@mediamonks/canopy-cli 0.7.16 → 0.7.18

package/dist/{db-DKnJQPm5.mjs → db-BAaqh_2O.mjs}

@@ -1,6 +1,6 @@
-import { c as resolveProject, o as projectFlagArgs } from "./site-BUlQR117.mjs";
-import { i as unwrap, n as reportErrors, o as apiDataRequest, r as requireTty, u as withContext } from "./ui-B1Px5y7q.mjs";
-import { n as migrateProject, r as readMigrationFiles, t as describeMigrateResult } from "./migrations-C6EcKD6a.mjs";
+import { c as resolveProject, o as projectFlagArgs } from "./site-BFaWfSVu.mjs";
+import { a as unwrap, d as withContext, i as requireTty, r as reportErrors, s as apiDataRequest } from "./ui-DLZNEen6.mjs";
+import { n as migrateProject, r as readMigrationFiles, t as describeMigrateResult } from "./migrations-kKKDlR_H.mjs";
 import { defineCommand } from "citty";
 import { readFileSync, writeFileSync } from "node:fs";
 import * as p from "@clack/prompts";

package/dist/{deploy-CnxJ4TE6.mjs → deploy-DID3xhMJ.mjs}

@@ -1,6 +1,6 @@
-import { a as projectDirArgs, c as resolveProject, l as stagingUrl, n as siteConfig, o as projectFlagArgs, s as projectUrl, u as tryReadCanopyJson } from "./site-BUlQR117.mjs";
-import { c as apiRequest, i as unwrap, n as reportErrors, o as apiDataRequest, s as apiDownload, u as withContext } from "./ui-B1Px5y7q.mjs";
-import { n as migrateProject, r as readMigrationFiles, t as describeMigrateResult } from "./migrations-C6EcKD6a.mjs";
+import { a as projectDirArgs, c as resolveProject, l as stagingUrl, n as siteConfig, o as projectFlagArgs, s as projectUrl, u as tryReadCanopyJson } from "./site-BFaWfSVu.mjs";
+import { a as unwrap, c as apiDownload, d as withContext, l as apiRequest, r as reportErrors, s as apiDataRequest, t as formatDateTime } from "./ui-DLZNEen6.mjs";
+import { n as migrateProject, r as readMigrationFiles, t as describeMigrateResult } from "./migrations-kKKDlR_H.mjs";
 import { defineCommand } from "citty";
 import { mkdtempSync, readFileSync, readdirSync, rmSync, statSync, writeFileSync } from "node:fs";
 import { tmpdir } from "node:os";
@@ -290,7 +290,7 @@ async function pickVersion(deploys, live, message, initial) {
 		message,
 		options: deploys.map((deploy) => ({
 			value: deploy.version,
-			label: `v${deploy.version}  ${deploy.created_at}  (${deploy.source})`,
+			label: `v${deploy.version}  ${formatDateTime(deploy.created_at)}  (${deploy.source})`,
 			hint: deploy.version === live ? "live" : void 0
 		})),
 		initialValue: initial

package/dist/dev-A2doKMCS.mjs

@@ -0,0 +1,2 @@
+import { t as devCommand } from "./dev-CjaomJ2D.mjs";
+export { devCommand };

package/dist/{dev-CyJT6EfQ.mjs → dev-CjaomJ2D.mjs}

@@ -1,6 +1,6 @@
-import { a as projectDirArgs, c as resolveProject, i as projectDialect, n as siteConfig, u as tryReadCanopyJson } from "./site-BUlQR117.mjs";
-import { a as ApiError, c as apiRequest, n as reportErrors, u as withContext } from "./ui-B1Px5y7q.mjs";
-import { r as readMigrationFiles } from "./migrations-C6EcKD6a.mjs";
+import { a as projectDirArgs, c as resolveProject, i as projectDialect, n as siteConfig, u as tryReadCanopyJson } from "./site-BFaWfSVu.mjs";
+import { d as withContext, l as apiRequest, o as ApiError, r as reportErrors, t as formatDateTime } from "./ui-DLZNEen6.mjs";
+import { r as readMigrationFiles } from "./migrations-kKKDlR_H.mjs";
 import { createRequire } from "node:module";
 import { defineCommand } from "citty";
 import { existsSync } from "node:fs";
@@ -160,12 +160,12 @@ async function devRemote(flags, slug) {
 	for (const note of worker?.notes ?? []) console.log(note);
 	console.log("");
 	server.printUrls();
-	console.log(`\n  Dev token expires ${expires_at} — restart canopy dev after that.`);
+	console.log(`\n  Dev token expires ${formatDateTime(expires_at)} — restart canopy dev after that.`);
 }
 async function devLocal(flags, slug) {
 	let dump;
 	if (flags.pull) {
-		const { fetchProjectDump } = await import("./local-BQxsp-ZQ.mjs");
+		const { fetchProjectDump } = await import("./local-dAQdVFEK.mjs");
 		console.log(`Pulling a fresh export of ${slug}${flags.staging ? " [staging]" : ""}…`);
 		dump = await fetchProjectDump(slug, flags.staging ? "staging" : "live");
 	}
@@ -180,7 +180,7 @@ async function devLocal(flags, slug) {
 		const reason = err instanceof ApiError ? err.explain().why : String(err);
 		console.log(`Note: ai/services will be unavailable — could not reach the platform (${reason}).`);
 	}
-	const { createSandbox } = await import("./local-BQxsp-ZQ.mjs");
+	const { createSandbox } = await import("./local-dAQdVFEK.mjs");
 	const sandbox = await createSandbox({
 		slug,
 		persistDir: join(flags.dir, ".canopy", "local"),

package/dist/docs/cli-feedback.md

@@ -24,10 +24,12 @@ canopy feedback attach <id> ./after-fix.png --comment "fixed — see the shot"
 
 ## Subcommands
 
-Inbox commands (`list`, `show`, `comment`, `status`) resolve the project the
-usual way — `canopy.json` in the target directory, or `--project <slug>` — and
-require project membership. `list` and `show` take `--json` for
-machine-readable output.
+Inbox commands resolve the project the usual way — `canopy.json` in the target
+directory, or `--project <slug>` — and require project membership. The
+item-scoped ones (`show`, `comment`, `status`, `attach`) also work with just
+the id from anywhere: report ids are unique across projects, so with no
+project context the item is looked up by id alone. `list` and `show` take
+`--json` for machine-readable output.
 
 - `list [--status <s>] [--kind <k>]` — the project's inbox. Statuses:
   `investigate`, `investigated`, `accepted`, `in_progress`, `resolved`,

package/dist/docs/cli-skill.md

@@ -1,32 +1,33 @@
 ---
 title: canopy skill
-description: Install the Canopy agent skill into a repo so coding agents know how to drive the platform.
+description: Install the Canopy agent skill so coding agents know how to drive the platform — globally by default, or into a repo.
 ---
 
-`canopy skill install` writes the Canopy agent skill into the current repository, teaching AI coding agents (Claude Code and others) how to use the platform: checking install and login state, creating vs. initializing projects, choosing templates, reading `canopy docs` before guessing, and treating `db restore`, `delete`, and deploys with appropriate care.
+`canopy skill install` writes the Canopy agent skill, teaching AI coding agents (Claude Code and others) how to use the platform: checking install and login state, creating vs. initializing projects, choosing templates, working feedback reports, reading `canopy docs` before guessing, and treating `db restore`, `delete`, and deploys with appropriate care.
 
 ## Usage
 
 ```bash
-canopy skill install
+canopy skill install          # global — applies in every repo (default)
+canopy skill install --repo   # into the current repo instead
 ```
 
 `install` is currently the only subcommand.
 
 ## Arguments & flags
 
-None — it always installs into the repository at the current working directory.
+- `--repo` — install into the repository at the current working directory instead of globally. Use this when you want the skill committed with a project so teammates and CI agents get it with the repo.
 
 ## How it works
 
-The skill files ship inside the CLI package, so installing needs no network. Two paths are written:
+The skill files ship inside the CLI package, so installing needs no network. Two paths are written — under your home directory by default, or under the repo with `--repo`:
 
 - `.agents/skills/canopy/` — the source of truth, in the tool-neutral `.agents/` tree so any agent tooling can read it (no vendor lock-in).
-- `.claude/skills/canopy` — a **symlink** to the `.agents/` copy, so Claude Code picks the skill up. Where symlinks aren't available (e.g. Windows without developer mode), the CLI falls back to a real copy and says so.
+- `.claude/skills/canopy` — a **symlink** to the `.agents/` copy, so Claude Code picks the skill up (the global install lands in `~/.claude/skills/`, Claude Code's user scope, so it applies in every repo). Where symlinks aren't available (e.g. Windows without developer mode), the CLI falls back to a real copy and says so.
 
-Installation is a clean replace: any existing skill directory is removed first, and the installed copy is stamped with the CLI version that wrote it. That stamp is how the skill stays fresh — [`canopy upgrade`](https://docs.canopy.website/cli/upgrade) detects an installed skill in the repo and re-runs `canopy skill install` with the new CLI, so the skill always matches the CLI version in use. If that auto-refresh ever fails, re-run `canopy skill install` yourself.
+Installation is a clean replace: any existing skill directory is removed first, and the installed copy is stamped with the CLI version that wrote it. That stamp is how the skill stays fresh — [`canopy upgrade`](https://docs.canopy.website/cli/upgrade) re-runs `canopy skill install` with the new CLI for the global copy and for a repo copy in the directory you upgrade from, so no stale install shadows a fresh one. If that auto-refresh ever fails, re-run `canopy skill install` yourself.
 
-Commit the `.agents/` directory (and the `.claude/` link) so teammates and CI agents get the skill with the repo.
+With `--repo`, commit the `.agents/` directory (and the `.claude/` link) so teammates and CI agents get the skill with the repo.
 
 ## Examples
 
@@ -34,6 +35,12 @@ Commit the `.agents/` directory (and the `.claude/` link) so teammates and CI ag
 canopy skill install
 ```
 
-From a repo root: installs the skill, prints where the files went and whether `.claude/skills/canopy` is a symlink or a copy, and suggests trying `canopy docs`.
+Installs the skill globally, prints where the files went and whether `.claude/skills/canopy` is a symlink or a copy, and suggests trying `canopy docs`.
+
+```bash
+canopy skill install --repo
+```
+
+From a repo root: same, but into this repository — commit the result.
 
 See also [canopy docs](https://docs.canopy.website/cli/docs) — the always-current documentation the skill points agents at — and [canopy upgrade](https://docs.canopy.website/cli/upgrade).

package/dist/docs/cli.md

@@ -83,4 +83,5 @@ See `canopy docs ci` for wiring push-to-main deploys.
   Upgrading also refreshes the installed Canopy agent skill.
 - `canopy docs [topic]` — list docs, or print one. `--refresh` re-fetches from
   the platform.
-- `canopy skill install` — (re)install the Canopy agent skill into this repo.
+- `canopy skill install` — (re)install the Canopy agent skill, globally by
+  default; `--repo` installs into the current repo instead.

package/dist/docs/index.json

@@ -77,6 +77,11 @@
           "title": "CLI command reference",
           "summary": "Every canopy command, its flags, and what it does."
         },
+        {
+          "slug": "notifications",
+          "title": "Slack notifications",
+          "summary": "Canopy DMs you about your reports and projects — replies, new reports, blocked fetches, budget hits, failing schedules."
+        },
         {
           "slug": "static-serving",
           "title": "How static files are served",
@@ -274,7 +279,7 @@
         {
           "slug": "cli-skill",
           "title": "canopy skill",
-          "summary": "Install the Canopy agent skill into a repo so coding agents know how to drive the platform."
+          "summary": "Install the Canopy agent skill so coding agents know how to drive the platform — globally by default, or into a repo."
         },
         {
           "slug": "cli-upgrade",

package/dist/docs/notifications.md

@@ -0,0 +1,44 @@
+---
+title: Slack notifications
+description: Canopy DMs you about your reports and projects — replies, new reports, blocked fetches, budget hits, failing schedules.
+---
+
+Canopy sends you Slack DMs when something on the platform needs your
+attention, so nothing waits in a dashboard tab you don't have open. There is
+nothing to install or link — if you're signed in to Canopy, the platform's
+Slack bot can already reach you.
+
+## What you get told about
+
+**Your reports.** File a bug or feedback report anywhere (the in-app widget
+or `canopy feedback report`) and you'll hear back: a DM when someone replies,
+and when the report's status changes. Everything about one report lands in a
+single Slack thread, so its history reads top to bottom.
+
+**Your projects' reports.** If you own or collaborate on a project, new
+reports and report activity on it DM you too — the triage side of the same
+loop.
+
+**Project events.** Things your project can't tell you itself:
+
+- A fetch to a **new host was blocked** by the egress policy — the usual
+  reason a feature "silently fails" after adding an external API. The DM
+  names the host; allow it on the Backend tab if it's legitimate.
+- The **daily AI budget ran out** — AI calls answer 429 until midnight UTC.
+- A **schedule started failing** (and a follow-up when it recovers).
+
+You're never notified about your own actions: your own deploys, comments,
+and status changes don't DM you. (There's an off-by-default "my own actions"
+toggle if you want them anyway.)
+
+## Tuning it
+
+Open **Notifications** under your avatar in the dashboard to switch any of
+the categories on or off. To silence one noisy project entirely, use **Mute
+project** on its Settings tab — personal to you, and your own reports
+elsewhere keep notifying.
+
+## If DMs don't arrive
+
+The bot finds you by your work email. If your Slack account uses a different
+address, the DMs can't reach you — ask the platform team.

package/dist/docs/platform-ai-usage.md

@@ -30,6 +30,17 @@ const reply = await canopy.ai.chat({
   URL and model list you can plug into ecosystem tools (like the Vercel AI
   SDK) — same key handling, same budget, same tracking.
 
+## Your data and the model providers
+
+> **Note:** The gateway only talks to trusted AI sources: our own Anthropic and OpenAI accounts, and Google
+> models through Vertex AI inside our own Google Cloud. Under those agreements, nothing you send is
+> shared with anyone else or used to train models. That makes AI usage through Canopy fine for
+> internal and client work alike — including confidential material.
+
+This applies to every way your project reaches AI — `canopy.ai.chat()`,
+streaming, and the OpenAI-compatible endpoint all go through the same gateway
+to the same accounts.
+
 ## The daily budget
 
 Every project has a daily AI budget in USD. When a project's spend for the

package/dist/docs/porting-nextjs.md

@@ -173,6 +173,31 @@ Rules of the road for the worker:
 - Frontend calls are plain `fetch("/api/…")` — same origin, the platform
   session cookie rides along automatically.
 
+### Fetching your own API from the worker
+
+Ported server code often calls the app's own routes with an absolute URL —
+`fetch(BASE_URL + "/api/…")` — because server-side fetch has no origin to
+resolve against. On Vercel that request loops through their edge; on Canopy a
+worker's fetch is a real outbound request, so it would normally hit the
+egress allowlist, and even an allowed hop would arrive without your session.
+
+The platform recognizes this shape and short-circuits it: a fetch to the
+project's **own hostname** (or to `localhost` on any port — the common
+`BASE_URL` fallback) with a path under `/api/` re-enters your worker directly,
+in-process. No network hop, no allowlist entry, and `env.USER` is the same
+caller who made the original request. Two things to know:
+
+- The loopback covers `/api/*` only. A self-fetch to any other path fails
+  like any other non-allowlisted host.
+- Routes fetching each other in a cycle are cut off after 8 hops with a
+  `self_fetch_loop` error, instead of hanging.
+
+Set `NEXT_PUBLIC_BASE_URL` (or whatever your helpers read) to the project's
+own origin so absolute URLs get built at all — an unset value that falls back
+to `http://localhost:3000` also works. Where a restructure is cheap, importing
+the shared function instead of fetching your own route is still the simpler
+pattern; the loopback exists so you don't have to.
+
 ## Step 4 — swap the data layer
 
 Replace the ORM and connection strings with the project's own database:

package/dist/docs/sdk-ai.md

@@ -5,8 +5,8 @@ description: Metered LLM access through the project's budget-capped gateway key
 
 `canopy.ai` gives your project LLM access without any API keys in your code.
 Every request authenticates as the project and is metered against a hard
-per-project daily budget — spend and limits are covered in
-[AI access & usage](https://docs.canopy.website/platform/ai-usage).
+per-project daily budget — spend, limits, and how prompts are handled by the
+model providers are covered in [AI access & usage](https://docs.canopy.website/platform/ai-usage).
 
 ## ai.chat(options)
 

package/dist/{docs-D7Ey1ZMQ.mjs → docs-DP_p_mmy.mjs}

@@ -1,7 +1,7 @@
-import { t as version } from "./package-BGDIsRxe.mjs";
-import { n as siteConfig } from "./site-BUlQR117.mjs";
+import { t as version } from "./package-x-_qF58q.mjs";
+import { n as siteConfig } from "./site-BFaWfSVu.mjs";
 import { i as latestKnownVersion, r as compareSemver } from "./version-check-CcsA1QjI.mjs";
-import { n as reportErrors } from "./ui-B1Px5y7q.mjs";
+import { r as reportErrors } from "./ui-DLZNEen6.mjs";
 import { defineCommand } from "citty";
 import { existsSync, mkdirSync, readFileSync, readdirSync, writeFileSync } from "node:fs";
 import { homedir } from "node:os";

package/dist/{egress-PJp0SZy2.mjs → egress-DDM-_7Yo.mjs}

@@ -1,5 +1,5 @@
-import { a as projectDirArgs, c as resolveProject } from "./site-BUlQR117.mjs";
-import { c as apiRequest, i as unwrap, n as reportErrors, r as requireTty } from "./ui-B1Px5y7q.mjs";
+import { a as projectDirArgs, c as resolveProject } from "./site-BFaWfSVu.mjs";
+import { a as unwrap, i as requireTty, l as apiRequest, r as reportErrors, t as formatDateTime } from "./ui-DLZNEen6.mjs";
 import { defineCommand } from "citty";
 import * as p from "@clack/prompts";
 //#region src/egress.ts
@@ -20,7 +20,7 @@ function printList({ mode, hosts, denied, enforced }, slug) {
 		console.log(`\nRecently blocked (allow with \`canopy egress allow <host>\`):`);
 		for (const d of denied) {
 			const why = d.reason === "rate_limited" ? "rate limited" : "blocked";
-			console.log(`  ${d.host}  ×${d.count}  ${why}, last ${d.last_seen}`);
+			console.log(`  ${d.host}  ×${d.count}  ${why}, last ${formatDateTime(d.last_seen)}`);
 		}
 	}
 	if (!enforced) console.error("(note: this site's target does not enforce egress yet — the policy is recorded for when it does)");
@@ -175,7 +175,7 @@ const egressCommand = defineCommand({
 					console.log(`No outbound traffic recorded for ${slug} yet.`);
 					return;
 				}
-				for (const v of visits) console.log(`${v.host}  ×${v.count}  last ${v.last_seen}`);
+				for (const v of visits) console.log(`${v.host}  ×${v.count}  last ${formatDateTime(v.last_seen)}`);
 			})
 		})
 	}

package/dist/{feedback-B0iX3iZ1.mjs → feedback-DX99gDFp.mjs}

@@ -1,6 +1,6 @@
-import { t as version } from "./package-BGDIsRxe.mjs";
-import { a as projectDirArgs, c as resolveProject, n as siteConfig, u as tryReadCanopyJson } from "./site-BUlQR117.mjs";
-import { c as apiRequest, l as apiUpload, n as reportErrors, s as apiDownload } from "./ui-B1Px5y7q.mjs";
+import { t as version } from "./package-x-_qF58q.mjs";
+import { a as projectDirArgs, c as resolveProject, d as tryResolveProject, n as siteConfig, u as tryReadCanopyJson } from "./site-BFaWfSVu.mjs";
+import { c as apiDownload, l as apiRequest, r as reportErrors, t as formatDateTime, u as apiUpload } from "./ui-DLZNEen6.mjs";
 import { defineCommand } from "citty";
 import { basename, extname, join } from "node:path";
 import { readFile, writeFile } from "node:fs/promises";
@@ -72,6 +72,19 @@ const jsonArg = { json: {
 	type: "boolean",
 	description: "Machine-readable JSON output"
 } };
+/**
+* The project an item-scoped command targets: `--project` or canopy.json when
+* present, otherwise the API's ID-only lookup — item ids are globally unique,
+* so the item names its own project. That's the usual agent situation: holding
+* an id from a notification or a Slack thread, in a directory that isn't the
+* project.
+*/
+async function resolveItemSlug(args, itemId) {
+	const { slug } = tryResolveProject(args);
+	if (slug) return slug;
+	const { project } = await apiRequest("GET", `/feedback/${encodeURIComponent(itemId)}`);
+	return project.slug;
+}
 function firstLine(body) {
 	const line = body.split("\n")[0] ?? "";
 	return line.length > 72 ? `${line.slice(0, 71)}…` : line;
@@ -133,14 +146,14 @@ const showCommand = defineCommand({
 		}
 	},
 	run: reportErrors("feedback show", async ({ args }) => {
-		const { slug } = resolveProject(args);
-		const detail = await apiRequest("GET", `/projects/${slug}/feedback/${encodeURIComponent(args.id)}`);
+		const { slug } = tryResolveProject(args);
+		const detail = await apiRequest("GET", slug ? `/projects/${slug}/feedback/${encodeURIComponent(args.id)}` : `/feedback/${encodeURIComponent(args.id)}`);
 		if (args.json) {
 			console.log(JSON.stringify(detail, null, 2));
 			return;
 		}
 		const { item, comments } = detail;
-		console.log(`${item.kind} · ${item.status} · via ${item.source} · ${item.created_at}`);
+		console.log(`${item.kind} · ${item.status} · via ${item.source} · ${formatDateTime(item.created_at)}`);
 		console.log(`reported by ${item.reporter_name || item.reporter_email || "unknown"}` + (item.deployment_id ? ` on ${item.deployment_id}` : "") + (item.channel === "staging" ? " (staging)" : ""));
 		console.log(`\n${item.body}\n`);
 		if (item.context) {
@@ -166,13 +179,13 @@ const showCommand = defineCommand({
 			const author = entry.author_name || entry.author_email || "unknown";
 			const move = entry.status_to ? `  [${entry.status_from} → ${entry.status_to}]` : "";
 			const internal = entry.internal ? "  [internal]" : "";
-			console.log(`--- ${author} · ${entry.created_at}${move}${internal}`);
+			console.log(`--- ${author} · ${formatDateTime(entry.created_at)}${move}${internal}`);
 			if (entry.body) console.log(entry.body);
 		}
 		if (args.download && shots.length > 0) {
 			console.log("");
 			for (const shot of shots) {
-				const bytes = await apiDownload(`/projects/${slug}/feedback/${encodeURIComponent(item.id)}/attachments/${shot.id}`);
+				const bytes = await apiDownload(`/projects/${detail.project.slug}/feedback/${encodeURIComponent(item.id)}/attachments/${shot.id}`);
 				const name = shot.filename ? `${shot.id}-${basename(shot.filename)}` : `${shot.id}.png`;
 				const target = join(args.download, name);
 				await writeFile(target, bytes);
@@ -204,8 +217,7 @@ const commentCommand = defineCommand({
 		...projectDirArgs
 	},
 	run: reportErrors("feedback comment", async ({ args }) => {
-		const { slug } = resolveProject(args);
-		await apiRequest("POST", `/projects/${slug}/feedback/${encodeURIComponent(args.id)}/comments`, {
+		await apiRequest("POST", `/projects/${await resolveItemSlug(args, args.id)}/feedback/${encodeURIComponent(args.id)}/comments`, {
 			body: args.text,
 			...args.internal ? { internal: true } : {}
 		});
@@ -235,8 +247,7 @@ const statusCommand = defineCommand({
 		...projectDirArgs
 	},
 	run: reportErrors("feedback status", async ({ args }) => {
-		const { slug } = resolveProject(args);
-		await apiRequest("POST", `/projects/${slug}/feedback/${encodeURIComponent(args.id)}/status`, {
+		await apiRequest("POST", `/projects/${await resolveItemSlug(args, args.id)}/feedback/${encodeURIComponent(args.id)}/status`, {
 			status: args.to,
 			...args.comment ? { comment: args.comment } : {}
 		});
@@ -381,7 +392,7 @@ const feedbackCommand = defineCommand({
 				...projectDirArgs
 			},
 			run: reportErrors("feedback attach", async ({ args }) => {
-				const { slug } = resolveProject(args);
+				const slug = await resolveItemSlug(args, args.id);
 				const paths = [args.file, ...attachedPaths(args.attach)];
 				for (const path of paths) await readFile(path);
 				if (args.internal && !args.comment) {

package/dist/index.mjs

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
-import { t as version } from "./package-BGDIsRxe.mjs";
-import { r as siteHeaderLine, t as setInvocationProfile } from "./site-BUlQR117.mjs";
+import { t as version } from "./package-x-_qF58q.mjs";
+import { r as siteHeaderLine, t as setInvocationProfile } from "./site-BFaWfSVu.mjs";
 import { a as notifyOfUpdate, o as runRefresh } from "./version-check-CcsA1QjI.mjs";
 import { defineCommand, runMain } from "citty";
 //#region src/index.ts
@@ -60,30 +60,30 @@ const main = defineCommand({
 		description: "canopy — create and deploy vibecoded projects"
 	},
 	subCommands: {
-		login: () => import("./login-BDTO3nVw.mjs").then((m) => m.loginCommand),
-		whoami: () => import("./login-BDTO3nVw.mjs").then((m) => m.whoamiCommand),
-		logout: () => import("./login-BDTO3nVw.mjs").then((m) => m.logoutCommand),
-		create: () => import("./projects-MMbv7MmK.mjs").then((m) => m.createCommand),
-		init: () => import("./projects-MMbv7MmK.mjs").then((m) => m.initCommand),
-		projects: () => import("./projects-MMbv7MmK.mjs").then((m) => m.projectsCommand),
-		delete: () => import("./projects-MMbv7MmK.mjs").then((m) => m.deleteCommand),
-		dev: () => import("./dev-BqLvttKc.mjs").then((m) => m.devCommand),
-		deploy: () => import("./deploy-CnxJ4TE6.mjs").then((m) => m.deployCommand),
-		promote: () => import("./deploy-CnxJ4TE6.mjs").then((m) => m.promoteCommand),
-		staging: () => import("./staging-D8G4amjO.mjs").then((m) => m.stagingCommand),
-		rollback: () => import("./deploy-CnxJ4TE6.mjs").then((m) => m.rollbackCommand),
-		download: () => import("./deploy-CnxJ4TE6.mjs").then((m) => m.downloadCommand),
-		token: () => import("./token-BUxgRJVA.mjs").then((m) => m.tokenCommand),
-		egress: () => import("./egress-PJp0SZy2.mjs").then((m) => m.egressCommand),
-		schedule: () => import("./schedule-Cq9K0rnE.mjs").then((m) => m.scheduleCommand),
-		feedback: () => import("./feedback-B0iX3iZ1.mjs").then((m) => m.feedbackCommand),
-		db: () => import("./db-DKnJQPm5.mjs").then((m) => m.dbCommand),
-		usage: () => import("./usage-DjNngyvy.mjs").then((m) => m.usageCommand),
-		open: () => import("./open-C5x3tX6I.mjs").then((m) => m.openCommand),
-		docs: () => import("./docs-D7Ey1ZMQ.mjs").then((m) => m.docsCommand),
-		skill: () => import("./skill-Be_pqqdH.mjs").then((m) => m.skillCommand),
-		upgrade: () => import("./upgrade-ChwehW_q.mjs").then((m) => m.upgradeCommand),
-		logs: () => import("./logs-C53y2eAS.mjs").then((m) => m.logsCommand)
+		login: () => import("./login-CU0pev0k.mjs").then((m) => m.loginCommand),
+		whoami: () => import("./login-CU0pev0k.mjs").then((m) => m.whoamiCommand),
+		logout: () => import("./login-CU0pev0k.mjs").then((m) => m.logoutCommand),
+		create: () => import("./projects-TE1PVwMy.mjs").then((m) => m.createCommand),
+		init: () => import("./projects-TE1PVwMy.mjs").then((m) => m.initCommand),
+		projects: () => import("./projects-TE1PVwMy.mjs").then((m) => m.projectsCommand),
+		delete: () => import("./projects-TE1PVwMy.mjs").then((m) => m.deleteCommand),
+		dev: () => import("./dev-A2doKMCS.mjs").then((m) => m.devCommand),
+		deploy: () => import("./deploy-DID3xhMJ.mjs").then((m) => m.deployCommand),
+		promote: () => import("./deploy-DID3xhMJ.mjs").then((m) => m.promoteCommand),
+		staging: () => import("./staging-Cw-Rzbsj.mjs").then((m) => m.stagingCommand),
+		rollback: () => import("./deploy-DID3xhMJ.mjs").then((m) => m.rollbackCommand),
+		download: () => import("./deploy-DID3xhMJ.mjs").then((m) => m.downloadCommand),
+		token: () => import("./token-BqxRIRkT.mjs").then((m) => m.tokenCommand),
+		egress: () => import("./egress-DDM-_7Yo.mjs").then((m) => m.egressCommand),
+		schedule: () => import("./schedule-Blldchmj.mjs").then((m) => m.scheduleCommand),
+		feedback: () => import("./feedback-DX99gDFp.mjs").then((m) => m.feedbackCommand),
+		db: () => import("./db-BAaqh_2O.mjs").then((m) => m.dbCommand),
+		usage: () => import("./usage-2cGnpSVc.mjs").then((m) => m.usageCommand),
+		open: () => import("./open-B5XHmEmv.mjs").then((m) => m.openCommand),
+		docs: () => import("./docs-DP_p_mmy.mjs").then((m) => m.docsCommand),
+		skill: () => import("./skill-CSFhZmBk.mjs").then((m) => m.skillCommand),
+		upgrade: () => import("./upgrade-DcU4YMr_.mjs").then((m) => m.upgradeCommand),
+		logs: () => import("./logs-D60VRbHZ.mjs").then((m) => m.logsCommand)
 	}
 });
 if (process.argv[2] !== "upgrade") notifyOfUpdate(version);

package/dist/{local-BQxsp-ZQ.mjs → local-dAQdVFEK.mjs}

@@ -1,6 +1,6 @@
-import { o as apiDataRequest } from "./ui-B1Px5y7q.mjs";
+import { s as apiDataRequest } from "./ui-DLZNEen6.mjs";
 import { n as META_COLUMNS, r as blobRouter, t as dbRouter } from "./src-Bu4Ze32I.mjs";
-import { n as rewriteApiPath } from "./dev-CyJT6EfQ.mjs";
+import { n as rewriteApiPath } from "./dev-CjaomJ2D.mjs";
 import { createRequire } from "node:module";
 import { existsSync, mkdirSync, readFileSync, readdirSync, rmSync, statSync, writeFileSync } from "node:fs";
 import { dirname, join, relative, sep } from "node:path";

package/dist/{login-BDTO3nVw.mjs → login-CU0pev0k.mjs}

@@ -1,5 +1,5 @@
-import { _ as getBakedProfile, d as clearAllProfileTokens, f as listBakedProfiles, g as writeConfigFile, h as upsertProfileAuth, m as setActiveProfile, n as siteConfig, p as readConfigFile, v as isProfileId } from "./site-BUlQR117.mjs";
-import { n as reportErrors, t as openBrowser } from "./ui-B1Px5y7q.mjs";
+import { _ as writeConfigFile, f as clearAllProfileTokens, g as upsertProfileAuth, h as setActiveProfile, m as readConfigFile, n as siteConfig, p as listBakedProfiles, v as getBakedProfile, y as isProfileId } from "./site-BFaWfSVu.mjs";
+import { n as openBrowser, r as reportErrors } from "./ui-DLZNEen6.mjs";
 import { defineCommand } from "citty";
 import * as p from "@clack/prompts";
 import { createHash, randomBytes } from "node:crypto";

package/dist/{logs-C53y2eAS.mjs → logs-D60VRbHZ.mjs}

@@ -1,5 +1,5 @@
-import { c as resolveProject, o as projectFlagArgs } from "./site-BUlQR117.mjs";
-import { c as apiRequest, n as reportErrors, u as withContext } from "./ui-B1Px5y7q.mjs";
+import { c as resolveProject, o as projectFlagArgs } from "./site-BFaWfSVu.mjs";
+import { d as withContext, l as apiRequest, r as reportErrors } from "./ui-DLZNEen6.mjs";
 import { defineCommand } from "citty";
 //#region src/logs.ts
 /**

package/dist/{migrations-C6EcKD6a.mjs → migrations-kKKDlR_H.mjs}

@@ -1,5 +1,5 @@
-import { u as tryReadCanopyJson } from "./site-BUlQR117.mjs";
-import { o as apiDataRequest } from "./ui-B1Px5y7q.mjs";
+import { u as tryReadCanopyJson } from "./site-BFaWfSVu.mjs";
+import { s as apiDataRequest } from "./ui-DLZNEen6.mjs";
 import { readFileSync, readdirSync } from "node:fs";
 import { join, resolve } from "node:path";
 //#region src/migrations.ts

package/dist/{open-C5x3tX6I.mjs → open-B5XHmEmv.mjs}

@@ -1,5 +1,5 @@
-import { a as projectDirArgs, c as resolveProject, l as stagingUrl, s as projectUrl } from "./site-BUlQR117.mjs";
-import { n as reportErrors, t as openBrowser } from "./ui-B1Px5y7q.mjs";
+import { a as projectDirArgs, c as resolveProject, l as stagingUrl, s as projectUrl } from "./site-BFaWfSVu.mjs";
+import { n as openBrowser, r as reportErrors } from "./ui-DLZNEen6.mjs";
 import { defineCommand } from "citty";
 //#region src/open.ts
 /**

package/dist/{package-BGDIsRxe.mjs → package-x-_qF58q.mjs}

@@ -1,4 +1,4 @@
 //#region package.json
-var version = "0.7.16";
+var version = "0.7.18";
 //#endregion
 export { version as t };

package/dist/{projects-MMbv7MmK.mjs → projects-TE1PVwMy.mjs}

@@ -1,5 +1,5 @@
-import { n as siteConfig, s as projectUrl, u as tryReadCanopyJson } from "./site-BUlQR117.mjs";
-import { c as apiRequest, i as unwrap, n as reportErrors, r as requireTty } from "./ui-B1Px5y7q.mjs";
+import { n as siteConfig, s as projectUrl, u as tryReadCanopyJson } from "./site-BFaWfSVu.mjs";
+import { a as unwrap, i as requireTty, l as apiRequest, r as reportErrors } from "./ui-DLZNEen6.mjs";
 import { defineCommand } from "citty";
 import { existsSync, mkdirSync, readFileSync, readdirSync, writeFileSync } from "node:fs";
 import { join, relative, resolve, sep } from "node:path";

package/dist/{schedule-Cq9K0rnE.mjs → schedule-Blldchmj.mjs}

@@ -1,5 +1,5 @@
-import { c as resolveProject, o as projectFlagArgs } from "./site-BUlQR117.mjs";
-import { c as apiRequest, n as reportErrors, u as withContext } from "./ui-B1Px5y7q.mjs";
+import { c as resolveProject, o as projectFlagArgs } from "./site-BFaWfSVu.mjs";
+import { d as withContext, l as apiRequest, r as reportErrors, t as formatDateTime } from "./ui-DLZNEen6.mjs";
 import { defineCommand } from "citty";
 //#region src/schedule.ts
 /**
@@ -13,7 +13,7 @@ function renderSchedules(schedules) {
 	const cronWidth = Math.max(...schedules.map((s) => s.cron.length));
 	return schedules.map((s) => {
 		const state = s.enabled ? "enabled " : "disabled";
-		const lastRun = s.last_run_at ? `last run ${s.last_run_at} ${s.last_status ?? ""}`.trimEnd() + (s.last_error ? ` (${s.last_error})` : "") : "never run";
+		const lastRun = s.last_run_at ? `last run ${formatDateTime(s.last_run_at)} ${s.last_status ?? ""}`.trimEnd() + (s.last_error ? ` (${s.last_error})` : "") : "never run";
 		return `${s.name.padEnd(nameWidth)}  ${s.cron.padEnd(cronWidth)}  ${state}  ${lastRun}`;
 	}).join("\n");
 }

package/dist/{site-BUlQR117.mjs → site-BFaWfSVu.mjs}

@@ -227,6 +227,19 @@ function resolveProject(args) {
 		slug: args.project ?? readCanopyJson(dir).slug
 	};
 }
+/**
+* Like resolveProject, but undefined instead of an error when nothing names a
+* project — for commands that have another way to find it (e.g. the feedback
+* item id names its own project).
+*/
+function tryResolveProject(args) {
+	const dir = resolve(args.dir ?? ".");
+	setProjectDirForPin(dir);
+	return {
+		dir,
+		slug: args.project ?? tryReadCanopyJson(dir)?.slug
+	};
+}
 //#endregion
 //#region src/site.ts
 /**
@@ -264,4 +277,4 @@ function siteHeaderLine(cliVersion) {
 	return `canopy ${cliVersion} · ${c.envOverride || !c.profileId ? c.apiUrl : `${c.profileId} (${c.projectDomain ?? new URL(c.apiUrl).hostname})`}`;
 }
 //#endregion
-export { getBakedProfile as _, projectDirArgs as a, resolveProject as c, clearAllProfileTokens as d, listBakedProfiles as f, writeConfigFile as g, upsertProfileAuth as h, projectDialect as i, stagingUrl as l, setActiveProfile as m, siteConfig as n, projectFlagArgs as o, readConfigFile as p, siteHeaderLine as r, projectUrl as s, setInvocationProfile as t, tryReadCanopyJson as u, isProfileId as v };
+export { writeConfigFile as _, projectDirArgs as a, resolveProject as c, tryResolveProject as d, clearAllProfileTokens as f, upsertProfileAuth as g, setActiveProfile as h, projectDialect as i, stagingUrl as l, readConfigFile as m, siteConfig as n, projectFlagArgs as o, listBakedProfiles as p, siteHeaderLine as r, projectUrl as s, setInvocationProfile as t, tryReadCanopyJson as u, getBakedProfile as v, isProfileId as y };

package/dist/skill/canopy/SKILL.md

@@ -4,8 +4,9 @@ description: >-
   Build, run, and deploy projects on Canopy — Monks' managed platform for
   vibecoded apps (hosting + database + blob storage + AI). Use this whenever the
   user wants to create a Canopy project, run/deploy one, manage its data or
-  deploy tokens, or asks how to use the `canopy` CLI. All platform docs are
-  available offline via `canopy docs`.
+  deploy tokens, work a project's feedback inbox (reports/issues/bugs filed by
+  users — look one up, investigate, fix, resolve), or asks how to use the
+  `canopy` CLI. All platform docs are available offline via `canopy docs`.
 ---
 
 # Canopy
@@ -98,9 +99,33 @@ and never go stale.
 - Open the live site: `canopy open`
 - Manage data: `canopy db pull | snapshot | snapshots | restore | migrate`
 - Work bug reports & feedback: `canopy feedback list | show | comment | status | report`
-  — see `canopy docs platform-feedback` for the triage and reporting loops
+  — see [Working feedback reports](#working-feedback-reports-issues) below
 - CI credentials: `canopy token create | list | revoke`
 
+## Working feedback reports (issues)
+
+Project members file bugs & feedback through the in-app widget; the CLI is how
+an agent works them. Report, issue, feedback item — same thing. Read
+`canopy docs platform-feedback` before triaging; it defines the loop. The
+short version:
+
+- `canopy feedback list --status investigate` shows what nobody has looked at;
+  `canopy feedback show <id>` has the body, captured context, and comment
+  trail. The context includes the deploy version that served the bug —
+  reproduce against that, not whatever is live now. The id is enough on its
+  own — `show`, `comment`, `status`, and `attach` work from any directory,
+  no `--project` needed.
+- Investigated ≠ fixed: write findings with
+  `canopy feedback status <id> investigated --comment "<root cause>"`.
+- **`accepted` means a person said "build this."** Never set it on your own —
+  only when the user you're working with says to build the thing.
+- Put tech-heavy notes (stack traces, table names, root-cause detail) in an
+  internal comment (`canopy feedback comment <id> "…" --internal`) so they
+  never reach the reporter.
+- Resolve only once the fix is actually live, and name the version:
+  `canopy feedback status <id> resolved --comment "fixed in v42"`. Attach
+  proof when it's visual: `canopy feedback attach <id> ./after-fix.png`.
+
 ## Custom tables & migrations (devs; Drizzle recommended)
 
 The document API (`canopy.db.collection(…)`) needs no schema — prefer it. When
@@ -130,7 +155,7 @@ for it only when the app is genuinely trivial** — a page or two with light SDK
 use. Its SDK is served untyped from the platform (`/_api/data/v1/sdk.js`): no
 autocomplete, no type-checking, mistakes only show up in the browser.
 
-Prefer **`spa`** the moment either is true — which covers most real projects:
+Prefer **`spa`** over **`static`** the moment either is true — which covers most real projects:
 
 - **You lean on the SDK** (`db` queries, `blob`, `ai` — anything past a stray
   `auth.user()`). `spa` installs the SDK from npm (`@mediamonks/canopy`), fully

package/dist/{skill-Be_pqqdH.mjs → skill-CSFhZmBk.mjs}

@@ -1,18 +1,23 @@
-import { t as version } from "./package-BGDIsRxe.mjs";
-import { n as reportErrors } from "./ui-B1Px5y7q.mjs";
+import { t as version } from "./package-x-_qF58q.mjs";
+import { r as reportErrors } from "./ui-DLZNEen6.mjs";
 import { defineCommand } from "citty";
 import { cpSync, existsSync, mkdirSync, rmSync, symlinkSync, writeFileSync } from "node:fs";
+import { homedir } from "node:os";
 import { join, relative } from "node:path";
 import { fileURLToPath } from "node:url";
 //#region src/skill.ts
 /**
-* canopy skill install — write the Canopy agent skill into the current repo.
+* canopy skill install — write the Canopy agent skill for coding agents.
 *
-* To avoid vendor lock-in the skill lives in the tool-neutral `.agents/skills/`
-* tree, and `.claude/skills/canopy` is a symlink to it (so Claude Code picks it
-* up while other agents can read `.agents/`). The skill files are bundled with
-* the CLI (dist/skill in the published package, packages/cli/skill in dev), so
-* `canopy upgrade` re-runs this to keep the installed skill in sync.
+* Installs globally by default (`~/.agents/skills/canopy`, with
+* `~/.claude/skills/canopy` symlinked to it — Claude Code's user scope, so the
+* skill applies in every repo). `--repo` writes the same layout into the
+* current repo instead, for teams that want the skill committed with a
+* project. To avoid vendor lock-in the skill lives in the tool-neutral
+* `.agents/skills/` tree either way, and `.claude` is only a symlink. The
+* skill files are bundled with the CLI (dist/skill in the published package,
+* packages/cli/skill in dev), so `canopy upgrade` re-runs this to keep every
+* existing install — global and repo — in sync.
 */
 const SKILL_NAME = "canopy";
 const AGENTS_REL = join(".agents", "skills", SKILL_NAME);
@@ -64,18 +69,24 @@ function skillInstalled(root) {
 const skillCommand = defineCommand({
 	meta: {
 		name: "skill",
-		description: "Manage the Canopy agent skill in this repo"
+		description: "Manage the Canopy agent skill"
 	},
 	subCommands: { install: () => defineCommand({
 		meta: {
 			name: "install",
-			description: "Install/refresh the Canopy skill (.agents + .claude)"
+			description: "Install/refresh the Canopy skill — global by default, --repo for this repo"
 		},
-		run: reportErrors("skill install", async () => {
-			const { claudeMode } = installSkill(process.cwd());
-			console.log(`Installed the Canopy skill (v${version}):`);
-			console.log(`  .agents/skills/${SKILL_NAME}/   (source of truth)`);
-			console.log(claudeMode === "symlink" ? `  .claude/skills/${SKILL_NAME}    → symlink to .agents` : `  .claude/skills/${SKILL_NAME}    (copy — symlinks unavailable here)`);
+		args: { repo: {
+			type: "boolean",
+			description: "Install into the current repo (.agents + .claude here) instead of globally"
+		} },
+		run: reportErrors("skill install", async ({ args }) => {
+			const { claudeMode } = installSkill(args.repo ? process.cwd() : homedir());
+			const where = args.repo ? "into this repo" : "globally (~)";
+			const prefix = args.repo ? "" : "~/";
+			console.log(`Installed the Canopy skill ${where} (v${version}):`);
+			console.log(`  ${prefix}.agents/skills/${SKILL_NAME}/   (source of truth)`);
+			console.log(claudeMode === "symlink" ? `  ${prefix}.claude/skills/${SKILL_NAME}    → symlink to .agents` : `  ${prefix}.claude/skills/${SKILL_NAME}    (copy — symlinks unavailable here)`);
 			console.log("\nYour agent can now use Canopy. Try: canopy docs");
 		})
 	}) }

package/dist/{staging-D8G4amjO.mjs → staging-Cw-Rzbsj.mjs}

@@ -1,5 +1,5 @@
-import { c as resolveProject, l as stagingUrl, o as projectFlagArgs, s as projectUrl } from "./site-BUlQR117.mjs";
-import { c as apiRequest, i as unwrap, n as reportErrors, r as requireTty, u as withContext } from "./ui-B1Px5y7q.mjs";
+import { c as resolveProject, l as stagingUrl, o as projectFlagArgs, s as projectUrl } from "./site-BFaWfSVu.mjs";
+import { a as unwrap, d as withContext, i as requireTty, l as apiRequest, r as reportErrors, t as formatDateTime } from "./ui-DLZNEen6.mjs";
 import { defineCommand } from "citty";
 import * as p from "@clack/prompts";
 //#region src/staging.ts
@@ -62,7 +62,7 @@ const stagingCommand = defineCommand({
 						message: "Version to serve on staging",
 						options: deploys.map((deploy) => ({
 							value: deploy.version,
-							label: `v${deploy.version}  ${deploy.created_at}  (${deploy.source})`,
+							label: `v${deploy.version}  ${formatDateTime(deploy.created_at)}  (${deploy.source})`,
 							hint: deploy.version === staged ? "staged" : deploy.version === live ? "live" : void 0
 						}))
 					}));

package/dist/{token-BUxgRJVA.mjs → token-BqxRIRkT.mjs}

@@ -1,5 +1,5 @@
-import { a as projectDirArgs, c as resolveProject, o as projectFlagArgs } from "./site-BUlQR117.mjs";
-import { c as apiRequest, n as reportErrors } from "./ui-B1Px5y7q.mjs";
+import { a as projectDirArgs, c as resolveProject, o as projectFlagArgs } from "./site-BFaWfSVu.mjs";
+import { l as apiRequest, r as reportErrors, t as formatDateTime } from "./ui-DLZNEen6.mjs";
 import { defineCommand } from "citty";
 const tokenCommand = defineCommand({
 	meta: {
@@ -42,7 +42,7 @@ const tokenCommand = defineCommand({
 					console.log(`No deploy tokens for ${slug} — create one with \`canopy token create\`.`);
 					return;
 				}
-				for (const t of tokens) console.log(`${t.id}  ${t.name ?? "(unnamed)"}  created ${t.created_at} by ${t.created_by ?? "?"}`);
+				for (const t of tokens) console.log(`${t.id}  ${t.name ?? "(unnamed)"}  created ${formatDateTime(t.created_at)} by ${t.created_by ?? "?"}`);
 			})
 		}),
 		revoke: defineCommand({

package/dist/{ui-B1Px5y7q.mjs → ui-DLZNEen6.mjs}

@@ -1,4 +1,4 @@
-import { n as siteConfig } from "./site-BUlQR117.mjs";
+import { n as siteConfig } from "./site-BFaWfSVu.mjs";
 import { spawn } from "node:child_process";
 import { cancel, isCancel } from "@clack/prompts";
 //#region src/api.ts
@@ -383,6 +383,18 @@ function reportErrors(name, action) {
 function requireTty(hint) {
 	if (!process.stdin.isTTY) throw new Error(`This needs an interactive terminal — ${hint}`);
 }
+/**
+* API timestamps are UTC — ISO with a Z suffix, though a lagging API site may
+* still send the bare "YYYY-MM-DD HH:MM:SS" form. Parse either as UTC and
+* render compact local wall-clock time ("2026-08-25 14:23").
+*/
+function formatDateTime(raw) {
+	const hasZone = /(?:Z|[+-]\d{2}:?\d{2})$/i.test(raw);
+	const date = new Date(hasZone ? raw : raw.replace(" ", "T") + "Z");
+	if (Number.isNaN(date.getTime())) return raw;
+	const pad = (n) => String(n).padStart(2, "0");
+	return `${date.getFullYear()}-${pad(date.getMonth() + 1)}-${pad(date.getDate())} ${pad(date.getHours())}:${pad(date.getMinutes())}`;
+}
 /** Open a URL in the default browser, fire-and-forget. */
 function openBrowser(url) {
 	spawn(process.platform === "darwin" ? "open" : process.platform === "win32" ? "start" : "xdg-open", [url], {
@@ -392,4 +404,4 @@ function openBrowser(url) {
 	}).on("error", () => {}).unref();
 }
 //#endregion
-export { ApiError as a, apiRequest as c, unwrap as i, apiUpload as l, reportErrors as n, apiDataRequest as o, requireTty as r, apiDownload as s, openBrowser as t, withContext as u };
+export { unwrap as a, apiDownload as c, withContext as d, requireTty as i, apiRequest as l, openBrowser as n, ApiError as o, reportErrors as r, apiDataRequest as s, formatDateTime as t, apiUpload as u };

package/dist/{upgrade-ChwehW_q.mjs → upgrade-DcU4YMr_.mjs}

@@ -1,5 +1,5 @@
 import { t as PACKAGE_NAME } from "./version-check-CcsA1QjI.mjs";
-import { n as reportErrors } from "./ui-B1Px5y7q.mjs";
+import { r as reportErrors } from "./ui-DLZNEen6.mjs";
 import { defineCommand } from "citty";
 import { spawn } from "node:child_process";
 import { fileURLToPath } from "node:url";
@@ -112,16 +112,27 @@ const upgradeCommand = defineCommand({
 		const spec = `${PACKAGE_NAME}@${args.version ?? "latest"}`;
 		const command = pmCommand(pm);
 		const cmd = installArgs(pm, spec);
-		const { skillInstalled } = await import("./skill-Be_pqqdH.mjs");
-		const refreshSkill = skillInstalled(process.cwd());
+		const { skillInstalled } = await import("./skill-CSFhZmBk.mjs");
+		const { homedir } = await import("node:os");
+		const refreshGlobal = skillInstalled(homedir());
+		const refreshRepo = process.cwd() !== homedir() && skillInstalled(process.cwd());
 		console.log(`Upgrading via ${command}: ${command} ${cmd.join(" ")}`);
 		await run(command, cmd);
 		console.log(`\nDone. Run \`canopy --version\` to confirm.`);
-		if (refreshSkill) {
+		const warnSkill = (label) => (err) => {
+			console.warn(`Could not auto-refresh the ${label} skill (${err instanceof Error ? err.message : String(err)}). Run \`canopy skill install\` yourself.`);
+		};
+		if (refreshGlobal) {
+			console.log("Refreshing the global Canopy agent skill…");
+			await run("canopy", ["skill", "install"]).catch(warnSkill("global"));
+		}
+		if (refreshRepo) {
 			console.log("Refreshing the Canopy agent skill in this repo…");
-			await run("canopy", ["skill", "install"]).catch((err) => {
-				console.warn(`Could not auto-refresh the skill (${err instanceof Error ? err.message : String(err)}). Run \`canopy skill install\` yourself.`);
-			});
+			await run("canopy", [
+				"skill",
+				"install",
+				"--repo"
+			]).catch(warnSkill("repo"));
 		}
 	})
 });

package/dist/{usage-DjNngyvy.mjs → usage-2cGnpSVc.mjs}

@@ -1,5 +1,5 @@
-import { c as resolveProject, o as projectFlagArgs } from "./site-BUlQR117.mjs";
-import { c as apiRequest, n as reportErrors, u as withContext } from "./ui-B1Px5y7q.mjs";
+import { c as resolveProject, o as projectFlagArgs } from "./site-BFaWfSVu.mjs";
+import { d as withContext, l as apiRequest, r as reportErrors } from "./ui-DLZNEen6.mjs";
 import { defineCommand } from "citty";
 //#region src/usage.ts
 /**

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mediamonks/canopy-cli",
-  "version": "0.7.16",
+  "version": "0.7.18",
   "description": "Canopy CLI — create, develop and deploy Canopy projects.",
   "bin": {
     "canopy": "./dist/index.mjs"

package/dist/dev-BqLvttKc.mjs

@@ -1,2 +0,0 @@
-import { t as devCommand } from "./dev-CyJT6EfQ.mjs";
-export { devCommand };