@mediamonks/canopy-cli 0.5.1 → 0.7.0

package/dist/{projects-ijfe7Ffx.mjs → projects-CSH7KsPi.mjs}

@@ -1,5 +1,5 @@
-import { c as tryReadCanopyJson, n as siteConfig, o as projectUrl } from "./site-BJjoePQS.mjs";
-import { c as apiRequest, i as unwrap, n as reportErrors, r as requireTty } from "./ui-DThlyHgo.mjs";
+import { n as siteConfig, s as projectUrl, u as tryReadCanopyJson } from "./site-BUlQR117.mjs";
+import { c as apiRequest, i as unwrap, n as reportErrors, r as requireTty } from "./ui-D8HxX0Ng.mjs";
 import { defineCommand } from "citty";
 import { existsSync, mkdirSync, readFileSync, readdirSync, writeFileSync } from "node:fs";
 import { join, relative, resolve, sep } from "node:path";
@@ -75,7 +75,12 @@ function writeCanopyJson(dir, fields) {
 	writeFileSync(join(dir, "canopy.json"), `${JSON.stringify(next, null, 2)}\n`);
 }
 function slugify(input) {
-	return input.toLowerCase().replaceAll(/[^a-z0-9]+/g, "-").replaceAll(/(^-+|-+$)/g, "").slice(0, 40);
+	let slug = input.toLowerCase().replaceAll(/[^a-z0-9]+/g, "-").replaceAll(/(^-+|-+$)/g, "").slice(0, 40);
+	while (slug.includes("-dot-")) slug = slug.replaceAll("-dot-", "-");
+	return slug;
+}
+function shouldScaffoldCreate(requested, cwd = process.cwd()) {
+	return requested ?? !existsSync(join(cwd, "canopy.json"));
 }
 const createCommand = defineCommand({
 	meta: {
@@ -98,7 +103,6 @@ const createCommand = defineCommand({
 		},
 		scaffold: {
 			type: "boolean",
-			default: true,
 			description: "Scaffold ./<slug>/ from the starter template",
 			negativeDescription: "Only register — no files written"
 		}
@@ -118,12 +122,16 @@ const createCommand = defineCommand({
 			message: "Slug",
 			defaultValue: slugify(name),
 			placeholder: slugify(name),
-			validate: (value) => !value || /^[a-z0-9][a-z0-9-]*$/.test(value) ? void 0 : "Lowercase letters, digits and dashes only."
+			validate: (value) => {
+				if (value && !/^[a-z0-9][a-z0-9-]*$/.test(value)) return "Lowercase letters, digits and dashes only.";
+				if (value?.includes("-dot-")) return `"-dot-" is reserved for preview hostnames.`;
+			}
 		})).trim();
 		slug ||= slugify(name);
+		const scaffold = shouldScaffoldCreate(args.scaffold);
 		let template = TEMPLATES.find((t) => t.id === (args.template ?? "static"));
 		if (!template) throw new Error(`Unknown template "${args.template}" — available: ${TEMPLATES.map((t) => t.id).join(", ")}.`);
-		if (args.scaffold && !args.template && process.stdin.isTTY) {
+		if (scaffold && !args.template && process.stdin.isTTY) {
 			const id = unwrap(await p.select({
 				message: "Template",
 				options: TEMPLATES.filter((t) => !t.hidden).map((t) => ({
@@ -136,7 +144,7 @@ const createCommand = defineCommand({
 		}
 		if (template.hidden) p.log.warn("Per-project Workers are not deployable yet (Phase 2) — `canopy deploy` publishes the frontend only for now.");
 		const targetDir = resolve(slug);
-		if (args.scaffold && existsSync(targetDir)) throw new Error(`Directory ./${slug} already exists — remove it, or use --no-scaffold to only register.`);
+		if (scaffold && existsSync(targetDir)) throw new Error(`Directory ./${slug} already exists — remove it, or use --no-scaffold to only register.`);
 		const spin = p.spinner();
 		spin.start(`Registering ${slug}…`);
 		let project;
@@ -150,7 +158,7 @@ const createCommand = defineCommand({
 			throw err;
 		}
 		spin.stop(`Created ${project.name} — ${projectUrl(project.slug)}`);
-		if (args.scaffold) {
+		if (scaffold) {
 			scaffoldTemplate(template.id, targetDir, {
 				name,
 				slug
@@ -166,7 +174,7 @@ const createCommand = defineCommand({
 			];
 			p.note(steps.join("\n"), `Scaffolded ./${slug}/ (${template.id}) — next`);
 			p.outro(`Live URL (after first deploy): ${projectUrl(project.slug)}`);
-		} else p.outro("Registered without scaffolding — add a canopy.json to deploy an existing app.");
+		} else p.outro(existsSync(join(process.cwd(), "canopy.json")) ? "Registered without scaffolding — the existing canopy.json was left unchanged." : "Registered without scaffolding — add a canopy.json to deploy an existing app.");
 	})
 });
 /** Empty enough to scaffold into: missing, or holding only dotfiles (.git, .agents…). */

package/dist/{site-BJjoePQS.mjs → site-BUlQR117.mjs}

@@ -175,6 +175,12 @@ function projectUrl(slug) {
 	if (apiHost === "run.app" || apiHost.endsWith(".run.app") || apiHost.startsWith("api.")) throw new Error("Cannot derive the project URL. Set projectDomain (baked profile or CANOPY_PROJECT_DOMAIN).");
 	return `https://${slug}.${apiHost.split(".").slice(-2).join(".")}`;
 }
+/** The staging channel's URL (docs/14): the first label becomes `staging-dot-<slug>`. */
+function stagingUrl(slug) {
+	const url = new URL(projectUrl(slug));
+	url.hostname = `staging-dot-${url.hostname}`;
+	return url.origin;
+}
 /** canopy.json parsed if present; undefined when the file is missing. */
 function tryReadCanopyJson(dir) {
 	let raw;
@@ -185,6 +191,13 @@ function tryReadCanopyJson(dir) {
 	}
 	return JSON.parse(raw);
 }
+/** The validated dialect lock from canopy.json, if the project set one. */
+function projectDialect(dir) {
+	const dialect = tryReadCanopyJson(dir)?.dialect;
+	if (dialect === void 0) return void 0;
+	if (dialect !== "sqlite" && dialect !== "postgres") throw new Error(`canopy.json "dialect" must be "sqlite" or "postgres", not ${JSON.stringify(dialect)}.`);
+	return dialect;
+}
 function readCanopyJson(dir) {
 	const config = tryReadCanopyJson(dir);
 	if (config === void 0) throw new Error(`No canopy.json in ${dir} — run from a project created by \`canopy create\`, add one ({"slug": "<slug>", "dist": "dist"}), or pass --project <slug>.`);
@@ -251,4 +264,4 @@ function siteHeaderLine(cliVersion) {
 	return `canopy ${cliVersion} · ${c.envOverride || !c.profileId ? c.apiUrl : `${c.profileId} (${c.projectDomain ?? new URL(c.apiUrl).hostname})`}`;
 }
 //#endregion
-export { projectFlagArgs as a, tryReadCanopyJson as c, readConfigFile as d, setActiveProfile as f, isProfileId as g, getBakedProfile as h, projectDirArgs as i, clearAllProfileTokens as l, writeConfigFile as m, siteConfig as n, projectUrl as o, upsertProfileAuth as p, siteHeaderLine as r, resolveProject as s, setInvocationProfile as t, listBakedProfiles as u };
+export { getBakedProfile as _, projectDirArgs as a, resolveProject as c, clearAllProfileTokens as d, listBakedProfiles as f, writeConfigFile as g, upsertProfileAuth as h, projectDialect as i, stagingUrl as l, setActiveProfile as m, siteConfig as n, projectFlagArgs as o, readConfigFile as p, siteHeaderLine as r, projectUrl as s, setInvocationProfile as t, tryReadCanopyJson as u, isProfileId as v };

package/dist/skill/canopy/SKILL.md

@@ -89,11 +89,34 @@ truth and never go stale.
   current directory; add `--no-scaffold` to link an app you already have.
 - Run locally: `canopy dev` (live data) or `canopy dev --local` (offline sandbox)
 - Deploy: `canopy deploy` (add `--build` if the project has a build step)
+- Test first on staging: `canopy deploy --staging` → verify → `canopy promote`
+  (own database cloned from live; `canopy staging status | sync | destroy`)
 - Roll back: `canopy rollback`
 - Open the live site: `canopy open`
-- Manage data: `canopy db pull | snapshot | snapshots | restore`
+- Manage data: `canopy db pull | snapshot | snapshots | restore | migrate`
 - CI credentials: `canopy token create | list | revoke`
 
+## Custom tables & migrations (devs; Drizzle recommended)
+
+The document API (`canopy.db.collection(…)`) needs no schema — prefer it. When
+a project defines its **own tables** (raw `canopy.db.sql()` / Drizzle), use the
+migrations flow — read `canopy docs migrations` first. The rules that prevent
+confusing failures:
+
+- Pin `"dialect"` and `"migrations"` in `canopy.json`; put ordered `.sql`
+  files in that directory (Drizzle: `npx drizzle-kit generate` writes them).
+- **There is no `DATABASE_URL` and never will be.** Never run
+  `drizzle-kit push`/`migrate`/`studio` or Drizzle's runtime `migrate()` —
+  generating is local, applying is Canopy's job: `canopy deploy` applies
+  pending migrations automatically (`canopy db migrate` applies without a
+  deploy; `canopy dev --local` applies to the sandbox on boot).
+- Never edit an applied migration (the platform refuses edited history) and
+  never reference `_canopy_*` tables.
+- **Schema change? Rehearse it on staging.** `canopy deploy --staging` applies
+  pending migrations to the staging database (a clone of live) — verify the
+  app there, then `canopy promote` replays them against live and flips the
+  version. Never promote with failing checks.
+
 ## Choosing a starter template (`canopy create` / `canopy init`)
 
 Both `canopy create` and `canopy init` scaffold from the same three templates.

package/dist/{skill-CW0QSbAJ.mjs → skill-DrWzmUMv.mjs}

@@ -1,5 +1,5 @@
-import { t as version } from "./package-CHoZKzaw.mjs";
-import { n as reportErrors } from "./ui-DThlyHgo.mjs";
+import { t as version } from "./package-CDB-uxy3.mjs";
+import { n as reportErrors } from "./ui-D8HxX0Ng.mjs";
 import { defineCommand } from "citty";
 import { cpSync, existsSync, mkdirSync, rmSync, symlinkSync, writeFileSync } from "node:fs";
 import { join, relative } from "node:path";

package/dist/staging-CfF2-pHs.mjs

@@ -0,0 +1,113 @@
+import { c as resolveProject, l as stagingUrl, o as projectFlagArgs, s as projectUrl } from "./site-BUlQR117.mjs";
+import { c as apiRequest, i as unwrap, l as withContext, n as reportErrors, r as requireTty } from "./ui-D8HxX0Ng.mjs";
+import { defineCommand } from "citty";
+import * as p from "@clack/prompts";
+//#region src/staging.ts
+/**
+* canopy staging status | sync | destroy — the project's staging channel
+* (docs/14): its own database (a clone of live), blob prefix and backend
+* worker, served at staging-dot-<slug>.<domain>. Created lazily by
+* `canopy deploy --staging`; promoted with `canopy promote`.
+*/
+const fetchStatus = (slug) => apiRequest("GET", `/projects/${slug}/staging`);
+const stagingCommand = defineCommand({
+	meta: {
+		name: "staging",
+		description: "Staging channel: status, sync, destroy"
+	},
+	subCommands: {
+		status: defineCommand({
+			meta: {
+				name: "status",
+				description: "Show the staging channel's state"
+			},
+			args: projectFlagArgs,
+			run: reportErrors("staging status", async ({ args }) => {
+				const { slug } = resolveProject(args);
+				const { staging } = await fetchStatus(slug);
+				if (!staging.provisioned) {
+					console.log(`No staging channel for ${slug} — create one with \`canopy deploy --staging\`.`);
+					return;
+				}
+				console.log(`Staging: ${stagingUrl(slug)}`);
+				console.log(`  staged   v${staging.version ?? "— (nothing deployed yet)"}` + (staging.hasWorker ? " (with backend)" : ""));
+				console.log(`  live     v${staging.live ?? "—"}  ${projectUrl(slug)}`);
+				if (staging.version !== null && staging.version !== staging.live) console.log(`  \`canopy promote\` makes v${staging.version} live`);
+			})
+		}),
+		sync: defineCommand({
+			meta: {
+				name: "sync",
+				description: "Re-clone the live database into staging (staging data is replaced)"
+			},
+			args: {
+				...projectFlagArgs,
+				yes: {
+					type: "boolean",
+					default: false,
+					description: "Skip the confirmation prompt"
+				}
+			},
+			run: reportErrors("staging sync", async ({ args }) => {
+				const { slug } = resolveProject(args);
+				if (!args.yes) {
+					requireTty("pass --yes to sync without confirmation.");
+					if (!unwrap(await p.confirm({ message: `Replace "${slug}"'s STAGING data with a fresh copy of live?` }))) {
+						p.cancel("Aborted.");
+						return;
+					}
+				}
+				const spin = p.spinner();
+				spin.start(`Cloning live → staging for ${slug}…`);
+				try {
+					await withContext(apiRequest("POST", `/projects/${slug}/staging/sync`), {
+						action: `sync staging for "${slug}"`,
+						fixes: { staging_not_provisioned: "This project has no staging channel yet — `canopy deploy --staging` creates one (already cloned from live)." }
+					});
+				} catch (err) {
+					spin.error("Sync failed.");
+					throw err;
+				}
+				spin.stop(`Staging database now matches live for ${slug}.`);
+			})
+		}),
+		destroy: defineCommand({
+			meta: {
+				name: "destroy",
+				description: "Tear the staging channel down (database, files, backend — live is untouched)"
+			},
+			args: {
+				...projectFlagArgs,
+				yes: {
+					type: "boolean",
+					default: false,
+					description: "Skip the type-the-slug confirmation"
+				}
+			},
+			run: reportErrors("staging destroy", async ({ args }) => {
+				const { slug } = resolveProject(args);
+				if (!args.yes) {
+					requireTty("pass --yes to destroy without confirmation.");
+					if (unwrap(await p.text({ message: `This deletes "${slug}"'s staging database, files and backend (live is untouched). Type the slug to confirm.` })).trim() !== slug) {
+						p.cancel("Aborted.");
+						return;
+					}
+				}
+				const spin = p.spinner();
+				spin.start(`Destroying staging for ${slug}…`);
+				try {
+					await withContext(apiRequest("DELETE", `/projects/${slug}/staging`), {
+						action: `destroy staging for "${slug}"`,
+						fixes: { staging_not_provisioned: "This project has no staging channel." }
+					});
+				} catch (err) {
+					spin.error("Destroy failed.");
+					throw err;
+				}
+				spin.stop(`Staging channel removed for ${slug}. \`canopy deploy --staging\` recreates it.`);
+			})
+		})
+	}
+});
+//#endregion
+export { stagingCommand };

package/dist/templates/spa/AGENTS.md

@@ -30,6 +30,10 @@ the [Canopy dashboard](https://dashboard.thanarie.dev).
   writes never reach the platform. Prefer it for destructive experiments.
 - `canopy deploy` — builds (`npm run build`) and publishes `dist/`; live
   (behind company login) at https://{{slug}}.thanarie.dev.
+- Risky change (schema migration, backend rework)? `canopy deploy --staging`
+  first — a private copy with its own database cloned from live — verify, then
+  `canopy promote` ships the exact tested version. Never promote with failing
+  checks.
 
 ## Boundaries
 

package/dist/templates/static/AGENTS.md

@@ -29,6 +29,10 @@ the [Canopy dashboard](https://dashboard.thanarie.dev).
   writes never reach the platform. Prefer it for destructive experiments.
 - `canopy deploy` — publish; live (behind company login) at
   https://{{slug}}.thanarie.dev.
+- Risky change (schema migration, backend rework)? `canopy deploy --staging`
+  first — a private copy with its own database cloned from live — verify, then
+  `canopy promote` ships the exact tested version. Never promote with failing
+  checks.
 
 ## Boundaries
 

package/dist/templates/worker/AGENTS.md

@@ -39,6 +39,13 @@ the [Canopy dashboard](https://dashboard.thanarie.dev).
   writes never reach the platform. Prefer it for destructive experiments.
 - `canopy deploy` — builds (`npm run build`) and publishes; live (behind
   company login) at https://{{slug}}.thanarie.dev.
+- Defining your own tables (raw `sql()` / Drizzle)? Use the migrations flow —
+  `canopy docs migrations`. Never invent a `DATABASE_URL` (none exists):
+  generate migrations locally, and `canopy deploy` applies them.
+- Risky change (schema migration, backend rework)? `canopy deploy --staging`
+  first — a private copy with its own database cloned from live — verify, then
+  `canopy promote` ships the exact tested version. Never promote with failing
+  checks.
 
 ## Boundaries
 

package/dist/{token-BeF9zczg.mjs → token-nieJV1w7.mjs}

@@ -1,5 +1,5 @@
-import { a as projectFlagArgs, i as projectDirArgs, s as resolveProject } from "./site-BJjoePQS.mjs";
-import { c as apiRequest, n as reportErrors } from "./ui-DThlyHgo.mjs";
+import { a as projectDirArgs, c as resolveProject, o as projectFlagArgs } from "./site-BUlQR117.mjs";
+import { c as apiRequest, n as reportErrors } from "./ui-D8HxX0Ng.mjs";
 import { defineCommand } from "citty";
 const tokenCommand = defineCommand({
 	meta: {

package/dist/{ui-DThlyHgo.mjs → ui-D8HxX0Ng.mjs}

@@ -1,4 +1,4 @@
-import { n as siteConfig } from "./site-BJjoePQS.mjs";
+import { n as siteConfig } from "./site-BUlQR117.mjs";
 import { spawn } from "node:child_process";
 import { cancel, isCancel } from "@clack/prompts";
 //#region src/api.ts
@@ -211,13 +211,14 @@ async function apiDownload(path) {
 * unscoped; the target project rides as X-Canopy-Project and the api. gateway
 * re-vouches it (docs/10-cli-sites.md D17).
 */
-async function apiDataRequest(method, path, projectSlug, body, rawContentType) {
+async function apiDataRequest(method, path, projectSlug, body, rawContentType, channel) {
 	const { apiUrl, token, isDeployToken } = credentials();
 	const response = await fetch(`${apiUrl}/data/v1${path}`, {
 		method,
 		headers: {
 			authorization: `Bearer ${token}`,
 			"x-canopy-project": projectSlug,
+			...channel === "staging" ? { "x-canopy-channel": "staging" } : {},
 			...body === void 0 ? {} : { "content-type": rawContentType ?? "application/json" }
 		},
 		body: body === void 0 ? void 0 : rawContentType !== void 0 ? body : JSON.stringify(body)

package/dist/{upgrade-CGz1yzsW.mjs → upgrade-CH_jHkc7.mjs}

@@ -1,5 +1,5 @@
 import { t as PACKAGE_NAME } from "./version-check-Cuh6HaLX.mjs";
-import { n as reportErrors } from "./ui-DThlyHgo.mjs";
+import { n as reportErrors } from "./ui-D8HxX0Ng.mjs";
 import { defineCommand } from "citty";
 import { spawn } from "node:child_process";
 import { fileURLToPath } from "node:url";
@@ -112,7 +112,7 @@ const upgradeCommand = defineCommand({
 		const spec = `${PACKAGE_NAME}@${args.version ?? "latest"}`;
 		const command = pmCommand(pm);
 		const cmd = installArgs(pm, spec);
-		const { skillInstalled } = await import("./skill-CW0QSbAJ.mjs");
+		const { skillInstalled } = await import("./skill-DrWzmUMv.mjs");
 		const refreshSkill = skillInstalled(process.cwd());
 		console.log(`Upgrading via ${command}: ${command} ${cmd.join(" ")}`);
 		await run(command, cmd);

package/dist/{usage-DQpH7A3X.mjs → usage-qqPtkDtT.mjs}

@@ -1,5 +1,5 @@
-import { a as projectFlagArgs, s as resolveProject } from "./site-BJjoePQS.mjs";
-import { c as apiRequest, l as withContext, n as reportErrors } from "./ui-DThlyHgo.mjs";
+import { c as resolveProject, o as projectFlagArgs } from "./site-BUlQR117.mjs";
+import { c as apiRequest, l as withContext, n as reportErrors } from "./ui-D8HxX0Ng.mjs";
 import { defineCommand } from "citty";
 //#region src/usage.ts
 /**

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mediamonks/canopy-cli",
-  "version": "0.5.1",
+  "version": "0.7.0",
   "description": "Canopy CLI — create, develop and deploy Canopy projects.",
   "bin": {
     "canopy": "./dist/index.mjs"
@@ -21,7 +21,7 @@
     "hono": "^4.8.0",
     "vite-server": "npm:vite@^7",
     "@mediamonks/canopy": "0.0.3",
-    "@mediamonks/canopy-data-plane": "0.0.1"
+    "@mediamonks/canopy-data-plane": "0.0.2"
   },
   "devDependencies": {
     "@types/node": "^26.1.1",

package/dist/dev-BJ5xEwqW.mjs

@@ -1,2 +0,0 @@
-import { t as devCommand } from "./dev-CQQhMOoD.mjs";
-export { devCommand };