as unwrap, n as reportErrors, r as requireTty } from "./ui-C8VuPzGp.mjs";
 import { defineCommand } from "citty";

package/dist/{skill-DMs7GNl7.mjs → skill-BYuy0tS3.mjs}

@@ -1,4 +1,4 @@
-import { t as version } from "./package-CA5g4zPx.mjs";
+import { t as version } from "./package-M9p3aYWG.mjs";
 import { n as reportErrors } from "./ui-C8VuPzGp.mjs";
 import { defineCommand } from "citty";
 import { cpSync, existsSync, mkdirSync, rmSync, symlinkSync, writeFileSync } from "node:fs";

package/dist/{token-rTD9jxPZ.mjs → token-BXc2klNm.mjs}

@@ -1,4 +1,4 @@
-import { t as apiRequest } from "./api-CyJ-wBZh.mjs";
+import { n as apiRequest } from "./api-BcX_w6Xf.mjs";
 import { i as resolveProject, n as projectFlagArgs, t as projectDirArgs } from "./project-CpiPLNby.mjs";
 import { n as reportErrors } from "./ui-C8VuPzGp.mjs";
 import { defineCommand } from "citty";

package/dist/{upgrade-BMTdpOxO.mjs → upgrade-fRFEV1GC.mjs}

@@ -112,11 +112,12 @@ const upgradeCommand = defineCommand({
 		const spec = `${PACKAGE_NAME}@${args.version ?? "latest"}`;
 		const command = pmCommand(pm);
 		const cmd = installArgs(pm, spec);
+		const { skillInstalled } = await import("./skill-BYuy0tS3.mjs");
+		const refreshSkill = skillInstalled(process.cwd());
 		console.log(`Upgrading via ${command}: ${command} ${cmd.join(" ")}`);
 		await run(command, cmd);
 		console.log(`\nDone. Run \`canopy --version\` to confirm.`);
-		const { skillInstalled } = await import("./skill-DMs7GNl7.mjs");
-		if (skillInstalled(process.cwd())) {
+		if (refreshSkill) {
 			console.log("Refreshing the Canopy agent skill in this repo…");
 			await run("canopy", ["skill", "install"]).catch((err) => {
 				console.warn(`Could not auto-refresh the skill (${err instanceof Error ? err.message : String(err)}). Run \`canopy skill install\` yourself.`);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mediamonks/canopy-cli",
-  "version": "0.4.1",
+  "version": "0.4.3",
   "description": "Canopy CLI — create, develop and deploy Canopy projects.",
   "bin": {
     "canopy": "./dist/index.mjs"
@@ -18,9 +18,9 @@
     "citty": "^0.2.2",
     "hono": "^4.8.0",
     "miniflare": "^4.20260714.0",
-    "vite": "npm:@voidzero-dev/vite-plus-core@0.2.5",
+    "vite-server": "npm:vite@^7",
     "@mediamonks/canopy-data-plane": "0.0.1",
-    "@mediamonks/canopy": "0.0.1"
+    "@mediamonks/canopy": "0.0.2"
   },
   "devDependencies": {
     "@types/node": "^26.1.1",

package/dist/api-CyJ-wBZh.mjs

@@ -1,40 +0,0 @@
-import { t as readConfig } from "./config-C-z7st1X.mjs";
-//#region src/api.ts
-/**
-* Authenticated requests to the Canopy control plane. Credentials, in order:
-* CANOPY_DEPLOY_TOKEN (CI — a project-scoped deploy token, docs/02-decisions.md
-* D11), then the CLI token from `canopy login` (~/.canopy/config.json).
-*/
-var ApiError = class extends Error {
-	status;
-	code;
-	constructor(status, code, detail) {
-		super(detail ? `${code}: ${detail}` : code);
-		this.status = status;
-		this.code = code;
-	}
-};
-async function apiRequest(method, path, body, rawContentType, headers) {
-	const config = readConfig();
-	const deployToken = process.env["CANOPY_DEPLOY_TOKEN"];
-	const token = deployToken || config.token;
-	if (!token) throw new Error("Not logged in — run `canopy login` first.");
-	const isForm = body instanceof FormData;
-	const response = await fetch(`${config.apiUrl}/v1${path}`, {
-		method,
-		headers: {
-			authorization: `Bearer ${token}`,
-			...body === void 0 || isForm ? {} : { "content-type": rawContentType ?? "application/json" },
-			...headers
-		},
-		body: body === void 0 ? void 0 : isForm ? body : rawContentType !== void 0 ? body : JSON.stringify(body)
-	});
-	if (!response.ok) {
-		const payload = await response.json().catch(() => ({}));
-		if (response.status === 401) throw new Error(deployToken ? "Deploy token rejected — it may have been revoked. Create a new one in the dashboard (Settings → Deploy tokens) or with `canopy token create`." : "Session expired — run `canopy login` again.");
-		throw new ApiError(response.status, payload.error ?? `http_${response.status}`, payload.detail);
-	}
-	return await response.json();
-}
-//#endregion
-export { apiRequest as t };

package/dist/dev-D_GlUULk.mjs

@@ -1,2 +0,0 @@
-import { t as devCommand } from "./dev-DTGW0lm0.mjs";
-export { devCommand };