@mediamonks/canopy-cli 0.7.26 → 0.7.28

package/dist/docs/cli-feedback.md

@@ -24,12 +24,15 @@ canopy feedback attach <id> ./after-fix.png --comment "fixed — see the shot"
 
 ## Subcommands
 
-Inbox commands resolve the project the usual way — `canopy.json` in the target
-directory, or `--project <slug>` — and require project membership. The
-item-scoped ones (`show`, `comment`, `status`, `attach`) also work with just
-the id from anywhere: report ids are unique across projects, so with no
-project context the item is looked up by id alone. `list` and `show` take
-`--json` for machine-readable output.
+Every report has a key made of its project and a number, like
+`my-project-17`. Inbox commands resolve the project the usual way —
+`canopy.json` in the target directory, or `--project <slug>` — and require
+project membership; inside the project you can refer to a report by its
+number alone (`canopy feedback show 17`). The item-scoped commands (`show`,
+`comment`, `status`, `attach`) also take the full key from anywhere, with no
+project context: the key names its project. Older ids from before keys
+existed still work wherever a key does. `list` and `show` take `--json` for
+machine-readable output.
 
 - `list [--status <s>] [--kind <k>]` — the project's inbox. Statuses:
   `investigate`, `investigated`, `accepted`, `in_progress`, `resolved`,

package/dist/docs/cli-index.md

@@ -7,7 +7,7 @@ Everything on Canopy is driven by one command-line tool: `canopy`. It scaffolds
 
 ## Install
 
-The CLI is published on npm as `@mediamonks/canopy-cli`. You need Node.js 20 or newer; then install it globally:
+The CLI is published on npm as `@mediamonks/canopy-cli`. You need Node.js 24 or newer; then install it globally:
 
 ```bash
 npm install -g @mediamonks/canopy-cli

package/dist/docs/getting-started.md

@@ -24,7 +24,7 @@ Confirm it's on your PATH:
 canopy --version
 ```
 
-If `npm` isn't available, install Node.js 20+ first (https://nodejs.org), then
+If `npm` isn't available, install Node.js 24+ first (https://nodejs.org), then
 re-run the install.
 
 ## 2. Sign in

package/dist/docs/platform-egress.md

@@ -112,6 +112,31 @@ Switching back is one command (`canopy egress mode allowlist`), and the
 dashboard offers to **seed the allowlist from the observed hosts** so
 tightening up later doesn't break the app.
 
+## Allowlisting Canopy on the other side
+
+Some external services only accept calls from IP addresses you register with
+them first — a partner API, a corporate database, a payment provider's
+allowlist. Projects hosted on **Google Cloud** (the `gcp-pilot` site,
+`canopy.monks.zone`) make every outbound request from a fixed pair of
+addresses, so you can hand them over:
+
+| Address          |
+| ---------------- |
+| `34.187.107.103` |
+| `34.158.168.43`  |
+
+Register **both**. Traffic may leave from either one, and the second gives the
+platform room to grow without asking you to update your allowlist. These
+addresses are shared by every project on that site, so registering them lets
+any Canopy project on Google Cloud reach the service — the other service's own
+authentication (API keys, tokens) still decides who gets in.
+
+The addresses are a platform commitment: they will not change without notice
+and a migration period. Projects hosted on Cloudflare have **no** fixed
+outbound address (requests leave from Cloudflare's shared edge), so if a
+service you depend on insists on IP allowlisting, run that project on the
+Google Cloud site.
+
 ## The outbound traffic log
 
 In both modes, the platform keeps a per-project log of the hosts the worker

package/dist/{docs-x3hMtUzT.mjs → docs-DMFMPnxG.mjs}

@@ -1,4 +1,4 @@
-import { t as version } from "./package-CBso2611.mjs";
+import { t as version } from "./package-BL6hRqtr.mjs";
 import { n as siteConfig } from "./site-DM2J10CB.mjs";
 import { i as latestKnownVersion, r as compareSemver } from "./version-check-CcsA1QjI.mjs";
 import { r as reportErrors } from "./ui-DR-siu2S.mjs";

package/dist/{feedback-C9m3dNkJ.mjs → feedback-OMAkwHpR.mjs}

@@ -1,4 +1,4 @@
-import { t as version } from "./package-CBso2611.mjs";
+import { t as version } from "./package-BL6hRqtr.mjs";
 import { a as projectDirArgs, c as resolveProject, d as tryResolveProject, n as siteConfig, u as tryReadCanopyJson } from "./site-DM2J10CB.mjs";
 import { c as apiDownload, l as apiRequest, r as reportErrors, t as formatDateTime, u as apiUpload } from "./ui-DR-siu2S.mjs";
 import { defineCommand } from "citty";
@@ -72,19 +72,38 @@ const jsonArg = { json: {
 	type: "boolean",
 	description: "Machine-readable JSON output"
 } };
+const UUID_RE = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
+const KEY_RE = /^([a-z][a-z0-9-]*)-(\d+)$/;
 /**
-* The project an item-scoped command targets: `--project` or canopy.json when
-* present, otherwise the API's ID-only lookup — item ids are globally unique,
-* so the item names its own project. That's the usual agent situation: holding
-* an id from a notification or a Slack thread, in a directory that isn't the
-* project.
+* The project slug a full key names (`kitchen-sink-17` → `kitchen-sink`), or
+* null for a UUID or a bare number. UUIDs are checked first: one whose last
+* group is all digits would otherwise look like a key.
 */
-async function resolveItemSlug(args, itemId) {
+function slugOfKey(ref) {
+	if (UUID_RE.test(ref)) return null;
+	return KEY_RE.exec(ref.toLowerCase())?.[1] ?? null;
+}
+/**
+* The project an item-scoped command targets. A full key names its own
+* project and wins over the directory — `canopy feedback show other-3` from
+* inside `sink` means other's report, not a miss on sink's. Otherwise
+* `--project` or canopy.json; and failing those, the API's project-less
+* lookup for a UUID from an old link. A bare number is only meaningful with a
+* project in hand.
+*/
+async function resolveItemSlug(args, ref) {
+	const fromKey = slugOfKey(ref);
+	if (fromKey) return fromKey;
 	const { slug } = tryResolveProject(args);
 	if (slug) return slug;
-	const { project } = await apiRequest("GET", `/feedback/${encodeURIComponent(itemId)}`);
+	if (/^\d+$/.test(ref)) throw new Error(`"${ref}" is a bare report number — run this inside the project, pass --project, or use the full key (e.g. my-project-${ref}).`);
+	const { project } = await apiRequest("GET", `/feedback/${encodeURIComponent(ref)}`);
 	return project.slug;
 }
+/** What a report is called in output: its key, or the UUID on pre-key rows. */
+function refOf(item) {
+	return item.key ?? item.id;
+}
 function firstLine(body) {
 	const line = body.split("\n")[0] ?? "";
 	return line.length > 72 ? `${line.slice(0, 71)}…` : line;
@@ -101,7 +120,7 @@ function printItems(items) {
 	for (const item of items) {
 		const comments = item.comment_count ? `  💬${item.comment_count}` : "";
 		const shots = item.attachment_count ? `  📎${item.attachment_count}` : "";
-		console.log(`${item.id}  ${item.status}  ${item.kind}  ${itemLabel(item)}${comments}${shots}`);
+		console.log(`${refOf(item)}  ${item.status}  ${item.kind}  ${itemLabel(item)}${comments}${shots}`);
 	}
 }
 const listCommand = defineCommand({
@@ -139,7 +158,7 @@ const showCommand = defineCommand({
 	args: {
 		id: {
 			type: "positional",
-			description: "Item id (from `canopy feedback list`)",
+			description: "Report key like my-project-17 (from `canopy feedback list`), or its number inside the project",
 			required: true
 		},
 		...projectDirArgs,
@@ -150,7 +169,8 @@ const showCommand = defineCommand({
 		}
 	},
 	run: reportErrors("feedback show", async ({ args }) => {
-		const { slug } = tryResolveProject(args);
+		const slug = slugOfKey(args.id) ?? tryResolveProject(args).slug;
+		if (!slug && /^\d+$/.test(args.id)) throw new Error(`"${args.id}" is a bare report number — run this inside the project, pass --project, or use the full key (e.g. my-project-${args.id}).`);
 		const detail = await apiRequest("GET", slug ? `/projects/${slug}/feedback/${encodeURIComponent(args.id)}` : `/feedback/${encodeURIComponent(args.id)}`);
 		if (args.json) {
 			console.log(JSON.stringify(detail, null, 2));
@@ -158,7 +178,7 @@ const showCommand = defineCommand({
 		}
 		const { item, comments } = detail;
 		if (item.title) console.log(item.title);
-		console.log(`${item.kind} · ${item.status} · via ${item.source} · ${formatDateTime(item.created_at)}`);
+		console.log(`${refOf(item)} · ${item.kind} · ${item.status} · via ${item.source} · ${formatDateTime(item.created_at)}`);
 		console.log(`reported by ${item.reporter_name || item.reporter_email || "unknown"}` + (item.deployment_id ? ` on ${item.deployment_id}` : "") + (item.channel === "staging" ? " (staging)" : ""));
 		console.log(`\n${item.body}\n`);
 		if (item.context) {
@@ -207,7 +227,7 @@ const commentCommand = defineCommand({
 	args: {
 		id: {
 			type: "positional",
-			description: "Item id",
+			description: "Report key (my-project-17), or its number inside the project",
 			required: true
 		},
 		text: {
@@ -237,7 +257,7 @@ const statusCommand = defineCommand({
 	args: {
 		id: {
 			type: "positional",
-			description: "Item id",
+			description: "Report key (my-project-17), or its number inside the project",
 			required: true
 		},
 		to: {
@@ -281,7 +301,7 @@ const mineCommand = defineCommand({
 			console.log("You haven't filed any reports.");
 			return;
 		}
-		for (const item of items) console.log(`${item.id}  ${item.status}  ${item.kind}  [${item.project_slug}]  ${itemLabel(item)}`);
+		for (const item of items) console.log(`${refOf(item)}  ${item.status}  ${item.kind}  [${item.project_slug}]  ${itemLabel(item)}`);
 	})
 });
 const reportCommand = defineCommand({
@@ -348,8 +368,8 @@ const reportCommand = defineCommand({
 			...args.status ? { status: args.status } : {},
 			context
 		});
-		console.log(`Filed ${kind} ${item.id} on ${item.project} as ${item.status}.`);
-		if (paths.length > 0) await attachFiles(item.project, item.id, paths, args.caption);
+		console.log(`Filed ${kind} ${item.key} on ${item.project} as ${item.status}.`);
+		if (paths.length > 0) await attachFiles(item.project, item.key, paths, args.caption);
 		console.log(`Follow it with \`canopy feedback mine\` or on the dashboard's Reports page.`);
 	})
 });
@@ -370,7 +390,7 @@ const feedbackCommand = defineCommand({
 			args: {
 				id: {
 					type: "positional",
-					description: "Item id",
+					description: "Report key (my-project-17), or its number inside the project",
 					required: true
 				},
 				file: {

package/dist/index.mjs

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { t as version } from "./package-CBso2611.mjs";
+import { t as version } from "./package-BL6hRqtr.mjs";
 import { r as siteHeaderLine, t as setInvocationProfile } from "./site-DM2J10CB.mjs";
 import { a as notifyOfUpdate, o as runRefresh } from "./version-check-CcsA1QjI.mjs";
 import { defineCommand, runMain } from "citty";
@@ -77,13 +77,13 @@ const main = defineCommand({
 		egress: () => import("./egress-Cn-P46O3.mjs").then((m) => m.egressCommand),
 		secrets: () => import("./secrets-BD3DaTih.mjs").then((m) => m.secretsCommand),
 		schedule: () => import("./schedule-Buu71RWQ.mjs").then((m) => m.scheduleCommand),
-		feedback: () => import("./feedback-C9m3dNkJ.mjs").then((m) => m.feedbackCommand),
+		feedback: () => import("./feedback-OMAkwHpR.mjs").then((m) => m.feedbackCommand),
 		db: () => import("./db-DVMwCLlU.mjs").then((m) => m.dbCommand),
 		usage: () => import("./usage-81JSiWIx.mjs").then((m) => m.usageCommand),
 		open: () => import("./open-rS1ARzOy.mjs").then((m) => m.openCommand),
-		docs: () => import("./docs-x3hMtUzT.mjs").then((m) => m.docsCommand),
-		skill: () => import("./skill-DmVlZXgv.mjs").then((m) => m.skillCommand),
-		upgrade: () => import("./upgrade-C7u8pxeV.mjs").then((m) => m.upgradeCommand),
+		docs: () => import("./docs-DMFMPnxG.mjs").then((m) => m.docsCommand),
+		skill: () => import("./skill-C83Za5BU.mjs").then((m) => m.skillCommand),
+		upgrade: () => import("./upgrade-BjQguwG6.mjs").then((m) => m.upgradeCommand),
 		logs: () => import("./logs-CfDINw7U.mjs").then((m) => m.logsCommand)
 	}
 });

package/dist/{package-CBso2611.mjs → package-BL6hRqtr.mjs}

@@ -1,4 +1,4 @@
 //#region package.json
-var version = "0.7.26";
+var version = "0.7.28";
 //#endregion
 export { version as t };

package/dist/skill/canopy/SKILL.md

@@ -30,7 +30,7 @@ canopy whoami      # is there a valid login?
   npm install -g @mediamonks/canopy-cli
   ```
 
-  (Needs Node.js 20+. If `npm` is missing, tell the user to install Node first.)
+  (Needs Node.js 24+. If `npm` is missing, tell the user to install Node first.)
 
 - **`canopy whoami` says not logged in / expired** → run:
   ```bash

package/dist/{skill-DmVlZXgv.mjs → skill-C83Za5BU.mjs}

@@ -1,4 +1,4 @@
-import { t as version } from "./package-CBso2611.mjs";
+import { t as version } from "./package-BL6hRqtr.mjs";
 import { r as reportErrors } from "./ui-DR-siu2S.mjs";
 import { defineCommand } from "citty";
 import { cpSync, existsSync, mkdirSync, rmSync, symlinkSync, writeFileSync } from "node:fs";

package/dist/templates/spa/.github/workflows/canopy-deploy.yml

@@ -18,10 +18,10 @@ jobs:
     env:
       CANOPY_DEPLOY_TOKEN: ${{ secrets.CANOPY_DEPLOY_TOKEN }}
     steps:
-      - uses: actions/checkout@v4
-      - uses: actions/setup-node@v4
+      - uses: actions/checkout@v7
+      - uses: actions/setup-node@v7
         with:
-          node-version: 22
+          node-version: 24
       - name: Install dependencies
         if: env.CANOPY_DEPLOY_TOKEN != ''
         run: |

package/dist/templates/worker/.github/workflows/canopy-deploy.yml

@@ -18,10 +18,10 @@ jobs:
     env:
       CANOPY_DEPLOY_TOKEN: ${{ secrets.CANOPY_DEPLOY_TOKEN }}
     steps:
-      - uses: actions/checkout@v4
-      - uses: actions/setup-node@v4
+      - uses: actions/checkout@v7
+      - uses: actions/setup-node@v7
         with:
-          node-version: 22
+          node-version: 24
       - name: Install dependencies
         if: env.CANOPY_DEPLOY_TOKEN != ''
         run: |

package/dist/{upgrade-C7u8pxeV.mjs → upgrade-BjQguwG6.mjs}

@@ -112,7 +112,7 @@ const upgradeCommand = defineCommand({
 		const spec = `${PACKAGE_NAME}@${args.version ?? "latest"}`;
 		const command = pmCommand(pm);
 		const cmd = installArgs(pm, spec);
-		const { skillInstalled } = await import("./skill-DmVlZXgv.mjs");
+		const { skillInstalled } = await import("./skill-C83Za5BU.mjs");
 		const { homedir } = await import("node:os");
 		const refreshGlobal = skillInstalled(homedir());
 		const refreshRepo = process.cwd() !== homedir() && skillInstalled(process.cwd());

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mediamonks/canopy-cli",
-  "version": "0.7.26",
+  "version": "0.7.28",
   "description": "Canopy CLI — create, develop and deploy Canopy projects.",
   "bin": {
     "canopy": "./dist/index.mjs"