@mediamonks/canopy-cli 0.7.1 → 0.7.3

package/dist/{db-BkUmbGgx.mjs → db-D3RKaLVU.mjs}

@@ -1,6 +1,6 @@
 import { c as resolveProject, o as projectFlagArgs } from "./site-BUlQR117.mjs";
-import { i as unwrap, l as withContext, n as reportErrors, o as apiDataRequest, r as requireTty } from "./ui-D8HxX0Ng.mjs";
-import { n as migrateProject, r as readMigrationFiles, t as describeMigrateResult } from "./migrations-I1adj0z2.mjs";
+import { i as unwrap, l as withContext, n as reportErrors, o as apiDataRequest, r as requireTty } from "./ui-CpdtK7mt.mjs";
+import { n as migrateProject, r as readMigrationFiles, t as describeMigrateResult } from "./migrations-DpWHuqkQ.mjs";
 import { defineCommand } from "citty";
 import { readFileSync, writeFileSync } from "node:fs";
 import * as p from "@clack/prompts";

package/dist/{deploy-BcczXlSQ.mjs → deploy-ClioT9ZC.mjs}

@@ -1,6 +1,6 @@
 import { a as projectDirArgs, c as resolveProject, l as stagingUrl, n as siteConfig, o as projectFlagArgs, s as projectUrl, u as tryReadCanopyJson } from "./site-BUlQR117.mjs";
-import { c as apiRequest, i as unwrap, l as withContext, n as reportErrors, o as apiDataRequest, s as apiDownload } from "./ui-D8HxX0Ng.mjs";
-import { n as migrateProject, r as readMigrationFiles, t as describeMigrateResult } from "./migrations-I1adj0z2.mjs";
+import { c as apiRequest, i as unwrap, l as withContext, n as reportErrors, o as apiDataRequest, s as apiDownload } from "./ui-CpdtK7mt.mjs";
+import { n as migrateProject, r as readMigrationFiles, t as describeMigrateResult } from "./migrations-DpWHuqkQ.mjs";
 import { defineCommand } from "citty";
 import { mkdtempSync, readFileSync, readdirSync, rmSync, statSync, writeFileSync } from "node:fs";
 import { tmpdir } from "node:os";

package/dist/{dev-DvyKHe2d.mjs → dev-BbAVZcAR.mjs}

@@ -1,6 +1,6 @@
 import { a as projectDirArgs, c as resolveProject, i as projectDialect, n as siteConfig, u as tryReadCanopyJson } from "./site-BUlQR117.mjs";
-import { a as ApiError, c as apiRequest, l as withContext, n as reportErrors } from "./ui-D8HxX0Ng.mjs";
-import { r as readMigrationFiles } from "./migrations-I1adj0z2.mjs";
+import { a as ApiError, c as apiRequest, l as withContext, n as reportErrors } from "./ui-CpdtK7mt.mjs";
+import { r as readMigrationFiles } from "./migrations-DpWHuqkQ.mjs";
 import { createRequire } from "node:module";
 import { defineCommand } from "citty";
 import { join } from "node:path";
@@ -112,7 +112,7 @@ async function devRemote(flags, slug) {
 async function devLocal(flags, slug) {
 	let dump;
 	if (flags.pull) {
-		const { fetchProjectDump } = await import("./local-C47tmhl7.mjs");
+		const { fetchProjectDump } = await import("./local-BHxSZwUT.mjs");
 		console.log(`Pulling a fresh export of ${slug}${flags.staging ? " [staging]" : ""}…`);
 		dump = await fetchProjectDump(slug, flags.staging ? "staging" : "live");
 	}
@@ -127,7 +127,7 @@ async function devLocal(flags, slug) {
 		const reason = err instanceof ApiError ? err.explain().why : String(err);
 		console.log(`Note: ai/services will be unavailable — could not reach the platform (${reason}).`);
 	}
-	const { createSandbox } = await import("./local-C47tmhl7.mjs");
+	const { createSandbox } = await import("./local-BHxSZwUT.mjs");
 	const sandbox = await createSandbox({
 		slug,
 		persistDir: join(flags.dir, ".canopy", "local"),

package/dist/dev-D6Sy15Wv.mjs

@@ -0,0 +1,2 @@
+import { t as devCommand } from "./dev-BbAVZcAR.mjs";
+export { devCommand };

package/dist/docs/cli.md

@@ -70,6 +70,12 @@ has a full page per command.
 
 See `canopy docs ci` for wiring push-to-main deploys.
 
+## Outbound hosts (egress)
+
+- `canopy egress list` — hosts the project's worker may `fetch` directly.
+- `canopy egress allow <host>` — allow a hostname (or `"*.sub.wildcard"`).
+- `canopy egress remove <host>` — remove an entry.
+
 ## Maintenance
 
 - `canopy upgrade` — update the CLI to the latest version. `--version <v>` pins a

package/dist/docs/porting-nextjs.md

@@ -167,8 +167,9 @@ Rules of the road for the worker:
 - **No filesystem, no long-lived state.** Persist through `canopy.db` and
   `canopy.blob`.
 - **Outbound requests are controlled.** Calls to external APIs pass through a
-  platform-managed egress allowlist — if your project needs to call an
-  external host, ask the platform team to allow it.
+  per-project egress allowlist — deny-by-default, managed by you. Allow the
+  hosts your worker calls with `canopy egress allow <host>` or in dashboard
+  Settings → Outbound hosts (see [Outbound requests](https://docs.canopy.website/platform/egress)).
 - Frontend calls are plain `fetch("/api/…")` — same origin, the platform
   session cookie rides along automatically.
 

package/dist/docs/troubleshooting.md

@@ -59,6 +59,24 @@ The project hit its daily AI budget cap. The cap is enforced before every AI
 call; it resets the next day, or a maintainer can raise the project's budget in
 the dashboard.
 
+## `egress_denied` (403)
+
+An outbound `fetch` from your worker was blocked by the platform's egress
+guard: `host <hostname> is not on the project allowlist`. Outbound requests
+are deny-by-default — only platform infrastructure and the hosts on your
+project's own allowlist get through. Add the host and retry (running workers
+pick the change up without a deploy):
+
+```bash
+canopy egress allow api.example.com
+```
+
+or use dashboard Settings → Outbound hosts. Details and entry rules:
+[Outbound requests](https://docs.canopy.website/platform/egress). Calls made through the SDK /
+`env.CANOPY.fetch` don't count as egress and are unaffected. On the Cloudflare
+target outbound requests are currently unrestricted, so this error only
+appears on GCP.
+
 ## Docs are stale
 
 `canopy docs` caches the platform's docs. Force a refresh:

package/dist/{docs-2cUEug69.mjs → docs-BwtpnE8W.mjs}

@@ -1,5 +1,7 @@
+import { t as version } from "./package-BjMP21nL.mjs";
 import { n as siteConfig } from "./site-BUlQR117.mjs";
-import { n as reportErrors } from "./ui-D8HxX0Ng.mjs";
+import { i as latestKnownVersion, r as compareSemver } from "./version-check-CcsA1QjI.mjs";
+import { n as reportErrors } from "./ui-CpdtK7mt.mjs";
 import { defineCommand } from "citty";
 import { existsSync, mkdirSync, readFileSync, readdirSync, writeFileSync } from "node:fs";
 import { homedir } from "node:os";
@@ -172,6 +174,8 @@ const docsCommand = defineCommand({
 	run: reportErrors("docs", async ({ args }) => {
 		const refresh = args.refresh;
 		const topic = args.topic;
+		const latest = latestKnownVersion();
+		if (latest && compareSemver(version, latest) < 0) console.error(`Note: these docs describe CLI ${latest}; you have ${version} — commands or flags they mention may not exist here. Run \`canopy upgrade\`.\n`);
 		if (!topic) {
 			const topics = await listTopics(refresh);
 			if (topics.length === 0) throw new Error("No docs available — check your connection, or reinstall the CLI.");

package/dist/egress-BkkG9Jzs.mjs

@@ -0,0 +1,88 @@
+import { a as projectDirArgs, c as resolveProject } from "./site-BUlQR117.mjs";
+import { c as apiRequest, n as reportErrors } from "./ui-CpdtK7mt.mjs";
+import { defineCommand } from "citty";
+//#region src/egress.ts
+/**
+* canopy egress — manage the project's outbound-host allowlist
+* (docs/16-egress-allowlist.md). Worker fetches to hosts outside the list are
+* denied (`egress_denied`) on targets that enforce egress control; the list
+* lives on the platform, not in canopy.json, so a repo file can never widen
+* egress silently on deploy.
+*/
+function printList({ hosts, denied, enforced }, slug) {
+	if (hosts.length === 0) console.log(`No extra egress hosts for ${slug} — the worker can reach platform hosts only.`);
+	else for (const host of hosts) console.log(host);
+	if (denied.length > 0) {
+		console.log(`\nRecently blocked (allow with \`canopy egress allow <host>\`):`);
+		for (const d of denied) console.log(`  ${d.host}  ×${d.count}  last ${d.last_seen}`);
+	}
+	if (!enforced) console.error("(note: this site's target does not enforce egress yet — the list is recorded for when it does)");
+}
+const egressCommand = defineCommand({
+	meta: {
+		name: "egress",
+		description: "Manage which outbound hosts the project's worker may fetch"
+	},
+	subCommands: {
+		list: defineCommand({
+			meta: {
+				name: "list",
+				description: "List the project's allowed outbound hosts"
+			},
+			args: { ...projectDirArgs },
+			run: reportErrors("egress list", async ({ args }) => {
+				const { slug } = resolveProject(args);
+				printList(await apiRequest("GET", `/projects/${slug}/egress`), slug);
+			})
+		}),
+		allow: defineCommand({
+			meta: {
+				name: "allow",
+				description: "Allow the worker to fetch a host (e.g. api.example.com or *.googleapis.com)"
+			},
+			args: {
+				host: {
+					type: "positional",
+					description: "Hostname to allow",
+					required: true
+				},
+				...projectDirArgs
+			},
+			run: reportErrors("egress allow", async ({ args }) => {
+				const { slug } = resolveProject(args);
+				const current = await apiRequest("GET", `/projects/${slug}/egress`);
+				const updated = await apiRequest("PUT", `/projects/${slug}/egress`, { hosts: [...current.hosts, args.host] });
+				console.log(`Allowed ${args.host} for ${slug} — running workers pick it up now.\n`);
+				printList(updated, slug);
+			})
+		}),
+		remove: defineCommand({
+			meta: {
+				name: "remove",
+				description: "Remove a host from the allowlist"
+			},
+			args: {
+				host: {
+					type: "positional",
+					description: "Hostname to remove",
+					required: true
+				},
+				...projectDirArgs
+			},
+			run: reportErrors("egress remove", async ({ args }) => {
+				const { slug } = resolveProject(args);
+				const current = await apiRequest("GET", `/projects/${slug}/egress`);
+				const wanted = args.host.trim().toLowerCase();
+				if (!current.hosts.includes(wanted)) {
+					console.error(`${wanted} is not on the allowlist for ${slug} (see \`canopy egress list\`).`);
+					process.exit(1);
+				}
+				const updated = await apiRequest("PUT", `/projects/${slug}/egress`, { hosts: current.hosts.filter((h) => h !== wanted) });
+				console.log(`Removed ${wanted} from ${slug} — running workers stop reaching it now.\n`);
+				printList(updated, slug);
+			})
+		})
+	}
+});
+//#endregion
+export { egressCommand };

package/dist/index.mjs

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
-import { t as version } from "./package-WhBa4V15.mjs";
+import { t as version } from "./package-BjMP21nL.mjs";
 import { r as siteHeaderLine, t as setInvocationProfile } from "./site-BUlQR117.mjs";
-import { i as runRefresh, r as notifyOfUpdate } from "./version-check-Cuh6HaLX.mjs";
+import { a as notifyOfUpdate, o as runRefresh } from "./version-check-CcsA1QjI.mjs";
 import { defineCommand, runMain } from "citty";
 //#region src/index.ts
 /**
@@ -73,26 +73,27 @@ const main = defineCommand({
 		description: "canopy — create and deploy vibecoded projects"
 	},
 	subCommands: {
-		login: () => import("./login-ByD0hcxu.mjs").then((m) => m.loginCommand),
-		whoami: () => import("./login-ByD0hcxu.mjs").then((m) => m.whoamiCommand),
-		logout: () => import("./login-ByD0hcxu.mjs").then((m) => m.logoutCommand),
-		create: () => import("./projects-CSH7KsPi.mjs").then((m) => m.createCommand),
-		init: () => import("./projects-CSH7KsPi.mjs").then((m) => m.initCommand),
-		projects: () => import("./projects-CSH7KsPi.mjs").then((m) => m.projectsCommand),
-		delete: () => import("./projects-CSH7KsPi.mjs").then((m) => m.deleteCommand),
-		dev: () => import("./dev-CvtoGFW0.mjs").then((m) => m.devCommand),
-		deploy: () => import("./deploy-BcczXlSQ.mjs").then((m) => m.deployCommand),
-		promote: () => import("./deploy-BcczXlSQ.mjs").then((m) => m.promoteCommand),
-		staging: () => import("./staging-9bvgl2B5.mjs").then((m) => m.stagingCommand),
-		rollback: () => import("./deploy-BcczXlSQ.mjs").then((m) => m.rollbackCommand),
-		download: () => import("./deploy-BcczXlSQ.mjs").then((m) => m.downloadCommand),
-		token: () => import("./token-nieJV1w7.mjs").then((m) => m.tokenCommand),
-		db: () => import("./db-BkUmbGgx.mjs").then((m) => m.dbCommand),
-		usage: () => import("./usage-qqPtkDtT.mjs").then((m) => m.usageCommand),
-		open: () => import("./open-DD9oa-Ho.mjs").then((m) => m.openCommand),
-		docs: () => import("./docs-2cUEug69.mjs").then((m) => m.docsCommand),
-		skill: () => import("./skill-Di9GQYYx.mjs").then((m) => m.skillCommand),
-		upgrade: () => import("./upgrade-CZwo05Tz.mjs").then((m) => m.upgradeCommand),
+		login: () => import("./login-C1x1l3qg.mjs").then((m) => m.loginCommand),
+		whoami: () => import("./login-C1x1l3qg.mjs").then((m) => m.whoamiCommand),
+		logout: () => import("./login-C1x1l3qg.mjs").then((m) => m.logoutCommand),
+		create: () => import("./projects-D2fDeWNU.mjs").then((m) => m.createCommand),
+		init: () => import("./projects-D2fDeWNU.mjs").then((m) => m.initCommand),
+		projects: () => import("./projects-D2fDeWNU.mjs").then((m) => m.projectsCommand),
+		delete: () => import("./projects-D2fDeWNU.mjs").then((m) => m.deleteCommand),
+		dev: () => import("./dev-D6Sy15Wv.mjs").then((m) => m.devCommand),
+		deploy: () => import("./deploy-ClioT9ZC.mjs").then((m) => m.deployCommand),
+		promote: () => import("./deploy-ClioT9ZC.mjs").then((m) => m.promoteCommand),
+		staging: () => import("./staging-95xeXyZN.mjs").then((m) => m.stagingCommand),
+		rollback: () => import("./deploy-ClioT9ZC.mjs").then((m) => m.rollbackCommand),
+		download: () => import("./deploy-ClioT9ZC.mjs").then((m) => m.downloadCommand),
+		token: () => import("./token-BjlqT2Xj.mjs").then((m) => m.tokenCommand),
+		egress: () => import("./egress-BkkG9Jzs.mjs").then((m) => m.egressCommand),
+		db: () => import("./db-D3RKaLVU.mjs").then((m) => m.dbCommand),
+		usage: () => import("./usage-wpew0a2M.mjs").then((m) => m.usageCommand),
+		open: () => import("./open-CLSh6oez.mjs").then((m) => m.openCommand),
+		docs: () => import("./docs-BwtpnE8W.mjs").then((m) => m.docsCommand),
+		skill: () => import("./skill-aTr-RQil.mjs").then((m) => m.skillCommand),
+		upgrade: () => import("./upgrade-Dl6DiMhL.mjs").then((m) => m.upgradeCommand),
 		logs: planned("logs", "Tail worker logs", "2")
 	}
 });

package/dist/{local-C47tmhl7.mjs → local-BHxSZwUT.mjs}

@@ -1,5 +1,5 @@
-import { o as apiDataRequest } from "./ui-D8HxX0Ng.mjs";
-import { n as rewriteApiPath } from "./dev-DvyKHe2d.mjs";
+import { o as apiDataRequest } from "./ui-CpdtK7mt.mjs";
+import { n as rewriteApiPath } from "./dev-BbAVZcAR.mjs";
 import { createRequire } from "node:module";
 import { existsSync, mkdirSync, readFileSync, readdirSync, rmSync, statSync, writeFileSync } from "node:fs";
 import { dirname, join, relative, sep } from "node:path";

package/dist/{login-ByD0hcxu.mjs → login-C1x1l3qg.mjs}

@@ -1,5 +1,5 @@
 import { _ as getBakedProfile, d as clearAllProfileTokens, f as listBakedProfiles, g as writeConfigFile, h as upsertProfileAuth, m as setActiveProfile, n as siteConfig, p as readConfigFile, v as isProfileId } from "./site-BUlQR117.mjs";
-import { n as reportErrors, t as openBrowser } from "./ui-D8HxX0Ng.mjs";
+import { n as reportErrors, t as openBrowser } from "./ui-CpdtK7mt.mjs";
 import { defineCommand } from "citty";
 import * as p from "@clack/prompts";
 import { createHash, randomBytes } from "node:crypto";

package/dist/{migrations-I1adj0z2.mjs → migrations-DpWHuqkQ.mjs}

@@ -1,5 +1,5 @@
 import { u as tryReadCanopyJson } from "./site-BUlQR117.mjs";
-import { o as apiDataRequest } from "./ui-D8HxX0Ng.mjs";
+import { o as apiDataRequest } from "./ui-CpdtK7mt.mjs";
 import { readFileSync, readdirSync } from "node:fs";
 import { join, resolve } from "node:path";
 //#region src/migrations.ts

package/dist/{open-DD9oa-Ho.mjs → open-CLSh6oez.mjs}

@@ -1,5 +1,5 @@
 import { a as projectDirArgs, c as resolveProject, l as stagingUrl, s as projectUrl } from "./site-BUlQR117.mjs";
-import { n as reportErrors, t as openBrowser } from "./ui-D8HxX0Ng.mjs";
+import { n as reportErrors, t as openBrowser } from "./ui-CpdtK7mt.mjs";
 import { defineCommand } from "citty";
 //#region src/open.ts
 /**

package/dist/{package-WhBa4V15.mjs → package-BjMP21nL.mjs}

@@ -1,4 +1,4 @@
 //#region package.json
-var version = "0.7.1";
+var version = "0.7.3";
 //#endregion
 export { version as t };

package/dist/{projects-CSH7KsPi.mjs → projects-D2fDeWNU.mjs}

@@ -1,5 +1,5 @@
 import { n as siteConfig, s as projectUrl, u as tryReadCanopyJson } from "./site-BUlQR117.mjs";
-import { c as apiRequest, i as unwrap, n as reportErrors, r as requireTty } from "./ui-D8HxX0Ng.mjs";
+import { c as apiRequest, i as unwrap, n as reportErrors, r as requireTty } from "./ui-CpdtK7mt.mjs";
 import { defineCommand } from "citty";
 import { existsSync, mkdirSync, readFileSync, readdirSync, writeFileSync } from "node:fs";
 import { join, relative, resolve, sep } from "node:path";

package/dist/{skill-Di9GQYYx.mjs → skill-aTr-RQil.mjs}

@@ -1,5 +1,5 @@
-import { t as version } from "./package-WhBa4V15.mjs";
-import { n as reportErrors } from "./ui-D8HxX0Ng.mjs";
+import { t as version } from "./package-BjMP21nL.mjs";
+import { n as reportErrors } from "./ui-CpdtK7mt.mjs";
 import { defineCommand } from "citty";
 import { cpSync, existsSync, mkdirSync, rmSync, symlinkSync, writeFileSync } from "node:fs";
 import { join, relative } from "node:path";

package/dist/{staging-9bvgl2B5.mjs → staging-95xeXyZN.mjs}

@@ -1,5 +1,5 @@
 import { c as resolveProject, l as stagingUrl, o as projectFlagArgs, s as projectUrl } from "./site-BUlQR117.mjs";
-import { c as apiRequest, i as unwrap, l as withContext, n as reportErrors, r as requireTty } from "./ui-D8HxX0Ng.mjs";
+import { c as apiRequest, i as unwrap, l as withContext, n as reportErrors, r as requireTty } from "./ui-CpdtK7mt.mjs";
 import { defineCommand } from "citty";
 import * as p from "@clack/prompts";
 //#region src/staging.ts

package/dist/{token-nieJV1w7.mjs → token-BjlqT2Xj.mjs}

@@ -1,5 +1,5 @@
 import { a as projectDirArgs, c as resolveProject, o as projectFlagArgs } from "./site-BUlQR117.mjs";
-import { c as apiRequest, n as reportErrors } from "./ui-D8HxX0Ng.mjs";
+import { c as apiRequest, n as reportErrors } from "./ui-CpdtK7mt.mjs";
 import { defineCommand } from "citty";
 const tokenCommand = defineCommand({
 	meta: {

package/dist/{ui-D8HxX0Ng.mjs → ui-CpdtK7mt.mjs}

@@ -93,6 +93,18 @@ const ERROR_COPY = {
 	version_not_found: {
 		why: "no deploy with that version exists for this project",
 		fix: "Run `canopy deploys` to list versions you can roll back to."
+	},
+	invalid_host: {
+		why: "that entry is not a plain hostname",
+		fix: "Use a bare hostname (api.example.com) or a subdomain wildcard (*.googleapis.com) — no IPs, ports, schemes or paths."
+	},
+	too_many_hosts: {
+		why: "the allowlist is at its 32-entry limit",
+		fix: "Remove hosts you no longer need (`canopy egress list` / `canopy egress remove`), or cover several subdomains with one *. wildcard."
+	},
+	worker_egress_sync_failed: {
+		why: "the list was saved but redeploying the running worker with it failed",
+		fix: "Retry, or redeploy the project (`canopy deploy`) to apply the new allowlist."
 	}
 };
 /** Generic explanation for a status code when we have no per-code copy. */
@@ -274,10 +286,46 @@ function formatCliError(name, err) {
 	}
 	return `canopy ${name}: ${err instanceof Error ? err.message : String(err)}`;
 }
+const kebab = (s) => s.replace(/[A-Z]/g, (c) => `-${c.toLowerCase()}`);
+const camel = (s) => s.replace(/-([a-z])/g, (_, c) => c.toUpperCase());
+/**
+* Reject flags a command does not declare. citty parses with strict: false, so
+* a misspelled or not-yet-released flag would otherwise be silently dropped —
+* on `deploy --staging` (pre-0.7) that meant deploying to the wrong channel.
+*/
+function assertKnownFlags(name, rawArgs, argDefs) {
+	const known = /* @__PURE__ */ new Set([
+		"help",
+		"h",
+		"version",
+		"profile"
+	]);
+	for (const [key, def] of Object.entries(argDefs)) {
+		if (def.type === "positional") continue;
+		known.add(key);
+		known.add(kebab(key));
+		known.add(camel(key));
+		const aliases = typeof def.alias === "string" ? [def.alias] : def.alias ?? [];
+		for (const a of aliases) known.add(a);
+		if (def.type === "boolean") {
+			known.add(`no-${key}`);
+			known.add(`no-${kebab(key)}`);
+		}
+	}
+	for (const token of rawArgs) {
+		if (token === "--") break;
+		if (!token.startsWith("-") || token === "-") continue;
+		const body = token.replace(/^--?/, "").split("=")[0] ?? "";
+		if (!body || /^\d/.test(body)) continue;
+		if (!known.has(body)) throw new Error(`Unknown flag --${body}. Run \`canopy ${name} --help\` to see supported flags — if the docs mention it, your CLI may be outdated (\`canopy upgrade\`).`);
+	}
+}
 /** Wrap a command action so failures print an actionable report and exit 1. */
 function reportErrors(name, action) {
 	return async (...args) => {
 		try {
+			const ctx = args[0];
+			if (ctx?.rawArgs && ctx.cmd?.args) assertKnownFlags(name, ctx.rawArgs, ctx.cmd.args);
 			await action(...args);
 		} catch (err) {
 			console.error(formatCliError(name, err));

package/dist/{upgrade-CZwo05Tz.mjs → upgrade-Dl6DiMhL.mjs}

@@ -1,5 +1,5 @@
-import { t as PACKAGE_NAME } from "./version-check-Cuh6HaLX.mjs";
-import { n as reportErrors } from "./ui-D8HxX0Ng.mjs";
+import { t as PACKAGE_NAME } from "./version-check-CcsA1QjI.mjs";
+import { n as reportErrors } from "./ui-CpdtK7mt.mjs";
 import { defineCommand } from "citty";
 import { spawn } from "node:child_process";
 import { fileURLToPath } from "node:url";
@@ -112,7 +112,7 @@ const upgradeCommand = defineCommand({
 		const spec = `${PACKAGE_NAME}@${args.version ?? "latest"}`;
 		const command = pmCommand(pm);
 		const cmd = installArgs(pm, spec);
-		const { skillInstalled } = await import("./skill-Di9GQYYx.mjs");
+		const { skillInstalled } = await import("./skill-aTr-RQil.mjs");
 		const refreshSkill = skillInstalled(process.cwd());
 		console.log(`Upgrading via ${command}: ${command} ${cmd.join(" ")}`);
 		await run(command, cmd);

package/dist/{usage-qqPtkDtT.mjs → usage-wpew0a2M.mjs}

@@ -1,5 +1,5 @@
 import { c as resolveProject, o as projectFlagArgs } from "./site-BUlQR117.mjs";
-import { c as apiRequest, l as withContext, n as reportErrors } from "./ui-D8HxX0Ng.mjs";
+import { c as apiRequest, l as withContext, n as reportErrors } from "./ui-CpdtK7mt.mjs";
 import { defineCommand } from "citty";
 //#region src/usage.ts
 /**

package/dist/{version-check-Cuh6HaLX.mjs → version-check-CcsA1QjI.mjs}

@@ -72,6 +72,10 @@ function writeCache(cache) {
 function disabled() {
 	return process.env["CANOPY_NO_UPDATE_CHECK"] === "1" || process.env["CI"] !== void 0 || !process.stderr.isTTY;
 }
+/** Latest version seen on the registry (from cache), if any. */
+function latestKnownVersion() {
+	return readCache()?.latest;
+}
 /**
 * Print an update hint from cache (if we're behind), then kick off a detached
 * background refresh when the cache is stale. Never throws, never blocks.
@@ -125,4 +129,4 @@ async function runRefresh() {
 	writeCache(cache);
 }
 //#endregion
-export { runRefresh as i, REFRESH_ENV as n, notifyOfUpdate as r, PACKAGE_NAME as t };
+export { notifyOfUpdate as a, latestKnownVersion as i, REFRESH_ENV as n, runRefresh as o, compareSemver as r, PACKAGE_NAME as t };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mediamonks/canopy-cli",
-  "version": "0.7.1",
+  "version": "0.7.3",
   "description": "Canopy CLI — create, develop and deploy Canopy projects.",
   "bin": {
     "canopy": "./dist/index.mjs"

package/dist/dev-CvtoGFW0.mjs

@@ -1,2 +0,0 @@
-import { t as devCommand } from "./dev-DvyKHe2d.mjs";
-export { devCommand };