@mediamonks/canopy-cli 0.7.35 → 0.7.37

package/dist/{ai-DHLnyqfq.mjs → ai-CjvrcBIz.mjs}

@@ -1,5 +1,5 @@
-import { i as apiRequest, o as withContext } from "./api-C4rMhE7i.mjs";
-import { r as reportErrors } from "./ui-C_jSc1Kz.mjs";
+import { i as apiRequest, o as withContext } from "./api-BPEYm9ts.mjs";
+import { r as reportErrors } from "./ui-CHfKV6lG.mjs";
 import { defineCommand } from "citty";
 //#region src/ai.ts
 /**

package/dist/{api-C4rMhE7i.mjs → api-BPEYm9ts.mjs}

@@ -92,6 +92,26 @@ const ERROR_COPY = {
 		why: "the description is invalid (at most 1000 characters)",
 		fix: "Shorten the description to 1000 characters or fewer."
 	},
+	user_session_required: {
+		why: "this needs your own sign-in, and a project-scoped token (dev, agent, worker, deploy) was used",
+		fix: "Run it yourself after `canopy login`, or use the dashboard."
+	},
+	invalid_retention: {
+		why: "retention must be a whole number of days from 1 to 365, or off",
+		fix: "Pass e.g. `--retention 30`, or `--retention off` to keep snapshots until deleted."
+	},
+	retention_shorter_than_schedule: {
+		why: "retention is shorter than the schedule, so some days would have no snapshot at all",
+		fix: "Use at least 1 day for a daily schedule and 7 for a weekly one."
+	},
+	invalid_schedule: {
+		why: "the schedule must be off, daily or weekly",
+		fix: "Pass `--schedule off`, `--schedule daily` or `--schedule weekly`."
+	},
+	invalid_retention_scope: {
+		why: "the retention scope must be all or scheduled",
+		fix: "Pass `--retention-scope all` (every snapshot) or `--retention-scope scheduled`."
+	},
 	snapshot_not_found: {
 		why: "no snapshot with that id exists for this project",
 		fix: "Run `canopy db snapshots` to list available snapshots."
@@ -335,6 +355,7 @@ async function apiDataRequest(method, path, projectSlug, body, rawContentType, c
 		body: body === void 0 ? void 0 : rawContentType !== void 0 ? body : JSON.stringify(body)
 	});
 	if (!response.ok) return fail(response, isDeployToken, method, path);
+	if (response.status === 204) return void 0;
 	return await response.json();
 }
 //#endregion

package/dist/{browse-Dycwj0V_.mjs → browse-CBelCgnW.mjs}

@@ -1,5 +1,5 @@
 import { d as tryResolveProject, n as siteConfig } from "./site-DM2J10CB.mjs";
-import { i as apiRequest, t as ApiError } from "./api-C4rMhE7i.mjs";
+import { i as apiRequest, t as ApiError } from "./api-BPEYm9ts.mjs";
 import { defineCommand } from "citty";
 //#region src/browse.ts
 /**

package/dist/{db-BB6O6085.mjs → db-CbqgjfYz.mjs}

@@ -1,7 +1,7 @@
 import { c as resolveProject, o as projectFlagArgs } from "./site-DM2J10CB.mjs";
-import { i as apiRequest, n as apiDataRequest, o as withContext } from "./api-C4rMhE7i.mjs";
-import { a as unwrap, i as requireTty, r as reportErrors } from "./ui-C_jSc1Kz.mjs";
-import { n as migrateProject, r as readMigrationFiles, t as describeMigrateResult } from "./migrations-Czlcddyz.mjs";
+import { i as apiRequest, n as apiDataRequest, o as withContext } from "./api-BPEYm9ts.mjs";
+import { a as unwrap, i as requireTty, r as reportErrors } from "./ui-CHfKV6lG.mjs";
+import { n as migrateProject, r as readMigrationFiles, t as describeMigrateResult } from "./migrations-CF1iNZ7F.mjs";
 import { defineCommand } from "citty";
 import { readFileSync, writeFileSync } from "node:fs";
 import * as p from "@clack/prompts";
@@ -12,7 +12,8 @@ import * as p from "@clack/prompts";
 *
 * pull      download a fresh SQL dump of the project database
 * snapshot  store a dump server-side (restorable from CLI or dashboard)
-* snapshots list stored snapshots
+* snapshots list stored snapshots; `snapshots delete` and `snapshots settings`
+*           (schedule and retention, OpenSpec snapshot-schedules)
 * restore   replace ALL project data from a snapshot or a local .sql file
 * migrate   apply pending schema migrations (docs/13-migrations-and-drizzle.md)
 * access    show or set what the app's pages may do with the database (docs/35)
@@ -84,25 +85,170 @@ const snapshotCommand = defineCommand({
 		console.log(`Restore anytime with \`canopy db restore --snapshot ${created.key}\`.`);
 	})
 });
-const snapshotsCommand = defineCommand({
+/** `--retention`: a whole number of days, or off. Range is the server's call. */
+function parseRetention(value) {
+	const v = value.trim().toLowerCase();
+	if (v === "off" || v === "none") return null;
+	if (!/^\d+$/.test(v)) throw new Error(`--retention takes a number of days or "off", not "${value}".`);
+	return Number(v);
+}
+const capitalize = (s) => s.charAt(0).toUpperCase() + s.slice(1);
+/** One line on when scheduled snapshots happen, e.g. "daily at 03:00 UTC". */
+function describeSchedule(settings) {
+	if (settings.schedule === "off") return "off";
+	const time = `${String(settings.slot.hour).padStart(2, "0")}:00 UTC`;
+	return settings.schedule === "weekly" && settings.slot.weekday ? `weekly on ${capitalize(settings.slot.weekday)} at ${time}` : `daily at ${time}`;
+}
+function describeRetention(settings) {
+	if (settings.retentionDays === null) return "off (snapshots are kept until deleted)";
+	const days = `${settings.retentionDays} day${settings.retentionDays === 1 ? "" : "s"}`;
+	return settings.retentionScope === "scheduled" ? `${days}, scheduled snapshots only` : `${days}, all snapshots (manual, scheduled, pre-migrate, pre-promote)`;
+}
+function describeLastRun(lastRun) {
+	if (!lastRun) return "never";
+	return lastRun.ok ? `${lastRun.at} — stored ${lastRun.detail ?? ""}`.trimEnd() : `${lastRun.at} — FAILED: ${lastRun.detail ?? "unknown error"}`;
+}
+function printSettings(slug, settings) {
+	console.log(`${slug} snapshot settings`);
+	console.log(`  schedule   ${describeSchedule(settings)}`);
+	console.log(`  retention  ${describeRetention(settings)}`);
+	if (settings.schedule !== "off" || settings.lastRun) console.log(`  last run   ${describeLastRun(settings.lastRun)}`);
+}
+let snapshotsSubcommandRan = false;
+const snapshotsDeleteCommand = defineCommand({
 	meta: {
-		name: "snapshots",
-		description: "List stored snapshots"
+		name: "delete",
+		description: "Delete a stored snapshot for good"
 	},
 	args: {
 		...projectFlagArgs,
-		...stagingFlagArgs
+		...stagingFlagArgs,
+		key: {
+			type: "positional",
+			description: "Snapshot key (from `canopy db snapshots`)",
+			required: true
+		},
+		yes: {
+			type: "boolean",
+			default: false,
+			description: "Skip the confirmation"
+		}
+	},
+	run: reportErrors("db snapshots delete", async ({ args }) => {
+		snapshotsSubcommandRan = true;
+		const { slug } = resolveProject(args);
+		if (!args.yes) {
+			requireTty("pass --yes to delete without confirmation.");
+			if (!unwrap(await p.confirm({
+				message: `Delete snapshot ${args.key} of "${slug}"${channelNote(args)} for good? It can't be restored afterwards.`,
+				initialValue: false
+			}))) {
+				p.cancel("Aborted.");
+				return;
+			}
+		}
+		await withContext(apiDataRequest("DELETE", `/db/snapshots/${encodeURIComponent(args.key)}`, slug, void 0, void 0, channelOf(args)), { action: `delete snapshot ${args.key} of "${slug}"` });
+		p.log.success(`Deleted ${args.key}${channelNote(args)}.`);
+	})
+});
+const snapshotsSettingsCommand = defineCommand({
+	meta: {
+		name: "settings",
+		description: "Show or change the snapshot schedule and retention"
+	},
+	args: {
+		...projectFlagArgs,
+		schedule: {
+			type: "string",
+			description: "off | daily | weekly"
+		},
+		retention: {
+			type: "string",
+			description: "Delete snapshots older than this many days (1–365), or off"
+		},
+		"retention-scope": {
+			type: "string",
+			description: "Which snapshots retention deletes: all (default) | scheduled"
+		},
+		yes: {
+			type: "boolean",
+			default: false,
+			description: "Don't ask before a retention change that deletes snapshots"
+		},
+		json: {
+			type: "boolean",
+			default: false,
+			description: "Print the settings as JSON"
+		}
 	},
-	run: reportErrors("db snapshots", async ({ args }) => {
+	run: reportErrors("db snapshots settings", async ({ args }) => {
+		snapshotsSubcommandRan = true;
 		const { slug } = resolveProject(args);
-		const { snapshots } = await apiDataRequest("GET", "/db/snapshots", slug, void 0, void 0, channelOf(args));
-		if (snapshots.length === 0) {
-			console.log(`No snapshots for ${slug} yet — run \`canopy db snapshot\`.`);
+		const path = `/projects/${slug}/snapshot-settings`;
+		const change = {};
+		if (args.schedule !== void 0) change.schedule = args.schedule.trim().toLowerCase();
+		if (args.retention !== void 0) change.retentionDays = parseRetention(args.retention);
+		if (args["retention-scope"] !== void 0) change.retentionScope = args["retention-scope"].trim().toLowerCase();
+		if (Object.keys(change).length === 0) {
+			const settings = await withContext(apiRequest("GET", path), { action: `read the snapshot settings of "${slug}"` });
+			if (args.json) console.log(JSON.stringify(settings, null, 2));
+			else printSettings(slug, settings);
+			return;
+		}
+		const context = { action: `change the snapshot settings of "${slug}"` };
+		const preview = await withContext(apiRequest("PUT", path, {
+			...change,
+			dryRun: true
+		}), context);
+		if ((preview.wouldExpire ?? 0) > 0 && !args.yes) {
+			requireTty("pass --yes to apply a retention that deletes existing snapshots.");
+			const n = preview.wouldExpire;
+			if (!unwrap(await p.confirm({
+				message: `This deletes ${n} existing snapshot${n === 1 ? "" : "s"} of "${slug}" within the hour. Continue?`,
+				initialValue: false
+			}))) {
+				p.cancel("Aborted.");
+				return;
+			}
+		}
+		const settings = await withContext(apiRequest("PUT", path, change), context);
+		if (args.json) {
+			console.log(JSON.stringify(settings, null, 2));
 			return;
 		}
-		for (const snapshot of snapshots) console.log(`${snapshot.key}  ${formatSize(snapshot.size).padStart(9)}  ${snapshot.createdAt}`);
+		printSettings(slug, settings);
+		if ((settings.wouldExpire ?? 0) > 0) console.log(`\n${settings.wouldExpire} snapshot(s) past retention will be deleted within the hour.`);
 	})
 });
+const listSnapshotsRun = reportErrors("db snapshots", async ({ args }) => {
+	const { slug } = resolveProject(args);
+	const [{ snapshots }, settings] = await Promise.all([apiDataRequest("GET", "/db/snapshots", slug, void 0, void 0, channelOf(args)), apiRequest("GET", `/projects/${slug}/snapshot-settings`).catch(() => null)]);
+	if (settings) {
+		console.log(`Schedule: ${describeSchedule(settings)} · retention: ${describeRetention(settings)}`);
+		if (settings.lastRun) console.log(`Last scheduled run: ${describeLastRun(settings.lastRun)}`);
+		console.log("");
+	}
+	if (snapshots.length === 0) {
+		console.log(`No snapshots for ${slug}${channelNote(args)} yet — run \`canopy db snapshot\`.`);
+		return;
+	}
+	for (const snapshot of snapshots) console.log(`${snapshot.key}  ${(snapshot.kind ?? "").padEnd(11)}  ${formatSize(snapshot.size).padStart(9)}  ${snapshot.createdAt}`);
+});
+const snapshotsCommand = defineCommand({
+	meta: {
+		name: "snapshots",
+		description: "List stored snapshots (and delete, settings)"
+	},
+	args: {
+		...projectFlagArgs,
+		...stagingFlagArgs
+	},
+	subCommands: {
+		delete: snapshotsDeleteCommand,
+		settings: snapshotsSettingsCommand
+	},
+	run: (context) => snapshotsSubcommandRan ? void 0 : listSnapshotsRun(context)
+});
 const restoreCommand = defineCommand({
 	meta: {
 		name: "restore",

package/dist/{deploy-Ka2lHkyy.mjs → deploy-CqCyry4o.mjs}

@@ -1,7 +1,7 @@
 import { a as projectDirArgs, c as resolveProject, l as stagingUrl, n as siteConfig, o as projectFlagArgs, s as projectUrl, u as tryReadCanopyJson } from "./site-DM2J10CB.mjs";
-import { i as apiRequest, n as apiDataRequest, o as withContext, r as apiDownload } from "./api-C4rMhE7i.mjs";
-import { a as unwrap, r as reportErrors, t as formatDateTime } from "./ui-C_jSc1Kz.mjs";
-import { n as migrateProject, r as readMigrationFiles, t as describeMigrateResult } from "./migrations-Czlcddyz.mjs";
+import { i as apiRequest, n as apiDataRequest, o as withContext, r as apiDownload } from "./api-BPEYm9ts.mjs";
+import { a as unwrap, r as reportErrors, t as formatDateTime } from "./ui-CHfKV6lG.mjs";
+import { n as migrateProject, r as readMigrationFiles, t as describeMigrateResult } from "./migrations-CF1iNZ7F.mjs";
 import { builtinModules } from "node:module";
 import { defineCommand } from "citty";
 import { mkdtempSync, readFileSync, readdirSync, rmSync, statSync, writeFileSync } from "node:fs";

package/dist/{dev-oS4nYMSn.mjs → dev-BtnEuAnS.mjs}

@@ -1,7 +1,7 @@
 import { a as projectDirArgs, c as resolveProject, i as projectDialect, n as siteConfig, u as tryReadCanopyJson } from "./site-DM2J10CB.mjs";
-import { i as apiRequest, o as withContext, t as ApiError } from "./api-C4rMhE7i.mjs";
-import { r as reportErrors, t as formatDateTime } from "./ui-C_jSc1Kz.mjs";
-import { r as readMigrationFiles } from "./migrations-Czlcddyz.mjs";
+import { i as apiRequest, o as withContext, t as ApiError } from "./api-BPEYm9ts.mjs";
+import { r as reportErrors, t as formatDateTime } from "./ui-CHfKV6lG.mjs";
+import { r as readMigrationFiles } from "./migrations-CF1iNZ7F.mjs";
 import { i as stampWorkerHeaders, n as WORKER_ATTEST_HEADER } from "./src-CxzGOEhP.mjs";
 import { n as writeDevServerRecord } from "./dev-server-file-Dk9pk4AR.mjs";
 import { createRequire } from "node:module";
@@ -34,7 +34,7 @@ function workerDialect(flags) {
 * gateway serves it in production (dev-worker.ts). Returns the plugin plus
 * the notice lines to print, or undefined when the project has no worker.
 */
-async function workerPlugin(flags, slug, workerAttest) {
+async function workerPlugin(flags, slug, workerAttest, remoteUser) {
 	const entry = tryReadCanopyJson(flags.dir)?.worker;
 	if (entry === void 0) return void 0;
 	if (!existsSync(join(flags.dir, entry))) {
@@ -44,17 +44,18 @@ async function workerPlugin(flags, slug, workerAttest) {
 	const { missingSecretNames, readDevVars, workerDevPlugin } = await import("./dev-worker-CpSB_Okh.mjs");
 	const secrets = readDevVars(flags.dir);
 	const email = siteConfig().email;
+	const user = await remoteUser?.() ?? (email ? {
+		sub: "local-dev",
+		email,
+		name: "Local Dev"
+	} : null);
 	const plugin = workerDevPlugin({
 		dir: flags.dir,
 		entry,
 		slug,
 		channel: flags.staging ? "staging" : "live",
 		secrets,
-		user: email ? {
-			sub: "local-dev",
-			email,
-			name: "Local Dev"
-		} : null,
+		user,
 		dialect: workerDialect(flags),
 		workerAttest
 	});
@@ -156,6 +157,26 @@ function devProxyHeaders(token, slug, channel) {
 	return Object.fromEntries(headers);
 }
 /**
+* The signed-in person as the platform sees them — what auth.user() answers
+* in the browser, so env.USER in a live-data dev worker matches it.
+* Undefined on any failure: dev still starts, with the local stub.
+*/
+async function fetchDevUser(apiUrl, headers) {
+	try {
+		const res = await fetch(`${apiUrl}/data/v1/auth/me`, { headers });
+		if (!res.ok) return void 0;
+		const me = await res.json();
+		if (!me.id) return void 0;
+		return {
+			sub: me.id,
+			email: me.email ?? "",
+			name: me.name ?? ""
+		};
+	} catch {
+		return;
+	}
+}
+/**
 * One request from Vite's /_api proxy into the --local sandbox. The response
 * body is streamed, not buffered — realtime subscriptions (docs/48) are
 * long-lived SSE responses — and a client that goes away aborts the sandbox
@@ -202,11 +223,12 @@ async function bridgeToSandbox(sandbox, req, res) {
 async function devRemote(flags, slug) {
 	const { token, expires_at } = await withContext(apiRequest("POST", `/projects/${slug}/dev-token`), devTokenContext(slug));
 	const { apiUrl } = siteConfig();
-	const worker = await workerPlugin(flags, slug);
+	const channel = flags.staging ? "staging" : "live";
+	const worker = await workerPlugin(flags, slug, void 0, () => fetchDevUser(apiUrl, devProxyHeaders(token, slug, channel)));
 	const server = await startVite(flags, { proxy: { "/_api": {
 		target: apiUrl,
 		changeOrigin: true,
-		headers: devProxyHeaders(token, slug, flags.staging ? "staging" : "live"),
+		headers: devProxyHeaders(token, slug, channel),
 		rewrite: rewriteApiPath
 	} } }, worker ? [worker.plugin] : []);
 	if (flags.staging) {
@@ -229,7 +251,7 @@ async function devRemote(flags, slug) {
 async function devLocal(flags, slug) {
 	let dump;
 	if (flags.pull) {
-		const { fetchProjectDump } = await import("./local-Cc8H3NUw.mjs");
+		const { fetchProjectDump } = await import("./local-BfqTheMP.mjs");
 		console.log(`Pulling a fresh export of ${slug}${flags.staging ? " [staging]" : ""}…`);
 		dump = await fetchProjectDump(slug, flags.staging ? "staging" : "live");
 	}
@@ -245,7 +267,7 @@ async function devLocal(flags, slug) {
 		console.log(`Note: ai/services will be unavailable — could not reach the platform (${reason}).`);
 	}
 	const workerAttest = randomBytes(24).toString("base64url");
-	const { createSandbox } = await import("./local-Cc8H3NUw.mjs");
+	const { createSandbox } = await import("./local-BfqTheMP.mjs");
 	const sandbox = await createSandbox({
 		slug,
 		persistDir: join(flags.dir, ".canopy", "local"),
@@ -354,4 +376,4 @@ const devCommand = defineCommand({
 	})
 });
 //#endregion
-export { rewriteApiPath as i, devCommand as n, devProxyHeaders as r, bridgeToSandbox as t };
+export { rewriteApiPath as a, fetchDevUser as i, devCommand as n, devProxyHeaders as r, bridgeToSandbox as t };

package/dist/dev-D_qzeLng.mjs

@@ -0,0 +1,2 @@
+import { n as devCommand } from "./dev-BtnEuAnS.mjs";
+export { devCommand };

package/dist/docs/cli-db.md

@@ -13,6 +13,9 @@ The habit that makes restores safe: **always `canopy db snapshot` before `canopy
 canopy db pull [--out <file>] [--project <slug>]
 canopy db snapshot [--project <slug>]
 canopy db snapshots [--project <slug>]
+canopy db snapshots delete <key> [--yes] [--project <slug>]
+canopy db snapshots settings [--schedule off|daily|weekly] [--retention <days>|off]
+                             [--retention-scope all|scheduled] [--yes] [--json] [--project <slug>]
 canopy db restore [file.sql] [--snapshot <key>] [--yes] [--project <slug>]
 canopy db migrate [--plan] [--project <slug>]
 ```
@@ -37,7 +40,27 @@ Stores a dump **server-side**, restorable anytime from the CLI or the dashboard.
 
 ### canopy db snapshots
 
-Lists stored snapshots for the project — one line per snapshot with its key, size, and creation time. If there are none yet, it points you at `canopy db snapshot`.
+Lists stored snapshots for the project — one line per snapshot with its key, kind, size, and creation time — under a line with the project's schedule, retention and last scheduled run. The kind says what made it: `manual` (you), `scheduled` (Canopy, on the schedule), `pre-migrate` or `pre-promote` (Canopy, before applying migrations). If there are none yet, it points you at `canopy db snapshot`.
+
+### canopy db snapshots delete
+
+Deletes one stored snapshot for good: it can't be restored afterwards. Asks for confirmation unless `--yes` is passed. Use `--staging` for a snapshot in the staging history.
+
+Deleting needs your own sign-in (`canopy login`). Project tokens, such as the ones `canopy dev` or an agent uses, can't delete snapshots.
+
+### canopy db snapshots settings
+
+Shows or changes when Canopy takes snapshots by itself and how long snapshots are kept. With no flags it prints the current settings.
+
+- `--schedule off|daily|weekly` — Canopy snapshots the live database once a day or once a week, at a fixed time it picks for the project (shown in UTC). The staging database is not snapshotted on a schedule.
+- `--retention <days>` — delete snapshots older than this many days (1 to 365), once a day. `--retention off` keeps snapshots until you delete them. Retention works with or without a schedule, and covers both the live and the staging history.
+- `--retention-scope all|scheduled` — which snapshots retention deletes: `all` (the default) includes the ones you took by hand and the ones taken before migrations; `scheduled` only deletes the ones Canopy took on the schedule.
+- `--yes` — when a new retention would delete existing snapshots, the CLI says how many and asks first. `--yes` skips that.
+- `--json` — print the settings as JSON.
+
+A daily schedule needs at least 1 day of retention and a weekly one at least 7, so there is never a stretch without a snapshot. Like deleting, changing the settings needs your own sign-in.
+
+Canopy also keeps short-lived backups of its own databases and storage for disaster recovery. Those expire on their own within 30 days and can't be restored from the CLI.
 
 ### canopy db restore
 
@@ -73,6 +96,12 @@ canopy db snapshot && canopy db pull
 
 Belt and braces before risky work: a server-side snapshot you can restore from the dashboard, plus a local dump on disk.
 
+```bash
+canopy db snapshots settings --schedule daily --retention 30
+```
+
+A daily backup, with snapshots older than 30 days deleted automatically.
+
 ```bash
 canopy db restore --snapshot snap-2026-08-11-1200 --yes --project my-app
 ```

package/dist/docs/data.md

@@ -61,6 +61,17 @@ canopy db snapshots    # list stored snapshots
 Snapshots live on the platform and can be restored at any time — handy before a
 risky change.
 
+Canopy can also take them for you, and clean up old ones:
+
+```bash
+canopy db snapshots settings --schedule daily --retention 30   # daily backup, keep 30 days
+canopy db snapshots settings --retention-scope scheduled       # never auto-delete your own
+canopy db snapshots delete <key>                               # delete one for good
+```
+
+The same settings are on the dashboard's Data tab. See
+[`canopy db`](https://docs.canopy.website/cli/db#canopy-db-snapshots-settings) for every option.
+
 ## Restore — destructive
 
 > **Warning:** Restoring **replaces ALL project data**. Take a snapshot first — a snapshot taken seconds earlier

package/dist/docs/platform-project-data.md

@@ -45,8 +45,28 @@ The Data tab's **Data safety** card is your undo button for data:
   confirm.
 - **Export** downloads a dump to your machine.
 
-Snapshots live server-side and stay available until you delete the project,
-so you can restore from days ago, not just from your last session.
+Snapshots live server-side, so you can restore from days ago, not just from
+your last session. Each one shows what made it: you, the schedule, or Canopy
+before applying migrations. You can delete one you no longer need; it's gone
+for good.
+
+## Scheduled snapshots and retention
+
+In the same card you can have Canopy take a snapshot of the live database
+**daily** or **weekly**, at a fixed time it picks for the project. You don't
+need a worker or any code for it.
+
+**Retention** deletes snapshots older than a number of days you choose, once a
+day. Choose whether it applies to all snapshots or only the scheduled ones, so
+your own restore points stay until you delete them. Retention also works
+without a schedule. Without retention, snapshots stay until you delete them or
+the project.
+
+Changing these settings and deleting snapshots needs a project member signed
+in as themselves.
+
+Canopy also keeps short-lived backups of its own databases and storage for
+disaster recovery. Those expire on their own within 30 days.
 
 > **Warning:** Restoring replaces **all** current data with the snapshot's contents. Take a fresh snapshot first
 > if there's anything recent you might want back.
@@ -58,7 +78,7 @@ Everything above is also available to you (and your coding agent) via the CLI:
 ```bash
 canopy db pull        # download a fresh SQL dump
 canopy db snapshot    # store a dump server-side
-canopy db snapshots   # list stored snapshots
+canopy db snapshots   # list stored snapshots (delete, settings)
 canopy db restore     # replace project data with a snapshot
 canopy db access      # what the app's own pages may do with the database
 ```

package/dist/{docs-CGrXLl7G.mjs → docs-DvCUaI1O.mjs}

@@ -1,7 +1,7 @@
-import { t as version } from "./package-BOXNJrWP.mjs";
+import { t as version } from "./package-BY69Tjq_.mjs";
 import { n as siteConfig } from "./site-DM2J10CB.mjs";
 import { i as latestKnownVersion, r as compareSemver } from "./version-check-CcsA1QjI.mjs";
-import { r as reportErrors } from "./ui-C_jSc1Kz.mjs";
+import { r as reportErrors } from "./ui-CHfKV6lG.mjs";
 import { defineCommand } from "citty";
 import { existsSync, mkdirSync, readFileSync, readdirSync, writeFileSync } from "node:fs";
 import { homedir } from "node:os";

package/dist/{egress-If_Gsx_M.mjs → egress-ButFsQ2N.mjs}

@@ -1,6 +1,6 @@
 import { a as projectDirArgs, c as resolveProject } from "./site-DM2J10CB.mjs";
-import { i as apiRequest, o as withContext } from "./api-C4rMhE7i.mjs";
-import { a as unwrap, i as requireTty, r as reportErrors, t as formatDateTime } from "./ui-C_jSc1Kz.mjs";
+import { i as apiRequest, o as withContext } from "./api-BPEYm9ts.mjs";
+import { a as unwrap, i as requireTty, r as reportErrors, t as formatDateTime } from "./ui-CHfKV6lG.mjs";
 import { defineCommand } from "citty";
 import * as p from "@clack/prompts";
 //#region src/egress.ts

package/dist/{feedback-CrmDfqmZ.mjs → feedback-CIjjiEaj.mjs}

@@ -1,7 +1,7 @@
-import { t as version } from "./package-BOXNJrWP.mjs";
+import { t as version } from "./package-BY69Tjq_.mjs";
 import { a as projectDirArgs, c as resolveProject, d as tryResolveProject, n as siteConfig, u as tryReadCanopyJson } from "./site-DM2J10CB.mjs";
-import { a as apiUpload, i as apiRequest, r as apiDownload } from "./api-C4rMhE7i.mjs";
-import { r as reportErrors, t as formatDateTime } from "./ui-C_jSc1Kz.mjs";
+import { a as apiUpload, i as apiRequest, r as apiDownload } from "./api-BPEYm9ts.mjs";
+import { r as reportErrors, t as formatDateTime } from "./ui-CHfKV6lG.mjs";
 import { defineCommand } from "citty";
 import { basename, extname, join } from "node:path";
 import { readFile, writeFile } from "node:fs/promises";

package/dist/index.mjs

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { t as version } from "./package-BOXNJrWP.mjs";
+import { t as version } from "./package-BY69Tjq_.mjs";
 import { r as siteHeaderLine, t as setInvocationProfile } from "./site-DM2J10CB.mjs";
 import { a as notifyOfUpdate, o as runRefresh } from "./version-check-CcsA1QjI.mjs";
 import { defineCommand, runMain } from "citty";
@@ -63,35 +63,35 @@ const main = defineCommand({
 		description: "canopy — create and deploy vibecoded projects"
 	},
 	subCommands: {
-		login: () => import("./login-D0J5s_Ex.mjs").then((m) => m.loginCommand),
-		whoami: () => import("./login-D0J5s_Ex.mjs").then((m) => m.whoamiCommand),
-		logout: () => import("./login-D0J5s_Ex.mjs").then((m) => m.logoutCommand),
-		create: () => import("./projects-DQAhCZm8.mjs").then((m) => m.createCommand),
-		init: () => import("./projects-DQAhCZm8.mjs").then((m) => m.initCommand),
-		projects: () => import("./projects-DQAhCZm8.mjs").then((m) => m.projectsCommand),
-		delete: () => import("./projects-DQAhCZm8.mjs").then((m) => m.deleteCommand),
-		dev: () => import("./dev-CID2LCES.mjs").then((m) => m.devCommand),
-		deploy: () => import("./deploy-Ka2lHkyy.mjs").then((m) => m.deployCommand),
-		promote: () => import("./deploy-Ka2lHkyy.mjs").then((m) => m.promoteCommand),
-		staging: () => import("./staging-BZVty57b.mjs").then((m) => m.stagingCommand),
-		rollback: () => import("./deploy-Ka2lHkyy.mjs").then((m) => m.rollbackCommand),
-		download: () => import("./deploy-Ka2lHkyy.mjs").then((m) => m.downloadCommand),
-		token: () => import("./token-HHlUR0CF.mjs").then((m) => m.tokenCommand),
-		egress: () => import("./egress-If_Gsx_M.mjs").then((m) => m.egressCommand),
-		secrets: () => import("./secrets-BSEjZnxg.mjs").then((m) => m.secretsCommand),
-		schedule: () => import("./schedule-C5lMf3ny.mjs").then((m) => m.scheduleCommand),
-		feedback: () => import("./feedback-CrmDfqmZ.mjs").then((m) => m.feedbackCommand),
-		db: () => import("./db-BB6O6085.mjs").then((m) => m.dbCommand),
-		usage: () => import("./usage-CUYrWxv0.mjs").then((m) => m.usageCommand),
-		ai: () => import("./ai-DHLnyqfq.mjs").then((m) => m.aiCommand),
-		open: () => import("./open-DcaQKi1v.mjs").then((m) => m.openCommand),
-		browse: () => import("./browse-Dycwj0V_.mjs").then((m) => m.browseCommand),
-		docs: () => import("./docs-CGrXLl7G.mjs").then((m) => m.docsCommand),
-		skill: () => import("./skill-GPJrYL61.mjs").then((m) => m.skillCommand),
-		upgrade: () => import("./upgrade-DSTg2cgu.mjs").then((m) => m.upgradeCommand),
-		logs: () => import("./logs-DQQOawOG.mjs").then((m) => m.logsCommand),
-		mcp: () => import("./mcp-DAaO4SQc.mjs").then((m) => m.mcpCommand),
-		repo: () => import("./repo-1RQ1vBMv.mjs").then((m) => m.repoCommand)
+		login: () => import("./login-CtDWXICZ.mjs").then((m) => m.loginCommand),
+		whoami: () => import("./login-CtDWXICZ.mjs").then((m) => m.whoamiCommand),
+		logout: () => import("./login-CtDWXICZ.mjs").then((m) => m.logoutCommand),
+		create: () => import("./projects-DPGRI-SI.mjs").then((m) => m.createCommand),
+		init: () => import("./projects-DPGRI-SI.mjs").then((m) => m.initCommand),
+		projects: () => import("./projects-DPGRI-SI.mjs").then((m) => m.projectsCommand),
+		delete: () => import("./projects-DPGRI-SI.mjs").then((m) => m.deleteCommand),
+		dev: () => import("./dev-D_qzeLng.mjs").then((m) => m.devCommand),
+		deploy: () => import("./deploy-CqCyry4o.mjs").then((m) => m.deployCommand),
+		promote: () => import("./deploy-CqCyry4o.mjs").then((m) => m.promoteCommand),
+		staging: () => import("./staging-CU4QrzFX.mjs").then((m) => m.stagingCommand),
+		rollback: () => import("./deploy-CqCyry4o.mjs").then((m) => m.rollbackCommand),
+		download: () => import("./deploy-CqCyry4o.mjs").then((m) => m.downloadCommand),
+		token: () => import("./token-BWnLsWLg.mjs").then((m) => m.tokenCommand),
+		egress: () => import("./egress-ButFsQ2N.mjs").then((m) => m.egressCommand),
+		secrets: () => import("./secrets-BQYaPSOT.mjs").then((m) => m.secretsCommand),
+		schedule: () => import("./schedule-DdMq5eXC.mjs").then((m) => m.scheduleCommand),
+		feedback: () => import("./feedback-CIjjiEaj.mjs").then((m) => m.feedbackCommand),
+		db: () => import("./db-CbqgjfYz.mjs").then((m) => m.dbCommand),
+		usage: () => import("./usage-Cqqvnzrf.mjs").then((m) => m.usageCommand),
+		ai: () => import("./ai-CjvrcBIz.mjs").then((m) => m.aiCommand),
+		open: () => import("./open-DXo60Ikf.mjs").then((m) => m.openCommand),
+		browse: () => import("./browse-CBelCgnW.mjs").then((m) => m.browseCommand),
+		docs: () => import("./docs-DvCUaI1O.mjs").then((m) => m.docsCommand),
+		skill: () => import("./skill-B96cKy8K.mjs").then((m) => m.skillCommand),
+		upgrade: () => import("./upgrade-SfxmPh3F.mjs").then((m) => m.upgradeCommand),
+		logs: () => import("./logs-BltUi4Gp.mjs").then((m) => m.logsCommand),
+		mcp: () => import("./mcp-DTUJV4FT.mjs").then((m) => m.mcpCommand),
+		repo: () => import("./repo-DvrIsubH.mjs").then((m) => m.repoCommand)
 	}
 });
 const quiet = process.argv[2] === "mcp" && process.argv[3] === "serve" || process.argv[2] === "repo" && process.argv[3] === "credential";

package/dist/{local-Cc8H3NUw.mjs → local-BfqTheMP.mjs}

@@ -1,6 +1,6 @@
-import { n as apiDataRequest } from "./api-C4rMhE7i.mjs";
+import { n as apiDataRequest } from "./api-BPEYm9ts.mjs";
 import { a as realtimeRouter, c as META_COLUMNS, l as blobRouter, n as WORKER_ATTEST_HEADER, o as dbRouter, s as hasPrivateNames } from "./src-CxzGOEhP.mjs";
-import { i as rewriteApiPath } from "./dev-oS4nYMSn.mjs";
+import { a as rewriteApiPath } from "./dev-BtnEuAnS.mjs";
 import { createRequire } from "node:module";
 import { existsSync, mkdirSync, readFileSync, readdirSync, rmSync, statSync, writeFileSync } from "node:fs";
 import { dirname, join, relative, sep } from "node:path";