@mediamonks/canopy-cli 0.7.39 → 0.7.41

package/dist/{skill-C2lGGz9n.mjs → skill-DSYQA4Ls.mjs}

@@ -1,5 +1,5 @@
-import { t as version } from "./package-CJJpjVh_.mjs";
-import { r as reportErrors } from "./ui-CaHgvvkJ.mjs";
+import { t as version } from "./package-SWgTmctH.mjs";
+import { r as reportErrors } from "./ui-SBUdC9rX.mjs";
 import { defineCommand } from "citty";
 import { cpSync, existsSync, mkdirSync, rmSync, symlinkSync, writeFileSync } from "node:fs";
 import { homedir } from "node:os";

package/dist/{src-CxzGOEhP.mjs → src-RUf3Gfuh.mjs}

@@ -852,11 +852,15 @@ function realtimeRouter(config) {
 * `worker-request.cases.ts` alongside this implementation, so the two cannot
 * drift silently.
 */
-/** Gateway-stamped identity, for the worker's own `env.USER` — never relayed. */
+/** Gateway-stamped identity, for the worker's own `env.USER` / `env.CALLER` — never relayed. */
 const IDENTITY_STAMP_HEADERS = [
 	"x-canopy-user-sub",
 	"x-canopy-user-email",
-	"x-canopy-user-name"
+	"x-canopy-user-name",
+	"x-canopy-identity-kind",
+	"x-canopy-identity-id",
+	"x-canopy-identity-email",
+	"x-canopy-identity-name"
 ];
 /**
 * Header carrying the project's worker token as runtime-origin proof (docs/35).

package/dist/{staging-ypR79MlD.mjs → staging-CYMTZyyM.mjs}

@@ -1,6 +1,6 @@
 import { c as resolveProject, l as stagingUrl, o as projectFlagArgs, s as projectUrl } from "./site-DM2J10CB.mjs";
-import { a as apiRequest, l as withContext } from "./api-ArfD6-t5.mjs";
-import { a as unwrap, i as requireTty, r as reportErrors, t as formatDateTime } from "./ui-CaHgvvkJ.mjs";
+import { a as apiRequest, l as withContext } from "./api-BHzCvDcY.mjs";
+import { a as unwrap, i as requireTty, r as reportErrors, t as formatDateTime } from "./ui-SBUdC9rX.mjs";
 import { defineCommand } from "citty";
 import * as p from "@clack/prompts";
 //#region src/staging.ts

package/dist/templates/spa/package.json

@@ -7,7 +7,7 @@
     "build": "tsc && vite build"
   },
   "dependencies": {
-    "@mediamonks/canopy": "^0.0.11",
+    "@mediamonks/canopy": "^0.0.12",
     "react": "^19.1.0",
     "react-dom": "^19.1.0"
   },

package/dist/templates/worker/package.json

@@ -7,7 +7,7 @@
     "build": "tsc && vite build"
   },
   "dependencies": {
-    "@mediamonks/canopy": "^0.0.11",
+    "@mediamonks/canopy": "^0.0.12",
     "hono": "^4.8.0",
     "react": "^19.1.0",
     "react-dom": "^19.1.0"

package/dist/{token-CDrHQ5Xb.mjs → token-CCpJ1ES4.mjs}

@@ -1,6 +1,6 @@
 import { a as projectDirArgs, c as resolveProject, o as projectFlagArgs } from "./site-DM2J10CB.mjs";
-import { a as apiRequest } from "./api-ArfD6-t5.mjs";
-import { r as reportErrors, t as formatDateTime } from "./ui-CaHgvvkJ.mjs";
+import { a as apiRequest } from "./api-BHzCvDcY.mjs";
+import { r as reportErrors, t as formatDateTime } from "./ui-SBUdC9rX.mjs";
 import { defineCommand } from "citty";
 const tokenCommand = defineCommand({
 	meta: {

package/dist/{ui-CaHgvvkJ.mjs → ui-SBUdC9rX.mjs}

@@ -1,4 +1,4 @@
-import { t as ApiError } from "./api-ArfD6-t5.mjs";
+import { t as ApiError } from "./api-BHzCvDcY.mjs";
 import { spawn } from "node:child_process";
 import { cancel, isCancel } from "@clack/prompts";
 //#region src/ui.ts

package/dist/{upgrade-Caj1RsA7.mjs → upgrade-B_tLCpc4.mjs}

@@ -1,5 +1,5 @@
 import { t as PACKAGE_NAME } from "./version-check-CcsA1QjI.mjs";
-import { r as reportErrors } from "./ui-CaHgvvkJ.mjs";
+import { r as reportErrors } from "./ui-SBUdC9rX.mjs";
 import { defineCommand } from "citty";
 import { spawn } from "node:child_process";
 import { fileURLToPath } from "node:url";
@@ -112,7 +112,7 @@ const upgradeCommand = defineCommand({
 		const spec = `${PACKAGE_NAME}@${args.version ?? "latest"}`;
 		const command = pmCommand(pm);
 		const cmd = installArgs(pm, spec);
-		const { skillInstalled } = await import("./skill-C2lGGz9n.mjs");
+		const { skillInstalled } = await import("./skill-DSYQA4Ls.mjs");
 		const { homedir } = await import("node:os");
 		const refreshGlobal = skillInstalled(homedir());
 		const refreshRepo = process.cwd() !== homedir() && skillInstalled(process.cwd());

package/dist/{usage-CP8rBVZi.mjs → usage-BSPnsMXd.mjs}

@@ -1,6 +1,6 @@
 import { c as resolveProject, o as projectFlagArgs } from "./site-DM2J10CB.mjs";
-import { a as apiRequest, l as withContext } from "./api-ArfD6-t5.mjs";
-import { r as reportErrors } from "./ui-CaHgvvkJ.mjs";
+import { a as apiRequest, l as withContext } from "./api-BHzCvDcY.mjs";
+import { r as reportErrors } from "./ui-SBUdC9rX.mjs";
 import { defineCommand } from "citty";
 //#region src/usage.ts
 /**
@@ -60,6 +60,13 @@ function renderUsage(slug, usage) {
 	const deploys = usage.deploys.count;
 	const live = usage.deploys.latestVersion != null ? ` · v${usage.deploys.latestVersion} live` : "";
 	lines.push(`  ${pad("deploys")}${deploys}${live}`);
+	const fixed = usage.fixedIp;
+	if (fixed && (fixed.mode !== "off" || fixed.bytesToday > 0)) {
+		lines.push("");
+		lines.push("Fixed outbound addresses");
+		const gb = (n) => `${Number((n / 1e9).toFixed(n < 1e8 ? 3 : 2))} GB`;
+		lines.push(`  ${pad("today")}${gb(fixed.bytesToday)} of ${gb(fixed.dailyQuotaBytes)}`);
+	}
 	return lines.join("\n");
 }
 const usageCommand = defineCommand({

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mediamonks/canopy-cli",
-  "version": "0.7.39",
+  "version": "0.7.41",
   "description": "Canopy CLI — create, develop and deploy Canopy projects.",
   "bin": {
     "canopy": "./dist/index.mjs"
@@ -22,7 +22,7 @@
     "esbuild": "^0.28.1",
     "hono": "^4.8.0",
     "vite-server": "npm:vite@^7",
-    "@mediamonks/canopy": "0.0.11",
+    "@mediamonks/canopy": "0.0.12",
     "@mediamonks/canopy-data-plane": "0.0.4"
   },
   "devDependencies": {

package/dist/dev-BdSq6CGD.mjs

@@ -1,2 +0,0 @@
-import { n as devCommand } from "./dev-BMWj4NDZ.mjs";
-export { devCommand };

package/dist/egress-CzxRD6Tp.mjs

@@ -1,188 +0,0 @@
-import { a as projectDirArgs, c as resolveProject } from "./site-DM2J10CB.mjs";
-import { a as apiRequest, l as withContext } from "./api-ArfD6-t5.mjs";
-import { a as unwrap, i as requireTty, r as reportErrors, t as formatDateTime } from "./ui-CaHgvvkJ.mjs";
-import { defineCommand } from "citty";
-import * as p from "@clack/prompts";
-//#region src/egress.ts
-/**
-* canopy egress — manage the project's outbound-host policy: the allowlist
-* (docs/16-egress-allowlist.md) and the egress mode (docs/25-egress-modes.md).
-* In allowlist mode, worker fetches to hosts outside the list are denied
-* (`egress_denied`) on targets that enforce egress control; open mode allows
-* any public hostname behind a built-in blocklist and an outbound rate limit.
-* Policy lives on the platform, not in canopy.json, so a repo file can never
-* widen egress silently on deploy.
-*/
-function printList({ mode, hosts, denied, enforced }, slug) {
-	if (mode === "open") console.log(`${slug} is in OPEN egress mode — the worker may fetch any public host (the allowlist below is kept but not enforced; \`canopy egress mode allowlist\` restores it).`);
-	if (hosts.length === 0) console.log(`No extra egress hosts for ${slug} — the worker can reach platform hosts only.`);
-	else for (const host of hosts) console.log(host);
-	if (denied.length > 0) {
-		console.log(`\nRecently blocked (allow with \`canopy egress allow <host>\`):`);
-		for (const d of denied) {
-			const why = d.reason === "rate_limited" ? "rate limited" : "blocked";
-			console.log(`  ${d.host}  ×${d.count}  ${why}, last ${formatDateTime(d.last_seen)}`);
-		}
-	}
-	if (!enforced) console.error("(note: this site's target does not enforce egress yet — the policy is recorded for when it does)");
-}
-const listCommand = defineCommand({
-	meta: {
-		name: "list",
-		description: "List the project's allowed outbound hosts"
-	},
-	args: { ...projectDirArgs },
-	run: reportErrors("egress list", async ({ args }) => {
-		const { slug } = resolveProject(args);
-		printList(await apiRequest("GET", `/projects/${slug}/egress`), slug);
-	})
-});
-const allowCommand = defineCommand({
-	meta: {
-		name: "allow",
-		description: "Allow the worker to fetch a host (e.g. api.example.com or *.googleapis.com)"
-	},
-	args: {
-		host: {
-			type: "positional",
-			description: "Hostname to allow",
-			required: true
-		},
-		...projectDirArgs
-	},
-	run: reportErrors("egress allow", async ({ args }) => {
-		const { slug } = resolveProject(args);
-		const current = await apiRequest("GET", `/projects/${slug}/egress`);
-		const updated = await apiRequest("PUT", `/projects/${slug}/egress`, { hosts: [...current.hosts, args.host] });
-		console.log(`Allowed ${args.host} for ${slug} — running workers pick it up now.\n`);
-		printList(updated, slug);
-	})
-});
-const removeCommand = defineCommand({
-	meta: {
-		name: "remove",
-		description: "Remove a host from the allowlist"
-	},
-	args: {
-		host: {
-			type: "positional",
-			description: "Hostname to remove",
-			required: true
-		},
-		...projectDirArgs
-	},
-	run: reportErrors("egress remove", async ({ args }) => {
-		const { slug } = resolveProject(args);
-		const current = await apiRequest("GET", `/projects/${slug}/egress`);
-		const wanted = args.host.trim().toLowerCase();
-		if (!current.hosts.includes(wanted)) {
-			console.error(`${wanted} is not on the allowlist for ${slug} (see \`canopy egress list\`).`);
-			process.exit(1);
-		}
-		const updated = await apiRequest("PUT", `/projects/${slug}/egress`, { hosts: current.hosts.filter((h) => h !== wanted) });
-		console.log(`Removed ${wanted} from ${slug} — running workers stop reaching it now.\n`);
-		printList(updated, slug);
-	})
-});
-/** The plain-language risk summary shown before open mode is enabled (docs/25 §2). */
-function openModeRiskSummary(slug, clientAccess) {
-	const lines = [
-		`Open egress mode lets ${slug}'s worker contact ANY public host:`,
-		"",
-		"  - If the URLs it fetches come from user input, users control where it connects.",
-		"  - Abusive outbound traffic can get the project rate-limited or paused.",
-		"  - A built-in blocklist (private IPs, localhost, cloud metadata) and an",
-		"    outbound rate limit still apply, and every visited host is logged",
-		"    (`canopy egress log`)."
-	];
-	if (clientAccess) lines.push("", "  ! This project has client access enabled — untrusted visitors can drive", "    what the worker fetches.");
-	lines.push("", "It's the right choice for apps that fetch arbitrary user-provided URLs", "(link collectors, feed readers, scrapers). Everything else is better served", "by the allowlist.");
-	return lines.join("\n");
-}
-const egressCommand = defineCommand({
-	meta: {
-		name: "egress",
-		description: "Manage which outbound hosts the project's worker may fetch"
-	},
-	subCommands: {
-		list: listCommand,
-		allow: allowCommand,
-		remove: removeCommand,
-		mode: defineCommand({
-			meta: {
-				name: "mode",
-				description: "Show or switch the egress mode (allowlist | open)"
-			},
-			args: {
-				mode: {
-					type: "positional",
-					description: "allowlist | open (omit to show)",
-					required: false
-				},
-				"accept-risk": {
-					type: "boolean",
-					description: "Acknowledge the open-mode risk summary without an interactive prompt"
-				},
-				...projectDirArgs
-			},
-			run: reportErrors("egress mode", async ({ args }) => {
-				const { slug } = resolveProject(args);
-				const current = await apiRequest("GET", `/projects/${slug}/egress`);
-				const wanted = args.mode?.trim().toLowerCase();
-				if (!wanted) {
-					console.log(current.mode);
-					return;
-				}
-				if (wanted !== "allowlist" && wanted !== "open") {
-					console.error(`unknown mode "${wanted}" — expected allowlist or open.`);
-					process.exit(1);
-				}
-				if (wanted === current.mode) {
-					console.log(`${slug} is already in ${wanted} mode.`);
-					return;
-				}
-				if (wanted === "open") {
-					const access = await apiRequest("GET", `/projects/${slug}/client-password`).catch(() => ({ enabled: false }));
-					console.log(openModeRiskSummary(slug, access.enabled));
-					console.log("");
-					if (!args["accept-risk"]) {
-						requireTty("pass --accept-risk to enable open mode without confirmation.");
-						if (unwrap(await p.text({ message: `Type the project slug ("${slug}") to enable open mode.` })).trim() !== slug) {
-							p.cancel("Aborted — egress mode unchanged.");
-							return;
-						}
-					}
-				}
-				const updated = await withContext(apiRequest("PUT", `/projects/${slug}/egress`, { mode: wanted }), {
-					action: `switch ${slug} to ${wanted} egress mode`,
-					fixes: { owner_only: "Only the project owner can switch egress to open mode — ask them to run this command or flip it in the dashboard." }
-				});
-				if (wanted === "open") {
-					console.log(`Open egress mode is ON for ${slug} — running workers pick it up now.`);
-					console.log(`Switch back anytime with \`canopy egress mode allowlist\`.`);
-				} else {
-					console.log(`Allowlist mode restored for ${slug} — only listed hosts are reachable.\n`);
-					printList(updated, slug);
-				}
-			})
-		}),
-		log: defineCommand({
-			meta: {
-				name: "log",
-				description: "Show the outbound traffic log — hosts the worker actually fetched"
-			},
-			args: { ...projectDirArgs },
-			run: reportErrors("egress log", async ({ args }) => {
-				const { slug } = resolveProject(args);
-				const { visits } = await apiRequest("GET", `/projects/${slug}/egress/log`);
-				if (visits.length === 0) {
-					console.log(`No outbound traffic recorded for ${slug} yet.`);
-					return;
-				}
-				for (const v of visits) console.log(`${v.host}  ×${v.count}  last ${formatDateTime(v.last_seen)}`);
-			})
-		})
-	}
-});
-//#endregion
-export { egressCommand };

package/dist/project-template-DlzMx8Oj.mjs

@@ -1,2 +0,0 @@
-import { a as templateCommand } from "./project-template-DtTfXyLI.mjs";
-export { templateCommand };

package/dist/repo-CmbakFVi.mjs

@@ -1,2 +0,0 @@
-import { a as repoCommand } from "./repo-4x-CJwCp.mjs";
-export { repoCommand };