@mediamonks/canopy-cli 0.7.30 → 0.7.31

package/dist/{skill-CuES7kPj.mjs → skill-BWmXiJAz.mjs}

@@ -1,5 +1,5 @@
-import { t as version } from "./package-CnS450Yc.mjs";
-import { r as reportErrors } from "./ui-CeupNHNa.mjs";
+import { t as version } from "./package-CiKTWo0_.mjs";
+import { r as reportErrors } from "./ui-C_jSc1Kz.mjs";
 import { defineCommand } from "citty";
 import { cpSync, existsSync, mkdirSync, rmSync, symlinkSync, writeFileSync } from "node:fs";
 import { homedir } from "node:os";

package/dist/{src-C7zPhbxi.mjs → src-BkACMkol.mjs}

@@ -843,6 +843,19 @@ const IDENTITY_STAMP_HEADERS = [
 	"x-canopy-user-email",
 	"x-canopy-user-name"
 ];
+/**
+* Header the gateway attaches to a project tools call (`/__canopy/mcp`,
+* docs/49): the caller's agent token. A credential like the session cookie —
+* the host keeps it for `env.CANOPY.fetch` and redacts it from the bundle.
+* It travels in its own header because on Cloud Run `Authorization` carries
+* the Google ID token that let the gateway in.
+*/
+const AGENT_CREDENTIAL_HEADER = "x-canopy-agent-credential";
+/**
+* Gateway-stamped marker on a tools call: `agent`. Never a credential, but
+* only the gateway may set it — it strips client copies on every dispatch.
+*/
+const CALLER_HEADER = "x-canopy-caller";
 /** Cookies that authenticate to Canopy itself — the monk session and the client-page session. */
 const CANOPY_COOKIE_NAMES = /* @__PURE__ */ new Set(["canopy_session", "canopy_client"]);
 /**
@@ -874,6 +887,7 @@ function redactCanopyCredentials(headers) {
 		else headers.set("cookie", kept);
 	}
 	if (headers.get("authorization")?.startsWith("Bearer cnpy_")) headers.delete("authorization");
+	headers.delete(AGENT_CREDENTIAL_HEADER);
 	return headers;
 }
 /**
@@ -889,4 +903,4 @@ function stampWorkerHeaders(headers, ctx) {
 	return headers;
 }
 //#endregion
-export { META_COLUMNS as a, dbRouter as i, stampWorkerHeaders as n, blobRouter as o, realtimeRouter as r, redactCanopyCredentials as t };
+export { dbRouter as a, realtimeRouter as i, redactCanopyCredentials as n, META_COLUMNS as o, stampWorkerHeaders as r, blobRouter as s, CALLER_HEADER as t };

package/dist/{staging-D06zobnf.mjs → staging-BZVty57b.mjs}

@@ -1,5 +1,6 @@
 import { c as resolveProject, l as stagingUrl, o as projectFlagArgs, s as projectUrl } from "./site-DM2J10CB.mjs";
-import { a as unwrap, d as withContext, i as requireTty, l as apiRequest, r as reportErrors, t as formatDateTime } from "./ui-CeupNHNa.mjs";
+import { i as apiRequest, o as withContext } from "./api-C4rMhE7i.mjs";
+import { a as unwrap, i as requireTty, r as reportErrors, t as formatDateTime } from "./ui-C_jSc1Kz.mjs";
 import { defineCommand } from "citty";
 import * as p from "@clack/prompts";
 //#region src/staging.ts

package/dist/templates/spa/package.json

@@ -7,7 +7,7 @@
     "build": "tsc && vite build"
   },
   "dependencies": {
-    "@mediamonks/canopy": "^0.0.6",
+    "@mediamonks/canopy": "^0.0.11",
     "react": "^19.1.0",
     "react-dom": "^19.1.0"
   },

package/dist/templates/worker/package.json

@@ -7,7 +7,7 @@
     "build": "tsc && vite build"
   },
   "dependencies": {
-    "@mediamonks/canopy": "^0.0.6",
+    "@mediamonks/canopy": "^0.0.11",
     "hono": "^4.8.0",
     "react": "^19.1.0",
     "react-dom": "^19.1.0"

package/dist/templates/worker/worker/index.ts

@@ -53,6 +53,23 @@ app.get("/api/notes", async (c) => {
   return c.json({ notes });
 });
 
+// Let AI agents (Claude Code, Cursor…) use this backend as MCP tools, through
+// `canopy mcp serve`. They always act as the signed-in Monk running it. Route
+// tools wrap the routes above; uncomment to try it, then redeploy:
+//
+// import { mountMcpTools } from "@mediamonks/canopy/mcp";
+//
+// mountMcpTools(app, [
+//   {
+//     name: "list_notes",
+//     description: "List all notes in this project",
+//     route: "GET /api/notes",
+//     annotations: { readOnlyHint: true },
+//   },
+// ]);
+//
+// Guide: https://docs.canopy.website/guides/agent-tools
+
 export default {
   fetch: app.fetch.bind(app),
 

package/dist/{token-C_PFNqcv.mjs → token-HHlUR0CF.mjs}

@@ -1,5 +1,6 @@
 import { a as projectDirArgs, c as resolveProject, o as projectFlagArgs } from "./site-DM2J10CB.mjs";
-import { l as apiRequest, r as reportErrors, t as formatDateTime } from "./ui-CeupNHNa.mjs";
+import { i as apiRequest } from "./api-C4rMhE7i.mjs";
+import { r as reportErrors, t as formatDateTime } from "./ui-C_jSc1Kz.mjs";
 import { defineCommand } from "citty";
 const tokenCommand = defineCommand({
 	meta: {

package/dist/ui-C_jSc1Kz.mjs

@@ -0,0 +1,123 @@
+import { t as ApiError } from "./api-C4rMhE7i.mjs";
+import { spawn } from "node:child_process";
+import { cancel, isCancel } from "@clack/prompts";
+//#region src/ui.ts
+/**
+* Shared terminal UX plumbing: clack prompt unwrapping and uniform
+* command error reporting.
+*/
+/** Unwrap a clack prompt result, exiting cleanly when the user cancels (ctrl-c). */
+function unwrap(result) {
+	if (isCancel(result)) {
+		cancel("Aborted.");
+		process.exit(130);
+	}
+	return result;
+}
+/** Terminal width to wrap error copy to, bounded so it stays readable. */
+const TEXT_WIDTH = Math.min(process.stdout.columns || 80, 88);
+/** Render `  Label  text…`, wrapping and aligning continuation lines under the text. */
+function labeled(label, text) {
+	const lead = `  ${label}  `;
+	const indent = " ".repeat(lead.length);
+	const max = Math.max(TEXT_WIDTH - lead.length, 24);
+	const lines = [];
+	let line = "";
+	for (const word of text.split(/\s+/)) if (line && line.length + 1 + word.length > max) {
+		lines.push(line);
+		line = word;
+	} else line = line ? `${line} ${word}` : word;
+	if (line) lines.push(line);
+	return lines.map((l, i) => (i === 0 ? lead : indent) + l).join("\n");
+}
+/**
+* Compose a command failure. API failures get a three-part block — what we
+* tried (headline), why it failed, and how to fix it — everything else prints
+* as a single `canopy <name>: <message>` line.
+*/
+function formatCliError(name, err) {
+	if (err instanceof ApiError) {
+		const { headline, why, fix } = err.explain();
+		return [
+			`canopy ${name}: ${headline}`,
+			"",
+			labeled("Why", why),
+			labeled("Fix", fix),
+			""
+		].join("\n");
+	}
+	return `canopy ${name}: ${err instanceof Error ? err.message : String(err)}`;
+}
+const kebab = (s) => s.replace(/[A-Z]/g, (c) => `-${c.toLowerCase()}`);
+const camel = (s) => s.replace(/-([a-z])/g, (_, c) => c.toUpperCase());
+/**
+* Reject flags a command does not declare. citty parses with strict: false, so
+* a misspelled or not-yet-released flag would otherwise be silently dropped —
+* on `deploy --staging` (pre-0.7) that meant deploying to the wrong channel.
+*/
+function assertKnownFlags(name, rawArgs, argDefs) {
+	const known = /* @__PURE__ */ new Set([
+		"help",
+		"h",
+		"version",
+		"profile"
+	]);
+	for (const [key, def] of Object.entries(argDefs)) {
+		if (def.type === "positional") continue;
+		known.add(key);
+		known.add(kebab(key));
+		known.add(camel(key));
+		const aliases = typeof def.alias === "string" ? [def.alias] : def.alias ?? [];
+		for (const a of aliases) known.add(a);
+		if (def.type === "boolean") {
+			known.add(`no-${key}`);
+			known.add(`no-${kebab(key)}`);
+		}
+	}
+	for (const token of rawArgs) {
+		if (token === "--") break;
+		if (!token.startsWith("-") || token === "-") continue;
+		const body = token.replace(/^--?/, "").split("=")[0] ?? "";
+		if (!body || /^\d/.test(body)) continue;
+		if (!known.has(body)) throw new Error(`Unknown flag --${body}. Run \`canopy ${name} --help\` to see supported flags — if the docs mention it, your CLI may be outdated (\`canopy upgrade\`).`);
+	}
+}
+/** Wrap a command action so failures print an actionable report and exit 1. */
+function reportErrors(name, action) {
+	return async (...args) => {
+		try {
+			const ctx = args[0];
+			if (ctx?.rawArgs && ctx.cmd?.args) assertKnownFlags(name, ctx.rawArgs, ctx.cmd.args);
+			await action(...args);
+		} catch (err) {
+			console.error(formatCliError(name, err));
+			process.exit(1);
+		}
+	};
+}
+/** Guard interactive prompts: bail with a actionable message on non-TTY runs. */
+function requireTty(hint) {
+	if (!process.stdin.isTTY) throw new Error(`This needs an interactive terminal — ${hint}`);
+}
+/**
+* API timestamps are UTC — ISO with a Z suffix, though a lagging API site may
+* still send the bare "YYYY-MM-DD HH:MM:SS" form. Parse either as UTC and
+* render compact local wall-clock time ("2026-08-25 14:23").
+*/
+function formatDateTime(raw) {
+	const hasZone = /(?:Z|[+-]\d{2}:?\d{2})$/i.test(raw);
+	const date = new Date(hasZone ? raw : raw.replace(" ", "T") + "Z");
+	if (Number.isNaN(date.getTime())) return raw;
+	const pad = (n) => String(n).padStart(2, "0");
+	return `${date.getFullYear()}-${pad(date.getMonth() + 1)}-${pad(date.getDate())} ${pad(date.getHours())}:${pad(date.getMinutes())}`;
+}
+/** Open a URL in the default browser, fire-and-forget. */
+function openBrowser(url) {
+	spawn(process.platform === "darwin" ? "open" : process.platform === "win32" ? "start" : "xdg-open", [url], {
+		stdio: "ignore",
+		detached: true,
+		shell: process.platform === "win32"
+	}).on("error", () => {}).unref();
+}
+//#endregion
+export { unwrap as a, requireTty as i, openBrowser as n, reportErrors as r, formatDateTime as t };

package/dist/{upgrade-C8YdSKKd.mjs → upgrade-Cexs9KYX.mjs}

@@ -1,5 +1,5 @@
 import { t as PACKAGE_NAME } from "./version-check-CcsA1QjI.mjs";
-import { r as reportErrors } from "./ui-CeupNHNa.mjs";
+import { r as reportErrors } from "./ui-C_jSc1Kz.mjs";
 import { defineCommand } from "citty";
 import { spawn } from "node:child_process";
 import { fileURLToPath } from "node:url";
@@ -112,7 +112,7 @@ const upgradeCommand = defineCommand({
 		const spec = `${PACKAGE_NAME}@${args.version ?? "latest"}`;
 		const command = pmCommand(pm);
 		const cmd = installArgs(pm, spec);
-		const { skillInstalled } = await import("./skill-CuES7kPj.mjs");
+		const { skillInstalled } = await import("./skill-BWmXiJAz.mjs");
 		const { homedir } = await import("node:os");
 		const refreshGlobal = skillInstalled(homedir());
 		const refreshRepo = process.cwd() !== homedir() && skillInstalled(process.cwd());

package/dist/{usage-CV7TjTO8.mjs → usage-CUYrWxv0.mjs}

@@ -1,5 +1,6 @@
 import { c as resolveProject, o as projectFlagArgs } from "./site-DM2J10CB.mjs";
-import { d as withContext, l as apiRequest, r as reportErrors } from "./ui-CeupNHNa.mjs";
+import { i as apiRequest, o as withContext } from "./api-C4rMhE7i.mjs";
+import { r as reportErrors } from "./ui-C_jSc1Kz.mjs";
 import { defineCommand } from "citty";
 //#region src/usage.ts
 /**

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mediamonks/canopy-cli",
-  "version": "0.7.30",
+  "version": "0.7.31",
   "description": "Canopy CLI — create, develop and deploy Canopy projects.",
   "bin": {
     "canopy": "./dist/index.mjs"
@@ -16,11 +16,13 @@
   "dependencies": {
     "@clack/prompts": "^1.7.0",
     "@electric-sql/pglite": "^0.3.14",
+    "@modelcontextprotocol/client": "^2.3.1",
+    "@modelcontextprotocol/server": "^2.3.1",
     "citty": "^0.2.2",
     "esbuild": "^0.28.1",
     "hono": "^4.8.0",
     "vite-server": "npm:vite@^7",
-    "@mediamonks/canopy": "0.0.10",
+    "@mediamonks/canopy": "0.0.11",
     "@mediamonks/canopy-data-plane": "0.0.4"
   },
   "devDependencies": {

package/dist/dev-DGCu9MjB.mjs

@@ -1,2 +0,0 @@
-import { n as devCommand } from "./dev-JlzMZJow.mjs";
-export { devCommand };