@mediamonks/canopy-cli 0.7.27 → 0.7.28

package/dist/docs/cli-index.md

@@ -7,7 +7,7 @@ Everything on Canopy is driven by one command-line tool: `canopy`. It scaffolds
 
 ## Install
 
-The CLI is published on npm as `@mediamonks/canopy-cli`. You need Node.js 20 or newer; then install it globally:
+The CLI is published on npm as `@mediamonks/canopy-cli`. You need Node.js 24 or newer; then install it globally:
 
 ```bash
 npm install -g @mediamonks/canopy-cli

package/dist/docs/getting-started.md

@@ -24,7 +24,7 @@ Confirm it's on your PATH:
 canopy --version
 ```
 
-If `npm` isn't available, install Node.js 20+ first (https://nodejs.org), then
+If `npm` isn't available, install Node.js 24+ first (https://nodejs.org), then
 re-run the install.
 
 ## 2. Sign in

package/dist/docs/platform-egress.md

@@ -112,6 +112,31 @@ Switching back is one command (`canopy egress mode allowlist`), and the
 dashboard offers to **seed the allowlist from the observed hosts** so
 tightening up later doesn't break the app.
 
+## Allowlisting Canopy on the other side
+
+Some external services only accept calls from IP addresses you register with
+them first — a partner API, a corporate database, a payment provider's
+allowlist. Projects hosted on **Google Cloud** (the `gcp-pilot` site,
+`canopy.monks.zone`) make every outbound request from a fixed pair of
+addresses, so you can hand them over:
+
+| Address          |
+| ---------------- |
+| `34.187.107.103` |
+| `34.158.168.43`  |
+
+Register **both**. Traffic may leave from either one, and the second gives the
+platform room to grow without asking you to update your allowlist. These
+addresses are shared by every project on that site, so registering them lets
+any Canopy project on Google Cloud reach the service — the other service's own
+authentication (API keys, tokens) still decides who gets in.
+
+The addresses are a platform commitment: they will not change without notice
+and a migration period. Projects hosted on Cloudflare have **no** fixed
+outbound address (requests leave from Cloudflare's shared edge), so if a
+service you depend on insists on IP allowlisting, run that project on the
+Google Cloud site.
+
 ## The outbound traffic log
 
 In both modes, the platform keeps a per-project log of the hosts the worker

package/dist/{docs-CuS9nIXm.mjs → docs-DMFMPnxG.mjs}

@@ -1,4 +1,4 @@
-import { t as version } from "./package-CsmBH_fN.mjs";
+import { t as version } from "./package-BL6hRqtr.mjs";
 import { n as siteConfig } from "./site-DM2J10CB.mjs";
 import { i as latestKnownVersion, r as compareSemver } from "./version-check-CcsA1QjI.mjs";
 import { r as reportErrors } from "./ui-DR-siu2S.mjs";

package/dist/{feedback-DormOsQa.mjs → feedback-OMAkwHpR.mjs}

@@ -1,4 +1,4 @@
-import { t as version } from "./package-CsmBH_fN.mjs";
+import { t as version } from "./package-BL6hRqtr.mjs";
 import { a as projectDirArgs, c as resolveProject, d as tryResolveProject, n as siteConfig, u as tryReadCanopyJson } from "./site-DM2J10CB.mjs";
 import { c as apiDownload, l as apiRequest, r as reportErrors, t as formatDateTime, u as apiUpload } from "./ui-DR-siu2S.mjs";
 import { defineCommand } from "citty";

package/dist/index.mjs

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { t as version } from "./package-CsmBH_fN.mjs";
+import { t as version } from "./package-BL6hRqtr.mjs";
 import { r as siteHeaderLine, t as setInvocationProfile } from "./site-DM2J10CB.mjs";
 import { a as notifyOfUpdate, o as runRefresh } from "./version-check-CcsA1QjI.mjs";
 import { defineCommand, runMain } from "citty";
@@ -77,13 +77,13 @@ const main = defineCommand({
 		egress: () => import("./egress-Cn-P46O3.mjs").then((m) => m.egressCommand),
 		secrets: () => import("./secrets-BD3DaTih.mjs").then((m) => m.secretsCommand),
 		schedule: () => import("./schedule-Buu71RWQ.mjs").then((m) => m.scheduleCommand),
-		feedback: () => import("./feedback-DormOsQa.mjs").then((m) => m.feedbackCommand),
+		feedback: () => import("./feedback-OMAkwHpR.mjs").then((m) => m.feedbackCommand),
 		db: () => import("./db-DVMwCLlU.mjs").then((m) => m.dbCommand),
 		usage: () => import("./usage-81JSiWIx.mjs").then((m) => m.usageCommand),
 		open: () => import("./open-rS1ARzOy.mjs").then((m) => m.openCommand),
-		docs: () => import("./docs-CuS9nIXm.mjs").then((m) => m.docsCommand),
-		skill: () => import("./skill-DX18WOap.mjs").then((m) => m.skillCommand),
-		upgrade: () => import("./upgrade-PfdH0NPe.mjs").then((m) => m.upgradeCommand),
+		docs: () => import("./docs-DMFMPnxG.mjs").then((m) => m.docsCommand),
+		skill: () => import("./skill-C83Za5BU.mjs").then((m) => m.skillCommand),
+		upgrade: () => import("./upgrade-BjQguwG6.mjs").then((m) => m.upgradeCommand),
 		logs: () => import("./logs-CfDINw7U.mjs").then((m) => m.logsCommand)
 	}
 });

package/dist/{package-CsmBH_fN.mjs → package-BL6hRqtr.mjs}

@@ -1,4 +1,4 @@
 //#region package.json
-var version = "0.7.27";
+var version = "0.7.28";
 //#endregion
 export { version as t };

package/dist/skill/canopy/SKILL.md

@@ -30,7 +30,7 @@ canopy whoami      # is there a valid login?
   npm install -g @mediamonks/canopy-cli
   ```
 
-  (Needs Node.js 20+. If `npm` is missing, tell the user to install Node first.)
+  (Needs Node.js 24+. If `npm` is missing, tell the user to install Node first.)
 
 - **`canopy whoami` says not logged in / expired** → run:
   ```bash

package/dist/{skill-DX18WOap.mjs → skill-C83Za5BU.mjs}

@@ -1,4 +1,4 @@
-import { t as version } from "./package-CsmBH_fN.mjs";
+import { t as version } from "./package-BL6hRqtr.mjs";
 import { r as reportErrors } from "./ui-DR-siu2S.mjs";
 import { defineCommand } from "citty";
 import { cpSync, existsSync, mkdirSync, rmSync, symlinkSync, writeFileSync } from "node:fs";

package/dist/templates/spa/.github/workflows/canopy-deploy.yml

@@ -18,10 +18,10 @@ jobs:
     env:
       CANOPY_DEPLOY_TOKEN: ${{ secrets.CANOPY_DEPLOY_TOKEN }}
     steps:
-      - uses: actions/checkout@v4
-      - uses: actions/setup-node@v4
+      - uses: actions/checkout@v7
+      - uses: actions/setup-node@v7
         with:
-          node-version: 22
+          node-version: 24
       - name: Install dependencies
         if: env.CANOPY_DEPLOY_TOKEN != ''
         run: |

package/dist/templates/worker/.github/workflows/canopy-deploy.yml

@@ -18,10 +18,10 @@ jobs:
     env:
       CANOPY_DEPLOY_TOKEN: ${{ secrets.CANOPY_DEPLOY_TOKEN }}
     steps:
-      - uses: actions/checkout@v4
-      - uses: actions/setup-node@v4
+      - uses: actions/checkout@v7
+      - uses: actions/setup-node@v7
         with:
-          node-version: 22
+          node-version: 24
       - name: Install dependencies
         if: env.CANOPY_DEPLOY_TOKEN != ''
         run: |

package/dist/{upgrade-PfdH0NPe.mjs → upgrade-BjQguwG6.mjs}

@@ -112,7 +112,7 @@ const upgradeCommand = defineCommand({
 		const spec = `${PACKAGE_NAME}@${args.version ?? "latest"}`;
 		const command = pmCommand(pm);
 		const cmd = installArgs(pm, spec);
-		const { skillInstalled } = await import("./skill-DX18WOap.mjs");
+		const { skillInstalled } = await import("./skill-C83Za5BU.mjs");
 		const { homedir } = await import("node:os");
 		const refreshGlobal = skillInstalled(homedir());
 		const refreshRepo = process.cwd() !== homedir() && skillInstalled(process.cwd());

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mediamonks/canopy-cli",
-  "version": "0.7.27",
+  "version": "0.7.28",
   "description": "Canopy CLI — create, develop and deploy Canopy projects.",
   "bin": {
     "canopy": "./dist/index.mjs"