@mediamonks/canopy-cli 0.7.33 → 0.7.34

package/dist/browse-Dycwj0V_.mjs

@@ -0,0 +1,89 @@
+import { d as tryResolveProject, n as siteConfig } from "./site-DM2J10CB.mjs";
+import { i as apiRequest, t as ApiError } from "./api-C4rMhE7i.mjs";
+import { defineCommand } from "citty";
+//#region src/browse.ts
+/**
+* canopy browse — a one-time sign-in link to a project for an agent's
+* browser (agent-browse-sessions). Opening it within a minute gives that
+* browser an hour on this one project and channel, as the signed-in Monk;
+* nothing else on Canopy. The link is the only thing printed: no cookie, no
+* token, nothing written to disk, and no browser opened (that is `canopy open`).
+*/
+var BrowseError = class extends Error {
+	name = "BrowseError";
+};
+/** The control plane's refusal, in words that say what to do about it. */
+function explainBrowseRefusal(code, slug, detail) {
+	switch (code) {
+		case "members_only": return `${slug} is limited to its collaborators — ask the owner to add you.`;
+		case "project_not_found": return `There is no project ${slug} on this site — check the slug and --profile.`;
+		case "project_paused": return `${slug} is paused.`;
+		case "project_moved": return `${slug} has moved${detail ? ` (${detail})` : ""}.`;
+		case "staging_not_enabled": return `${slug} has no staging channel yet — drop --staging, or create it with \`canopy deploy --staging\`.`;
+		case "invalid_path": return "--path must be a page on the project, starting with / (for example /settings).";
+		case "cli_session_required": return "Browse links need your own CLI sign-in, not a deploy token — run `canopy login`.";
+		case "not_configured": return "This site has no public project hostnames, so it can't hand out browse links.";
+		default: return detail ? `${code}: ${detail}` : code;
+	}
+}
+const browseCommand = defineCommand({
+	meta: {
+		name: "browse",
+		description: "Print a one-time sign-in link to a project for an agent's browser"
+	},
+	args: {
+		slug: {
+			type: "positional",
+			description: "Project slug (defaults to canopy.json in the current directory)",
+			required: false
+		},
+		staging: {
+			type: "boolean",
+			default: false,
+			description: "Link to the staging channel instead of live"
+		},
+		path: {
+			type: "string",
+			description: "Page to land on after signing in (default /)"
+		},
+		json: {
+			type: "boolean",
+			default: false,
+			description: "Print only { url, expires_at } as JSON"
+		}
+	},
+	async run({ args }) {
+		try {
+			const slug = tryResolveProject({ project: args.slug }).slug;
+			if (!slug) throw new BrowseError("No project named — pass a slug (`canopy browse <slug>`) or run from a project directory.");
+			if (process.env["CANOPY_DEPLOY_TOKEN"]) throw new BrowseError("Browse links use your own sign-in, not a deploy token — unset CANOPY_DEPLOY_TOKEN and run `canopy login`.");
+			if (!siteConfig().token) throw new BrowseError("Not signed in to this site — run `canopy login` first.");
+			let link;
+			try {
+				link = await apiRequest("POST", `/projects/${slug}/browse-ticket`, {
+					channel: args.staging ? "staging" : "live",
+					...args.path !== void 0 && { path: args.path }
+				});
+			} catch (err) {
+				if (err instanceof ApiError && err.status !== 401) throw new BrowseError(explainBrowseRefusal(err.code, slug, err.detail));
+				throw err;
+			}
+			if (args.json) {
+				process.stdout.write(`${JSON.stringify({
+					url: link.url,
+					expires_at: link.expires_at
+				})}\n`);
+				return;
+			}
+			console.log(`\n  ${link.url}\n`);
+			console.log("  Open it within a minute; it works once. The browser that opens it is signed in to");
+			console.log(`  ${slug}${args.staging ? " (staging)" : ""} as you for an hour, and to nothing else on Canopy.\n`);
+		} catch (err) {
+			const message = err instanceof Error ? err.message : String(err);
+			process.stderr.write(`canopy browse: ${message}\n`);
+			process.exitCode = 1;
+		}
+	}
+});
+//#endregion
+export { browseCommand };

package/dist/{dev-CkhBnSlv.mjs → dev-CGSIY1-y.mjs}

@@ -2,7 +2,7 @@ import { a as projectDirArgs, c as resolveProject, i as projectDialect, n as sit
 import { i as apiRequest, o as withContext, t as ApiError } from "./api-C4rMhE7i.mjs";
 import { r as reportErrors, t as formatDateTime } from "./ui-C_jSc1Kz.mjs";
 import { r as readMigrationFiles } from "./migrations-Czlcddyz.mjs";
-import { r as stampWorkerHeaders } from "./src-BkACMkol.mjs";
+import { r as stampWorkerHeaders } from "./src-DE37PKho.mjs";
 import { n as writeDevServerRecord } from "./dev-server-file-Dk9pk4AR.mjs";
 import { createRequire } from "node:module";
 import { defineCommand } from "citty";
@@ -40,7 +40,7 @@ async function workerPlugin(flags, slug) {
 		console.log(`note: canopy.json points "worker" at ${entry}, which does not exist — skipping.`);
 		return;
 	}
-	const { missingSecretNames, readDevVars, workerDevPlugin } = await import("./dev-worker-CaCsGBkn.mjs");
+	const { missingSecretNames, readDevVars, workerDevPlugin } = await import("./dev-worker-JbLEXmVg.mjs");
 	const secrets = readDevVars(flags.dir);
 	const email = siteConfig().email;
 	const plugin = workerDevPlugin({
@@ -225,7 +225,7 @@ async function devRemote(flags, slug) {
 async function devLocal(flags, slug) {
 	let dump;
 	if (flags.pull) {
-		const { fetchProjectDump } = await import("./local-DAYCNUyz.mjs");
+		const { fetchProjectDump } = await import("./local-qR8CBseB.mjs");
 		console.log(`Pulling a fresh export of ${slug}${flags.staging ? " [staging]" : ""}…`);
 		dump = await fetchProjectDump(slug, flags.staging ? "staging" : "live");
 	}
@@ -240,7 +240,7 @@ async function devLocal(flags, slug) {
 		const reason = err instanceof ApiError ? err.explain().why : String(err);
 		console.log(`Note: ai/services will be unavailable — could not reach the platform (${reason}).`);
 	}
-	const { createSandbox } = await import("./local-DAYCNUyz.mjs");
+	const { createSandbox } = await import("./local-qR8CBseB.mjs");
 	const sandbox = await createSandbox({
 		slug,
 		persistDir: join(flags.dir, ".canopy", "local"),

package/dist/dev-DO6Eso4L.mjs

@@ -0,0 +1,2 @@
+import { n as devCommand } from "./dev-CGSIY1-y.mjs";
+export { devCommand };

package/dist/{dev-worker-CaCsGBkn.mjs → dev-worker-JbLEXmVg.mjs}

@@ -1,4 +1,4 @@
-import { n as redactCanopyCredentials, r as stampWorkerHeaders, t as CALLER_HEADER } from "./src-BkACMkol.mjs";
+import { n as redactCanopyCredentials, r as stampWorkerHeaders, t as CALLER_HEADER } from "./src-DE37PKho.mjs";
 import { readFileSync } from "node:fs";
 import { relative, resolve, sep } from "node:path";
 //#region src/dev-worker.ts

package/dist/docs/agent-browsing.md

@@ -0,0 +1,58 @@
+---
+title: Let your agent browse a project
+description: Give an AI agent's browser a short sign-in to one project, so it can look at and click through your app as you.
+---
+
+Coding agents often need to see the app they're working on: check that a page renders, click through a flow, or read what a screen shows. Every Canopy project sits behind the Monks sign-in, which an agent can't get through on its own.
+
+`canopy browse` gives the agent a way in that doesn't involve handing over your own browser session:
+
+```bash
+canopy browse my-app --json
+```
+
+It prints a one-time link. Whatever browser opens it is signed in to **my-app**, as you, for **an hour**, and to nothing else on Canopy.
+
+## What the agent gets
+
+- **One project, one channel.** The live site, or staging with `--staging`. The browser is not signed in to your other projects, or to the dashboard.
+- **You.** The app sees you as the visitor, exactly as when you open it yourself. Your backend's `env.USER` is you, and data you can see, the agent can see. On a collaborators-only project you have to be a collaborator.
+- **An hour.** After that the agent meets the sign-in page and can run `canopy browse` again.
+- **Marked as an agent.** Your backend can tell the request came from an agent: `mcpCaller(request, env).agent` from `@mediamonks/canopy/mcp` is `true`.
+
+The link itself works **once**, within **a minute**. Opening it a second time shows a page saying to run `canopy browse` again.
+
+## Using it from different tools
+
+**Playwright, or a browser tool in your agent:** open the URL. The browser is redirected to the page and stays signed in.
+
+```ts
+await page.goto(url); // lands on the project, signed in
+```
+
+**curl:** keep the cookie in a jar and follow the redirect.
+
+```bash
+curl -c jar.txt -L "$(canopy browse my-app --json | jq -r .url)"
+curl -b jar.txt https://my-app.canopy.website/api/notes
+```
+
+**A specific page:** `canopy browse my-app --path /settings` lands there directly.
+
+## Stopping it
+
+The agent's session ends when the hour is up. It also ends early if you:
+
+- run `canopy logout`,
+- revoke that CLI sign-in on your Account page in the dashboard, or
+- sign out everywhere.
+
+If you lose access to a collaborators-only project, the agent loses it too.
+
+## Good to know
+
+- Your project's backend needs a redeploy after this feature shipped before an agent can call its `/api/*` routes. Until then those calls answer "redeploy required", while pages still load.
+- The feedback widget doesn't appear for agents.
+- Never give an agent your own browser session cookie. It opens every project and the dashboard, as you.
+
+See also [canopy browse](https://docs.canopy.website/cli/browse), and [Agent tools](https://docs.canopy.website/guides/agent-tools) for letting agents call your backend directly.

package/dist/docs/cli-browse.md

@@ -0,0 +1,48 @@
+---
+title: canopy browse
+description: Print a one-time sign-in link that lets an agent's browser open a project as you.
+---
+
+`canopy browse` prints a link for an AI agent's browser: Playwright, a browser tool in Claude or Cursor, or plain `curl`. Opening the link signs that browser in to **one project**, as you, for **one hour**. It reaches nothing else on Canopy: no other projects, and not the dashboard.
+
+Read [Let your agent browse a project](https://docs.canopy.website/guides/agent-browsing) for the full picture.
+
+## Usage
+
+```bash
+canopy browse [slug] [--staging] [--path <page>] [--json]
+```
+
+## Arguments & flags
+
+- `[slug]` — the project. Defaults to the `canopy.json` in the current directory.
+- `--staging` — link to the project's [staging channel](https://docs.canopy.website/guides/staging) instead of the live site.
+- `--path <page>` — the page to land on after signing in, such as `/settings`. Defaults to `/`.
+- `--json` — print only `{ "url", "expires_at" }`, for an agent to read.
+
+The site comes from the active profile, as for every command (`--profile staging` links to the project on the staging site).
+
+## How it works
+
+The command uses your `canopy login` sign-in to ask Canopy for a link to the project, under the same rules as opening it yourself. Collaborators-only projects only give links to collaborators.
+
+- The link **works once** and **expires after a minute**. Run the command again for a new one.
+- The browser that opens it is signed in to that project and channel for an hour. After that it sees the sign-in page again.
+- Running `canopy logout`, revoking the CLI sign-in on your Account page, or signing out everywhere also signs the agent out.
+- The command never opens a browser itself (that's [canopy open](https://docs.canopy.website/cli/open)), never prints a cookie, and saves nothing.
+
+## Examples
+
+```bash
+canopy browse my-app --json
+```
+
+Prints `{"url":"https://my-app.…/__canopy/agent-login?ticket=…","expires_at":"…"}`. Hand the URL to your agent's browser.
+
+```bash
+canopy browse --staging --path /admin
+```
+
+A link to the staging channel of the project in this folder, landing on `/admin`.
+
+See also [canopy mcp](https://docs.canopy.website/cli/mcp), which lets agents call your project's backend as tools instead of using its pages.

package/dist/docs/index.json

@@ -77,6 +77,11 @@
           "title": "Agent tools (MCP)",
           "summary": "Let AI agents like Claude Code and Cursor use your project's backend as tools — as the person running them."
         },
+        {
+          "slug": "agent-browsing",
+          "title": "Let your agent browse a project",
+          "summary": "Give an AI agent's browser a short sign-in to one project, so it can look at and click through your app as you."
+        },
         {
           "slug": "porting-nextjs",
           "title": "Porting a Next.js app",
@@ -311,6 +316,11 @@
           "title": "canopy open",
           "summary": "Open the deployed project in your browser."
         },
+        {
+          "slug": "cli-browse",
+          "title": "canopy browse",
+          "summary": "Print a one-time sign-in link that lets an agent's browser open a project as you."
+        },
         {
           "slug": "cli-docs",
           "title": "canopy docs",

package/dist/{docs-BP5jmD10.mjs → docs-Cdoh5sMW.mjs}

@@ -1,4 +1,4 @@
-import { t as version } from "./package-CQIPmdcO.mjs";
+import { t as version } from "./package-Doigafvd.mjs";
 import { n as siteConfig } from "./site-DM2J10CB.mjs";
 import { i as latestKnownVersion, r as compareSemver } from "./version-check-CcsA1QjI.mjs";
 import { r as reportErrors } from "./ui-C_jSc1Kz.mjs";

package/dist/{feedback-5oPSxAz0.mjs → feedback-vvysW6iw.mjs}

@@ -1,4 +1,4 @@
-import { t as version } from "./package-CQIPmdcO.mjs";
+import { t as version } from "./package-Doigafvd.mjs";
 import { a as projectDirArgs, c as resolveProject, d as tryResolveProject, n as siteConfig, u as tryReadCanopyJson } from "./site-DM2J10CB.mjs";
 import { a as apiUpload, i as apiRequest, r as apiDownload } from "./api-C4rMhE7i.mjs";
 import { r as reportErrors, t as formatDateTime } from "./ui-C_jSc1Kz.mjs";

package/dist/index.mjs

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { t as version } from "./package-CQIPmdcO.mjs";
+import { t as version } from "./package-Doigafvd.mjs";
 import { r as siteHeaderLine, t as setInvocationProfile } from "./site-DM2J10CB.mjs";
 import { a as notifyOfUpdate, o as runRefresh } from "./version-check-CcsA1QjI.mjs";
 import { defineCommand, runMain } from "citty";
@@ -20,6 +20,7 @@ import { defineCommand, runMain } from "citty";
 *   ai models             the site's AI models and auto/* aliases
 *   mcp add|serve         a project's tools for AI agents (docs/49)
 *   open                  open the deployed project / dashboard   [phase 1]
+*   browse                one-time sign-in link for an agent's browser
 */
 if (process.env["CANOPY_UPDATE_REFRESH"] === "1") {
 	await runRefresh();
@@ -69,7 +70,7 @@ const main = defineCommand({
 		init: () => import("./projects-DQAhCZm8.mjs").then((m) => m.initCommand),
 		projects: () => import("./projects-DQAhCZm8.mjs").then((m) => m.projectsCommand),
 		delete: () => import("./projects-DQAhCZm8.mjs").then((m) => m.deleteCommand),
-		dev: () => import("./dev-MoHHjQh1.mjs").then((m) => m.devCommand),
+		dev: () => import("./dev-DO6Eso4L.mjs").then((m) => m.devCommand),
 		deploy: () => import("./deploy-Ka2lHkyy.mjs").then((m) => m.deployCommand),
 		promote: () => import("./deploy-Ka2lHkyy.mjs").then((m) => m.promoteCommand),
 		staging: () => import("./staging-BZVty57b.mjs").then((m) => m.stagingCommand),
@@ -79,16 +80,17 @@ const main = defineCommand({
 		egress: () => import("./egress-If_Gsx_M.mjs").then((m) => m.egressCommand),
 		secrets: () => import("./secrets-BSEjZnxg.mjs").then((m) => m.secretsCommand),
 		schedule: () => import("./schedule-C5lMf3ny.mjs").then((m) => m.scheduleCommand),
-		feedback: () => import("./feedback-5oPSxAz0.mjs").then((m) => m.feedbackCommand),
+		feedback: () => import("./feedback-vvysW6iw.mjs").then((m) => m.feedbackCommand),
 		db: () => import("./db-BB6O6085.mjs").then((m) => m.dbCommand),
 		usage: () => import("./usage-CUYrWxv0.mjs").then((m) => m.usageCommand),
 		ai: () => import("./ai-DHLnyqfq.mjs").then((m) => m.aiCommand),
 		open: () => import("./open-DcaQKi1v.mjs").then((m) => m.openCommand),
-		docs: () => import("./docs-BP5jmD10.mjs").then((m) => m.docsCommand),
-		skill: () => import("./skill-Dg7dQF0k.mjs").then((m) => m.skillCommand),
-		upgrade: () => import("./upgrade-huJDjhrV.mjs").then((m) => m.upgradeCommand),
+		browse: () => import("./browse-Dycwj0V_.mjs").then((m) => m.browseCommand),
+		docs: () => import("./docs-Cdoh5sMW.mjs").then((m) => m.docsCommand),
+		skill: () => import("./skill-DfSAZ2cW.mjs").then((m) => m.skillCommand),
+		upgrade: () => import("./upgrade-DCQ3NzoL.mjs").then((m) => m.upgradeCommand),
 		logs: () => import("./logs-DQQOawOG.mjs").then((m) => m.logsCommand),
-		mcp: () => import("./mcp-DXfTYVN_.mjs").then((m) => m.mcpCommand),
+		mcp: () => import("./mcp-OR_ashGC.mjs").then((m) => m.mcpCommand),
 		repo: () => import("./repo-1RQ1vBMv.mjs").then((m) => m.repoCommand)
 	}
 });

package/dist/{local-DAYCNUyz.mjs → local-qR8CBseB.mjs}

@@ -1,6 +1,6 @@
 import { n as apiDataRequest } from "./api-C4rMhE7i.mjs";
-import { a as dbRouter, i as realtimeRouter, o as META_COLUMNS, s as blobRouter } from "./src-BkACMkol.mjs";
-import { i as rewriteApiPath } from "./dev-CkhBnSlv.mjs";
+import { a as dbRouter, i as realtimeRouter, o as META_COLUMNS, s as blobRouter } from "./src-DE37PKho.mjs";
+import { i as rewriteApiPath } from "./dev-CGSIY1-y.mjs";
 import { createRequire } from "node:module";
 import { existsSync, mkdirSync, readFileSync, readdirSync, rmSync, statSync, writeFileSync } from "node:fs";
 import { dirname, join, relative, sep } from "node:path";

package/dist/{mcp-DXfTYVN_.mjs → mcp-OR_ashGC.mjs}

@@ -1,4 +1,4 @@
-import { t as version } from "./package-CQIPmdcO.mjs";
+import { t as version } from "./package-Doigafvd.mjs";
 import { d as tryResolveProject, l as stagingUrl, n as siteConfig, s as projectUrl } from "./site-DM2J10CB.mjs";
 import { i as apiRequest, t as ApiError } from "./api-C4rMhE7i.mjs";
 import { t as liveDevServer } from "./dev-server-file-Dk9pk4AR.mjs";

package/dist/{package-CQIPmdcO.mjs → package-Doigafvd.mjs}

@@ -1,4 +1,4 @@
 //#region package.json
-var version = "0.7.33";
+var version = "0.7.34";
 //#endregion
 export { version as t };

package/dist/skill/canopy/SKILL.md

@@ -97,6 +97,12 @@ and never go stale.
   (own database cloned from live; `canopy staging status | sync | destroy`)
 - Roll back: `canopy rollback`
 - Open the live site: `canopy open`
+- **Look at a deployed project in your own browser** (Playwright, a browser
+  tool, curl): `canopy browse <slug> --json` prints a one-time sign-in link
+  (`--staging`, `--path /page`). Open it within a minute; that browser is
+  then signed in to that one project, as the user, for an hour. On a sign-in
+  page later, run it again. Never ask the user for their session cookie
+  (`canopy docs agent-browsing`).
 - Manage data: `canopy db pull | snapshot | snapshots | restore | migrate`
 - Use AI (`canopy.ai`): run `canopy ai models` before naming a model in code.
   Prefer the aliases `auto/low` (default) / `auto/mid` / `auto/high` over

package/dist/{skill-Dg7dQF0k.mjs → skill-DfSAZ2cW.mjs}

@@ -1,4 +1,4 @@
-import { t as version } from "./package-CQIPmdcO.mjs";
+import { t as version } from "./package-Doigafvd.mjs";
 import { r as reportErrors } from "./ui-C_jSc1Kz.mjs";
 import { defineCommand } from "citty";
 import { cpSync, existsSync, mkdirSync, rmSync, symlinkSync, writeFileSync } from "node:fs";

package/dist/{src-BkACMkol.mjs → src-DE37PKho.mjs}

@@ -857,7 +857,11 @@ const AGENT_CREDENTIAL_HEADER = "x-canopy-agent-credential";
 */
 const CALLER_HEADER = "x-canopy-caller";
 /** Cookies that authenticate to Canopy itself — the monk session and the client-page session. */
-const CANOPY_COOKIE_NAMES = /* @__PURE__ */ new Set(["canopy_session", "canopy_client"]);
+const CANOPY_COOKIE_NAMES = /* @__PURE__ */ new Set([
+	"canopy_session",
+	"canopy_client",
+	"canopy_agent"
+]);
 /**
 * Strip Canopy's own credentials from a request before untrusted project code
 * sees it (R-01).
@@ -870,7 +874,7 @@ const CANOPY_COOKIE_NAMES = /* @__PURE__ */ new Set(["canopy_session", "canopy_c
 *
 * Redaction is surgical on purpose: an app's own cookies and its own
 * Authorization scheme survive, because those belong to the app. Only
-* `canopy_session` / `canopy_client` and a `cnpy_` bearer are removed.
+* `canopy_session` / `canopy_client` / `canopy_agent` and a `cnpy_` bearer are removed.
 *
 * `env.CANOPY.fetch` still authenticates as the visitor — the host passes it
 * the unredacted headers — so nothing about the platform-facing behaviour

package/dist/{upgrade-huJDjhrV.mjs → upgrade-DCQ3NzoL.mjs}

@@ -112,7 +112,7 @@ const upgradeCommand = defineCommand({
 		const spec = `${PACKAGE_NAME}@${args.version ?? "latest"}`;
 		const command = pmCommand(pm);
 		const cmd = installArgs(pm, spec);
-		const { skillInstalled } = await import("./skill-Dg7dQF0k.mjs");
+		const { skillInstalled } = await import("./skill-DfSAZ2cW.mjs");
 		const { homedir } = await import("node:os");
 		const refreshGlobal = skillInstalled(homedir());
 		const refreshRepo = process.cwd() !== homedir() && skillInstalled(process.cwd());

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mediamonks/canopy-cli",
-  "version": "0.7.33",
+  "version": "0.7.34",
   "description": "Canopy CLI — create, develop and deploy Canopy projects.",
   "bin": {
     "canopy": "./dist/index.mjs"

package/dist/dev-MoHHjQh1.mjs

@@ -1,2 +0,0 @@
-import { n as devCommand } from "./dev-CkhBnSlv.mjs";
-export { devCommand };