@mediamonks/canopy-cli 0.7.40 → 0.7.41

package/dist/{ai-EyrXJC5z.mjs → ai-PXXMv7kO.mjs}

@@ -1,5 +1,5 @@
-import { a as apiRequest, l as withContext } from "./api-ArfD6-t5.mjs";
-import { r as reportErrors } from "./ui-CaHgvvkJ.mjs";
+import { a as apiRequest, l as withContext } from "./api-BHzCvDcY.mjs";
+import { r as reportErrors } from "./ui-SBUdC9rX.mjs";
 import { defineCommand } from "citty";
 //#region src/ai.ts
 /**

package/dist/{api-ArfD6-t5.mjs → api-BHzCvDcY.mjs}

@@ -156,6 +156,18 @@ const ERROR_COPY = {
 		why: "the schedule was saved but syncing it to the platform scheduler failed",
 		fix: "Retry the same command — it re-syncs the saved schedule."
 	},
+	fixed_ip_hosts_required: {
+		why: "routing listed hosts through the fixed addresses needs at least one host",
+		fix: "Add a host with `canopy egress fixed-ip add <host>`, or turn it off with `canopy egress fixed-ip off`."
+	},
+	fixed_ip_not_optional: {
+		why: "every request on this site already leaves from the fixed addresses",
+		fix: "There is nothing to set here — `canopy egress fixed-ip` shows the addresses to register."
+	},
+	invalid_fixed_ip_mode: {
+		why: "the fixed outbound address mode must be off, hosts or all",
+		fix: "Use `canopy egress fixed-ip add <host>`, `canopy egress fixed-ip all` or `canopy egress fixed-ip off`."
+	},
 	worker_egress_sync_failed: {
 		why: "the list was saved but redeploying the running worker with it failed",
 		fix: "Retry, or redeploy the project (`canopy deploy`) to apply the new allowlist."

package/dist/{browse-DEhnJAPT.mjs → browse-DRz1DowL.mjs}

@@ -1,5 +1,5 @@
 import { d as tryResolveProject, n as siteConfig } from "./site-DM2J10CB.mjs";
-import { a as apiRequest, t as ApiError } from "./api-ArfD6-t5.mjs";
+import { a as apiRequest, t as ApiError } from "./api-BHzCvDcY.mjs";
 import { defineCommand } from "citty";
 //#region src/browse.ts
 /**

package/dist/{db-DGrCgj-R.mjs → db-5LfBG6N7.mjs}

@@ -1,7 +1,7 @@
 import { c as resolveProject, o as projectFlagArgs } from "./site-DM2J10CB.mjs";
-import { a as apiRequest, l as withContext, r as apiDataRequest } from "./api-ArfD6-t5.mjs";
-import { a as unwrap, i as requireTty, r as reportErrors } from "./ui-CaHgvvkJ.mjs";
-import { n as migrateProject, r as readMigrationFiles, t as describeMigrateResult } from "./migrations-CG_O5Ghw.mjs";
+import { a as apiRequest, l as withContext, r as apiDataRequest } from "./api-BHzCvDcY.mjs";
+import { a as unwrap, i as requireTty, r as reportErrors } from "./ui-SBUdC9rX.mjs";
+import { n as migrateProject, r as readMigrationFiles, t as describeMigrateResult } from "./migrations-DDJ5JJqj.mjs";
 import { defineCommand } from "citty";
 import { readFileSync, writeFileSync } from "node:fs";
 import * as p from "@clack/prompts";

package/dist/{deploy-B7KItUnh.mjs → deploy-6rYq1Iq8.mjs}

@@ -1,7 +1,7 @@
 import { a as projectDirArgs, c as resolveProject, l as stagingUrl, n as siteConfig, o as projectFlagArgs, s as projectUrl, u as tryReadCanopyJson } from "./site-DM2J10CB.mjs";
-import { a as apiRequest, i as apiDownload, l as withContext, r as apiDataRequest } from "./api-ArfD6-t5.mjs";
-import { a as unwrap, r as reportErrors, t as formatDateTime } from "./ui-CaHgvvkJ.mjs";
-import { n as migrateProject, r as readMigrationFiles, t as describeMigrateResult } from "./migrations-CG_O5Ghw.mjs";
+import { a as apiRequest, i as apiDownload, l as withContext, r as apiDataRequest } from "./api-BHzCvDcY.mjs";
+import { a as unwrap, r as reportErrors, t as formatDateTime } from "./ui-SBUdC9rX.mjs";
+import { n as migrateProject, r as readMigrationFiles, t as describeMigrateResult } from "./migrations-DDJ5JJqj.mjs";
 import { builtinModules } from "node:module";
 import { defineCommand } from "citty";
 import { mkdtempSync, readFileSync, readdirSync, rmSync, statSync, writeFileSync } from "node:fs";

package/dist/dev-D38FQ2LD.mjs

@@ -0,0 +1,2 @@
+import { n as devCommand } from "./dev-D_gyIeUq.mjs";
+export { devCommand };

package/dist/{dev-03LA_Etx.mjs → dev-D_gyIeUq.mjs}

@@ -1,7 +1,7 @@
 import { a as projectDirArgs, c as resolveProject, i as projectDialect, n as siteConfig, u as tryReadCanopyJson } from "./site-DM2J10CB.mjs";
-import { a as apiRequest, l as withContext, t as ApiError } from "./api-ArfD6-t5.mjs";
-import { r as reportErrors, t as formatDateTime } from "./ui-CaHgvvkJ.mjs";
-import { r as readMigrationFiles } from "./migrations-CG_O5Ghw.mjs";
+import { a as apiRequest, l as withContext, t as ApiError } from "./api-BHzCvDcY.mjs";
+import { r as reportErrors, t as formatDateTime } from "./ui-SBUdC9rX.mjs";
+import { r as readMigrationFiles } from "./migrations-DDJ5JJqj.mjs";
 import { i as stampWorkerHeaders, n as WORKER_ATTEST_HEADER } from "./src-RUf3Gfuh.mjs";
 import { n as writeDevServerRecord } from "./dev-server-file-Dk9pk4AR.mjs";
 import { createRequire } from "node:module";
@@ -251,7 +251,7 @@ async function devRemote(flags, slug) {
 async function devLocal(flags, slug) {
 	let dump;
 	if (flags.pull) {
-		const { fetchProjectDump } = await import("./local-CkS1XhRu.mjs");
+		const { fetchProjectDump } = await import("./local-Dshy0NsJ.mjs");
 		console.log(`Pulling a fresh export of ${slug}${flags.staging ? " [staging]" : ""}…`);
 		dump = await fetchProjectDump(slug, flags.staging ? "staging" : "live");
 	}
@@ -267,7 +267,7 @@ async function devLocal(flags, slug) {
 		console.log(`Note: ai/services will be unavailable — could not reach the platform (${reason}).`);
 	}
 	const workerAttest = randomBytes(24).toString("base64url");
-	const { createSandbox } = await import("./local-CkS1XhRu.mjs");
+	const { createSandbox } = await import("./local-Dshy0NsJ.mjs");
 	const sandbox = await createSandbox({
 		slug,
 		persistDir: join(flags.dir, ".canopy", "local"),

package/dist/docs/platform-egress.md

@@ -112,12 +112,11 @@ Switching back is one command (`canopy egress mode allowlist`), and the
 dashboard offers to **seed the allowlist from the observed hosts** so
 tightening up later doesn't break the app.
 
-## Allowlisting Canopy on the other side
+## Fixed outbound addresses
 
 Some external services only accept calls from IP addresses you register with
-them first — a partner API, a corporate database, a payment provider's
-allowlist. Projects hosted on **Google Cloud** (the `gcp-pilot` site,
-`canopy.monks.zone`) make every outbound request from a fixed pair of
+them first: a partner API, a corporate database, a payment provider's
+allowlist. Canopy can send your backend's requests from a fixed pair of
 addresses, so you can hand them over:
 
 | Address          |
@@ -126,16 +125,74 @@ addresses, so you can hand them over:
 | `34.158.168.43`  |
 
 Register **both**. Traffic may leave from either one, and the second gives the
-platform room to grow without asking you to update your allowlist. These
-addresses are shared by every project on that site, so registering them lets
-any Canopy project on Google Cloud reach the service — the other service's own
-authentication (API keys, tokens) still decides who gets in.
+platform room to grow without asking you to update the other side. These
+addresses are shared by every project that uses them, so registering them lets
+any Canopy project reach the service. The other service's own authentication
+(API keys, tokens) still decides who gets in.
 
 The addresses are a platform commitment: they will not change without notice
-and a migration period. Projects hosted on Cloudflare have **no** fixed
-outbound address (requests leave from Cloudflare's shared edge), so if a
-service you depend on insists on IP allowlisting, run that project on the
-Google Cloud site.
+and a migration period.
+
+### Route a partner's host
+
+By default requests leave normally, not from these addresses. Route the hosts
+that need them:
+
+```bash
+canopy egress fixed-ip add api.partner.com
+canopy egress fixed-ip              # show the setting and the addresses
+canopy egress fixed-ip remove api.partner.com
+canopy egress fixed-ip off
+```
+
+or in the dashboard: **Backend → Outbound hosts → Fixed outbound addresses**.
+Entries follow the same rules as the allowlist (a bare host or a `*.`
+subdomain wildcard, up to 32). Each request is routed by its own host, so if
+the partner redirects you to a CDN that isn't listed, that second request
+leaves normally. The setting applies to the running worker right away, to
+both channels, and to scheduled runs as well as HTTP requests.
+
+Only the **project owner** can turn the setting on or route all traffic. Any
+member can change the listed hosts or turn it off.
+
+**Routing a host doesn't allow it.** In allowlist mode the host still has to be
+on the allowlist, or requests to it are denied as usual. The dashboard and
+`canopy egress fixed-ip` flag routed hosts that aren't allowed and offer to
+allow them. The setting works in open mode too.
+
+### All traffic
+
+`canopy egress fixed-ip all` sends **every** outbound request from the fixed
+addresses. It's there for apps that can't list their partners up front, but
+it's rarely the better choice: every request takes the slower route, counts
+toward the daily quota, and leaves from addresses shared with other projects.
+List the hosts that need it instead when you can.
+
+### What to expect
+
+- **A little latency.** A routed request makes an extra hop, usually tens of
+  milliseconds. The first routed request after a quiet spell (about 15
+  minutes) can take a second or two longer while the route wakes up. Give
+  tight partner timeouts some slack.
+- **A daily transfer quota.** What a project sends and receives through the
+  fixed addresses counts toward 1 GB a day, shown on the **Usage** tab. Once
+  it's used up, routed requests are refused until 00:00 UTC; everything else
+  keeps working. Ask the platform team if you need more.
+- **`fetch` only.** Raw socket connections (`connect()`) and outbound
+  WebSockets don't leave from the fixed addresses.
+- **Uploads up to 32 MB.** A larger request body to a routed host is refused.
+
+On some sites every request of every project already leaves from these
+addresses. There the setting shows as always on and there is nothing to set.
+
+### Errors from routed requests
+
+| Status | `error`                          | What it means                                                                                    |
+| ------ | -------------------------------- | ------------------------------------------------------------------------------------------------ |
+| 429    | `egress_fixed_ip_quota_exceeded` | Today's fixed-address quota is used up. Routed requests work again at 00:00 UTC.                 |
+| 502    | `egress_fixed_ip_unavailable`    | The fixed-address route couldn't send the request. Nothing went out from another address; retry. |
+| 413    | `egress_fixed_ip_body_too_large` | The request body is over 32 MB.                                                                  |
+| 403    | `egress_denied`                  | As always: the host isn't allowed, or it resolves to a private address.                          |
 
 ## The outbound traffic log
 

package/dist/docs/troubleshooting.md

@@ -75,6 +75,22 @@ or use dashboard Settings → Outbound hosts. Details and entry rules:
 [Outbound requests](https://docs.canopy.website/platform/egress). Calls made through the SDK /
 `env.CANOPY.fetch` don't count as egress and are unaffected.
 
+## `egress_fixed_ip_quota_exceeded` (429)
+
+The project used up today's transfer through the
+[fixed outbound addresses](https://docs.canopy.website/platform/egress#fixed-outbound-addresses). Routed
+requests are refused until 00:00 UTC; requests to other hosts keep working.
+`canopy usage` and the dashboard's Usage tab show how much was sent. If routing
+all traffic used it up, list only the hosts that need a fixed address
+(`canopy egress fixed-ip add <host>`).
+
+## `egress_fixed_ip_unavailable` (502)
+
+A request to a host routed through the fixed outbound addresses couldn't be
+sent that way. It never went out from another address, so the partner didn't
+see it. Retry; if it keeps happening, the detail says why (and the platform
+team hears about it).
+
 ## The worker returns errors and you can't see why
 
 Read its console output instead of adding diagnostic endpoints:

package/dist/{docs-B0-IEPjd.mjs → docs-B9xGnLSR.mjs}

@@ -1,8 +1,8 @@
-import { t as version } from "./package-C1xCnyOB.mjs";
+import { t as version } from "./package-SWgTmctH.mjs";
 import { n as siteConfig } from "./site-DM2J10CB.mjs";
 import { i as latestKnownVersion, r as compareSemver } from "./version-check-CcsA1QjI.mjs";
-import { n as agentHeaders } from "./api-ArfD6-t5.mjs";
-import { r as reportErrors } from "./ui-CaHgvvkJ.mjs";
+import { n as agentHeaders } from "./api-BHzCvDcY.mjs";
+import { r as reportErrors } from "./ui-SBUdC9rX.mjs";
 import { defineCommand } from "citty";
 import { existsSync, mkdirSync, readFileSync, readdirSync, writeFileSync } from "node:fs";
 import { homedir } from "node:os";

package/dist/egress-CCpOsYpS.mjs

@@ -0,0 +1,397 @@
+import { a as projectDirArgs, c as resolveProject } from "./site-DM2J10CB.mjs";
+import { a as apiRequest, l as withContext } from "./api-BHzCvDcY.mjs";
+import { a as unwrap, i as requireTty, r as reportErrors, t as formatDateTime } from "./ui-SBUdC9rX.mjs";
+import { defineCommand } from "citty";
+import * as p from "@clack/prompts";
+//#region src/egress.ts
+/**
+* canopy egress — manage the project's outbound-host policy: the allowlist
+* (docs/16-egress-allowlist.md) and the egress mode (docs/25-egress-modes.md).
+* In allowlist mode, worker fetches to hosts outside the list are denied
+* (`egress_denied`) on targets that enforce egress control; open mode allows
+* any public hostname behind a built-in blocklist and an outbound rate limit.
+* Policy lives on the platform, not in canopy.json, so a repo file can never
+* widen egress silently on deploy.
+*/
+function printList({ mode, hosts, denied, enforced }, slug) {
+	if (mode === "open") console.log(`${slug} is in OPEN egress mode — the worker may fetch any public host (the allowlist below is kept but not enforced; \`canopy egress mode allowlist\` restores it).`);
+	if (hosts.length === 0) console.log(`No extra egress hosts for ${slug} — the worker can reach platform hosts only.`);
+	else for (const host of hosts) console.log(host);
+	if (denied.length > 0) {
+		console.log(`\nRecently blocked (allow with \`canopy egress allow <host>\`):`);
+		for (const d of denied) {
+			const why = d.reason === "rate_limited" ? "rate limited" : "blocked";
+			console.log(`  ${d.host}  ×${d.count}  ${why}, last ${formatDateTime(d.last_seen)}`);
+		}
+	}
+	if (!enforced) console.error("(note: this site's target does not enforce egress yet — the policy is recorded for when it does)");
+}
+const listCommand = defineCommand({
+	meta: {
+		name: "list",
+		description: "List the project's allowed outbound hosts"
+	},
+	args: { ...projectDirArgs },
+	run: reportErrors("egress list", async ({ args }) => {
+		const { slug } = resolveProject(args);
+		printList(await apiRequest("GET", `/projects/${slug}/egress`), slug);
+	})
+});
+const allowCommand = defineCommand({
+	meta: {
+		name: "allow",
+		description: "Allow the worker to fetch a host (e.g. api.example.com or *.googleapis.com)"
+	},
+	args: {
+		host: {
+			type: "positional",
+			description: "Hostname to allow",
+			required: true
+		},
+		...projectDirArgs
+	},
+	run: reportErrors("egress allow", async ({ args }) => {
+		const { slug } = resolveProject(args);
+		const current = await apiRequest("GET", `/projects/${slug}/egress`);
+		const updated = await apiRequest("PUT", `/projects/${slug}/egress`, { hosts: [...current.hosts, args.host] });
+		console.log(`Allowed ${args.host} for ${slug} — running workers pick it up now.\n`);
+		printList(updated, slug);
+	})
+});
+const removeCommand = defineCommand({
+	meta: {
+		name: "remove",
+		description: "Remove a host from the allowlist"
+	},
+	args: {
+		host: {
+			type: "positional",
+			description: "Hostname to remove",
+			required: true
+		},
+		...projectDirArgs
+	},
+	run: reportErrors("egress remove", async ({ args }) => {
+		const { slug } = resolveProject(args);
+		const current = await apiRequest("GET", `/projects/${slug}/egress`);
+		const wanted = args.host.trim().toLowerCase();
+		if (!current.hosts.includes(wanted)) {
+			console.error(`${wanted} is not on the allowlist for ${slug} (see \`canopy egress list\`).`);
+			process.exit(1);
+		}
+		const updated = await apiRequest("PUT", `/projects/${slug}/egress`, { hosts: current.hosts.filter((h) => h !== wanted) });
+		console.log(`Removed ${wanted} from ${slug} — running workers stop reaching it now.\n`);
+		printList(updated, slug);
+	})
+});
+/** The plain-language risk summary shown before open mode is enabled (docs/25 §2). */
+function openModeRiskSummary(slug, clientAccess) {
+	const lines = [
+		`Open egress mode lets ${slug}'s worker contact ANY public host:`,
+		"",
+		"  - If the URLs it fetches come from user input, users control where it connects.",
+		"  - Abusive outbound traffic can get the project rate-limited or paused.",
+		"  - A built-in blocklist (private IPs, localhost, cloud metadata) and an",
+		"    outbound rate limit still apply, and every visited host is logged",
+		"    (`canopy egress log`)."
+	];
+	if (clientAccess) lines.push("", "  ! This project has client access enabled — untrusted visitors can drive", "    what the worker fetches.");
+	lines.push("", "It's the right choice for apps that fetch arbitrary user-provided URLs", "(link collectors, feed readers, scrapers). Everything else is better served", "by the allowlist.");
+	return lines.join("\n");
+}
+const modeCommand = defineCommand({
+	meta: {
+		name: "mode",
+		description: "Show or switch the egress mode (allowlist | open)"
+	},
+	args: {
+		mode: {
+			type: "positional",
+			description: "allowlist | open (omit to show)",
+			required: false
+		},
+		"accept-risk": {
+			type: "boolean",
+			description: "Acknowledge the open-mode risk summary without an interactive prompt"
+		},
+		...projectDirArgs
+	},
+	run: reportErrors("egress mode", async ({ args }) => {
+		const { slug } = resolveProject(args);
+		const current = await apiRequest("GET", `/projects/${slug}/egress`);
+		const wanted = args.mode?.trim().toLowerCase();
+		if (!wanted) {
+			console.log(current.mode);
+			return;
+		}
+		if (wanted !== "allowlist" && wanted !== "open") {
+			console.error(`unknown mode "${wanted}" — expected allowlist or open.`);
+			process.exit(1);
+		}
+		if (wanted === current.mode) {
+			console.log(`${slug} is already in ${wanted} mode.`);
+			return;
+		}
+		if (wanted === "open") {
+			const access = await apiRequest("GET", `/projects/${slug}/client-password`).catch(() => ({ enabled: false }));
+			console.log(openModeRiskSummary(slug, access.enabled));
+			console.log("");
+			if (!args["accept-risk"]) {
+				requireTty("pass --accept-risk to enable open mode without confirmation.");
+				if (unwrap(await p.text({ message: `Type the project slug ("${slug}") to enable open mode.` })).trim() !== slug) {
+					p.cancel("Aborted — egress mode unchanged.");
+					return;
+				}
+			}
+		}
+		const updated = await withContext(apiRequest("PUT", `/projects/${slug}/egress`, { mode: wanted }), {
+			action: `switch ${slug} to ${wanted} egress mode`,
+			fixes: { owner_only: "Only the project owner can switch egress to open mode — ask them to run this command or flip it in the dashboard." }
+		});
+		if (wanted === "open") {
+			console.log(`Open egress mode is ON for ${slug} — running workers pick it up now.`);
+			console.log(`Switch back anytime with \`canopy egress mode allowlist\`.`);
+		} else {
+			console.log(`Allowlist mode restored for ${slug} — only listed hosts are reachable.\n`);
+			printList(updated, slug);
+		}
+	})
+});
+const logCommand = defineCommand({
+	meta: {
+		name: "log",
+		description: "Show the outbound traffic log — hosts the worker actually fetched"
+	},
+	args: { ...projectDirArgs },
+	run: reportErrors("egress log", async ({ args }) => {
+		const { slug } = resolveProject(args);
+		const { visits } = await apiRequest("GET", `/projects/${slug}/egress/log`);
+		if (visits.length === 0) {
+			console.log(`No outbound traffic recorded for ${slug} yet.`);
+			return;
+		}
+		for (const v of visits) console.log(`${v.host}  ×${v.count}  last ${formatDateTime(v.last_seen)}`);
+	})
+});
+/** The note `all` prints: what routing every request costs. */
+const FIXED_IP_ALL_NOTE = [
+	"Every outbound request now leaves from the fixed addresses. That means:",
+	"  - each request takes a slower route (an extra hop, and a cold start after idle),",
+	"  - it all counts toward the daily fixed-address transfer quota,",
+	"  - and it leaves from addresses shared with other projects.",
+	"Listing only the hosts that need a fixed address (`canopy egress fixed-ip add <host>`)",
+	"is usually the better choice."
+].join("\n");
+/** `canopy egress fixed-ip` with no argument: mode, hosts, addresses, flags. */
+function renderFixedIp(view, slug, egressMode) {
+	const lines = [];
+	const addresses = view.addresses.join(", ");
+	if (!view.optional) {
+		lines.push(`Every outbound request of ${slug} leaves from the fixed addresses: ${addresses}`);
+		lines.push("Ask partners to allow both. There is nothing to set on this site.");
+		return lines.join("\n");
+	}
+	if (view.mode === "off") {
+		lines.push(`Fixed outbound addresses are off for ${slug} — requests leave normally.`);
+		lines.push(`Route a partner's host through ${addresses} with \`canopy egress fixed-ip add <host>\`.`);
+		return lines.join("\n");
+	}
+	if (view.mode === "all") lines.push(`Every outbound request of ${slug} leaves from: ${addresses}`);
+	else {
+		lines.push(`Requests of ${slug} to these hosts leave from ${addresses}:`);
+		for (const host of view.hosts) {
+			const flag = view.notAllowed.includes(host) ? "  (not allowed — requests are denied)" : "";
+			lines.push(`  ${host}${flag}`);
+		}
+	}
+	if (view.notAllowed.length > 0 && egressMode === "allowlist") lines.push(`Routing doesn't allow a host: add it with \`canopy egress allow <host>\` to reach it.`);
+	return lines.join("\n");
+}
+/** The PUT body `add` sends; from off it starts a fresh list with just this host. */
+function fixedIpAddBody(view, host) {
+	if (view.mode === "off") return {
+		mode: "hosts",
+		hosts: [host]
+	};
+	return { hosts: [...view.hosts, host] };
+}
+/** The PUT body `remove` sends, or null when the host isn't routed. */
+function fixedIpRemoveBody(view, host) {
+	const wanted = host.trim().toLowerCase();
+	if (!view.hosts.includes(wanted)) return null;
+	const hosts = view.hosts.filter((h) => h !== wanted);
+	return view.mode === "hosts" && hosts.length === 0 ? {
+		mode: "off",
+		hosts
+	} : { hosts };
+}
+const FIXED_IP_FIXES = {
+	owner_only: "Only the project owner can turn on fixed outbound addresses or route all traffic — ask them to run this command or turn it on in the dashboard.",
+	fixed_ip_not_optional: "Every request on this site already leaves from the fixed addresses — `canopy egress fixed-ip` shows them.",
+	not_supported_on_target: "This site has no fixed outbound addresses: it runs no project backends to send from them."
+};
+/** The current setting, or a clear exit where the site offers none. */
+async function loadFixedIp(slug) {
+	const egress = await apiRequest("GET", `/projects/${slug}/egress`);
+	if (!egress.fixedIp) {
+		console.error(egress.fixedIp === void 0 ? "This site's API predates fixed outbound addresses." : "This site has no fixed outbound addresses (it runs no project backends).");
+		process.exit(1);
+	}
+	return {
+		egress,
+		view: egress.fixedIp
+	};
+}
+function putFixedIp(slug, fixedIp, action) {
+	return withContext(apiRequest("PUT", `/projects/${slug}/egress`, { fixedIp }), {
+		action,
+		fixes: FIXED_IP_FIXES
+	});
+}
+function requireOptional(view, slug) {
+	if (view.optional) return;
+	console.log(renderFixedIp(view, slug, "allowlist"));
+	process.exit(0);
+}
+let fixedIpSubcommandRan = false;
+const fixedIpAddCommand = defineCommand({
+	meta: {
+		name: "add",
+		description: "Route a host through the fixed addresses (turns the setting on)"
+	},
+	args: {
+		host: {
+			type: "positional",
+			description: "Hostname (api.partner.com or *.partner.com)",
+			required: true
+		},
+		allow: {
+			type: "boolean",
+			description: "Also add the host to the allowlist when it isn't on it"
+		},
+		...projectDirArgs
+	},
+	run: reportErrors("egress fixed-ip add", async ({ args }) => {
+		fixedIpSubcommandRan = true;
+		const { slug } = resolveProject(args);
+		const { egress, view } = await loadFixedIp(slug);
+		requireOptional(view, slug);
+		const updated = await putFixedIp(slug, fixedIpAddBody(view, args.host), `route ${args.host} through the fixed addresses for ${slug}`);
+		const fixed = updated.fixedIp;
+		console.log(`Requests of ${slug} to ${args.host} now leave from the fixed addresses.`);
+		console.log(`Ask the partner to allow both: ${fixed.addresses.join(", ")}\n`);
+		if (fixed.mode === "all") console.log("(All traffic is routed right now, so this host's requests already were.)\n");
+		const host = fixed.hosts.find((h) => h === args.host.trim().toLowerCase()) ?? args.host;
+		if (egress.mode === "allowlist" && fixed.notAllowed.includes(host)) {
+			let allow = Boolean(args.allow);
+			if (!allow && process.stdin.isTTY) allow = unwrap(await p.confirm({
+				message: `${host} isn't on the allowlist, so requests to it are denied. Allow it now?`,
+				initialValue: true
+			}));
+			if (allow) {
+				const allowed = await apiRequest("PUT", `/projects/${slug}/egress`, { hosts: [...egress.hosts, host] });
+				console.log(`Allowed ${host} too.\n`);
+				console.log(renderFixedIp(allowed.fixedIp, slug, allowed.mode));
+				return;
+			}
+		}
+		console.log(renderFixedIp(fixed, slug, updated.mode));
+	})
+});
+const fixedIpRemoveCommand = defineCommand({
+	meta: {
+		name: "remove",
+		description: "Stop routing a host through the fixed addresses"
+	},
+	args: {
+		host: {
+			type: "positional",
+			description: "Hostname to stop routing",
+			required: true
+		},
+		...projectDirArgs
+	},
+	run: reportErrors("egress fixed-ip remove", async ({ args }) => {
+		fixedIpSubcommandRan = true;
+		const { slug } = resolveProject(args);
+		const { view } = await loadFixedIp(slug);
+		requireOptional(view, slug);
+		const body = fixedIpRemoveBody(view, args.host);
+		if (!body) {
+			console.error(`${args.host.trim().toLowerCase()} isn't routed through the fixed addresses for ${slug} (see \`canopy egress fixed-ip\`).`);
+			process.exit(1);
+		}
+		const updated = await putFixedIp(slug, body, `stop routing ${args.host} for ${slug}`);
+		console.log(body.mode === "off" ? `That was the last routed host — fixed outbound addresses are off for ${slug}.` : `Requests of ${slug} to ${args.host} leave normally again.\n`);
+		if (body.mode !== "off") console.log(renderFixedIp(updated.fixedIp, slug, updated.mode));
+	})
+});
+const fixedIpAllCommand = defineCommand({
+	meta: {
+		name: "all",
+		description: "Send every outbound request from the fixed addresses"
+	},
+	args: { ...projectDirArgs },
+	run: reportErrors("egress fixed-ip all", async ({ args }) => {
+		fixedIpSubcommandRan = true;
+		const { slug } = resolveProject(args);
+		const { view } = await loadFixedIp(slug);
+		requireOptional(view, slug);
+		console.log(`${FIXED_IP_ALL_NOTE}\n`);
+		const updated = await putFixedIp(slug, { mode: "all" }, `route all of ${slug}'s requests through the fixed addresses`);
+		console.log(renderFixedIp(updated.fixedIp, slug, updated.mode));
+	})
+});
+const fixedIpOffCommand = defineCommand({
+	meta: {
+		name: "off",
+		description: "Turn fixed outbound addresses off — requests leave normally"
+	},
+	args: { ...projectDirArgs },
+	run: reportErrors("egress fixed-ip off", async ({ args }) => {
+		fixedIpSubcommandRan = true;
+		const { slug } = resolveProject(args);
+		const { view } = await loadFixedIp(slug);
+		requireOptional(view, slug);
+		if (view.mode === "off") {
+			console.log(`Fixed outbound addresses are already off for ${slug}.`);
+			return;
+		}
+		await putFixedIp(slug, { mode: "off" }, `turn fixed outbound addresses off for ${slug}`);
+		console.log(`Fixed outbound addresses are off for ${slug} — requests leave normally now.`);
+	})
+});
+const showFixedIp = reportErrors("egress fixed-ip", async ({ args }) => {
+	const { slug } = resolveProject(args);
+	const { egress, view } = await loadFixedIp(slug);
+	console.log(renderFixedIp(view, slug, egress.mode));
+});
+const egressCommand = defineCommand({
+	meta: {
+		name: "egress",
+		description: "Manage which outbound hosts the project's worker may fetch"
+	},
+	subCommands: {
+		list: listCommand,
+		allow: allowCommand,
+		remove: removeCommand,
+		mode: modeCommand,
+		log: logCommand,
+		"fixed-ip": defineCommand({
+			meta: {
+				name: "fixed-ip",
+				description: "Show or change which requests leave from Canopy's fixed outbound addresses"
+			},
+			args: { ...projectDirArgs },
+			subCommands: {
+				add: fixedIpAddCommand,
+				remove: fixedIpRemoveCommand,
+				all: fixedIpAllCommand,
+				off: fixedIpOffCommand
+			},
+			run: (context) => fixedIpSubcommandRan ? void 0 : showFixedIp(context)
+		})
+	}
+});
+//#endregion
+export { egressCommand };

package/dist/{feedback-BsJ_6ke2.mjs → feedback-CdjtPumG.mjs}

@@ -1,7 +1,7 @@
-import { t as version } from "./package-C1xCnyOB.mjs";
+import { t as version } from "./package-SWgTmctH.mjs";
 import { a as projectDirArgs, c as resolveProject, d as tryResolveProject, n as siteConfig, u as tryReadCanopyJson } from "./site-DM2J10CB.mjs";
-import { a as apiRequest, c as credentials, i as apiDownload, o as apiUpload, s as commonHeaders } from "./api-ArfD6-t5.mjs";
-import { r as reportErrors, t as formatDateTime } from "./ui-CaHgvvkJ.mjs";
+import { a as apiRequest, c as credentials, i as apiDownload, o as apiUpload, s as commonHeaders } from "./api-BHzCvDcY.mjs";
+import { r as reportErrors, t as formatDateTime } from "./ui-SBUdC9rX.mjs";
 import { defineCommand } from "citty";
 import { basename, extname, join } from "node:path";
 import { readFile, writeFile } from "node:fs/promises";

package/dist/index.mjs

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { t as version } from "./package-C1xCnyOB.mjs";
+import { t as version } from "./package-SWgTmctH.mjs";
 import { r as siteHeaderLine, t as setInvocationProfile } from "./site-DM2J10CB.mjs";
 import { a as notifyOfUpdate, o as runRefresh } from "./version-check-CcsA1QjI.mjs";
 import { defineCommand, runMain } from "citty";
@@ -63,36 +63,36 @@ const main = defineCommand({
 		description: "canopy — create and deploy vibecoded projects"
 	},
 	subCommands: {
-		login: () => import("./login-B2FJGIrD.mjs").then((m) => m.loginCommand),
-		whoami: () => import("./login-B2FJGIrD.mjs").then((m) => m.whoamiCommand),
-		logout: () => import("./login-B2FJGIrD.mjs").then((m) => m.logoutCommand),
-		create: () => import("./projects-B3Wi01lw.mjs").then((m) => m.createCommand),
-		init: () => import("./projects-B3Wi01lw.mjs").then((m) => m.initCommand),
-		projects: () => import("./projects-B3Wi01lw.mjs").then((m) => m.projectsCommand),
-		delete: () => import("./projects-B3Wi01lw.mjs").then((m) => m.deleteCommand),
-		dev: () => import("./dev-dJ88L73Y.mjs").then((m) => m.devCommand),
-		deploy: () => import("./deploy-B7KItUnh.mjs").then((m) => m.deployCommand),
-		promote: () => import("./deploy-B7KItUnh.mjs").then((m) => m.promoteCommand),
-		staging: () => import("./staging-ypR79MlD.mjs").then((m) => m.stagingCommand),
-		rollback: () => import("./deploy-B7KItUnh.mjs").then((m) => m.rollbackCommand),
-		download: () => import("./deploy-B7KItUnh.mjs").then((m) => m.downloadCommand),
-		token: () => import("./token-CDrHQ5Xb.mjs").then((m) => m.tokenCommand),
-		egress: () => import("./egress-CzxRD6Tp.mjs").then((m) => m.egressCommand),
-		secrets: () => import("./secrets-CmY4dUHz.mjs").then((m) => m.secretsCommand),
-		schedule: () => import("./schedule-CbaDIJXr.mjs").then((m) => m.scheduleCommand),
-		feedback: () => import("./feedback-BsJ_6ke2.mjs").then((m) => m.feedbackCommand),
-		db: () => import("./db-DGrCgj-R.mjs").then((m) => m.dbCommand),
-		usage: () => import("./usage-CP8rBVZi.mjs").then((m) => m.usageCommand),
-		ai: () => import("./ai-EyrXJC5z.mjs").then((m) => m.aiCommand),
-		open: () => import("./open-COFMburt.mjs").then((m) => m.openCommand),
-		browse: () => import("./browse-DEhnJAPT.mjs").then((m) => m.browseCommand),
-		docs: () => import("./docs-B0-IEPjd.mjs").then((m) => m.docsCommand),
-		skill: () => import("./skill-AqZYYsE6.mjs").then((m) => m.skillCommand),
-		upgrade: () => import("./upgrade-DSjmifH_.mjs").then((m) => m.upgradeCommand),
-		logs: () => import("./logs-wSKh_FmL.mjs").then((m) => m.logsCommand),
-		mcp: () => import("./mcp-DtRIDtaL.mjs").then((m) => m.mcpCommand),
-		repo: () => import("./repo-CmbakFVi.mjs").then((m) => m.repoCommand),
-		template: () => import("./project-template-DlzMx8Oj.mjs").then((m) => m.templateCommand)
+		login: () => import("./login-CKNFCp7c.mjs").then((m) => m.loginCommand),
+		whoami: () => import("./login-CKNFCp7c.mjs").then((m) => m.whoamiCommand),
+		logout: () => import("./login-CKNFCp7c.mjs").then((m) => m.logoutCommand),
+		create: () => import("./projects-naWQ89Qj.mjs").then((m) => m.createCommand),
+		init: () => import("./projects-naWQ89Qj.mjs").then((m) => m.initCommand),
+		projects: () => import("./projects-naWQ89Qj.mjs").then((m) => m.projectsCommand),
+		delete: () => import("./projects-naWQ89Qj.mjs").then((m) => m.deleteCommand),
+		dev: () => import("./dev-D38FQ2LD.mjs").then((m) => m.devCommand),
+		deploy: () => import("./deploy-6rYq1Iq8.mjs").then((m) => m.deployCommand),
+		promote: () => import("./deploy-6rYq1Iq8.mjs").then((m) => m.promoteCommand),
+		staging: () => import("./staging-CYMTZyyM.mjs").then((m) => m.stagingCommand),
+		rollback: () => import("./deploy-6rYq1Iq8.mjs").then((m) => m.rollbackCommand),
+		download: () => import("./deploy-6rYq1Iq8.mjs").then((m) => m.downloadCommand),
+		token: () => import("./token-CCpJ1ES4.mjs").then((m) => m.tokenCommand),
+		egress: () => import("./egress-CCpOsYpS.mjs").then((m) => m.egressCommand),
+		secrets: () => import("./secrets-COwRvCev.mjs").then((m) => m.secretsCommand),
+		schedule: () => import("./schedule-DjHcaxyt.mjs").then((m) => m.scheduleCommand),
+		feedback: () => import("./feedback-CdjtPumG.mjs").then((m) => m.feedbackCommand),
+		db: () => import("./db-5LfBG6N7.mjs").then((m) => m.dbCommand),
+		usage: () => import("./usage-BSPnsMXd.mjs").then((m) => m.usageCommand),
+		ai: () => import("./ai-PXXMv7kO.mjs").then((m) => m.aiCommand),
+		open: () => import("./open-BPYozPQo.mjs").then((m) => m.openCommand),
+		browse: () => import("./browse-DRz1DowL.mjs").then((m) => m.browseCommand),
+		docs: () => import("./docs-B9xGnLSR.mjs").then((m) => m.docsCommand),
+		skill: () => import("./skill-DSYQA4Ls.mjs").then((m) => m.skillCommand),
+		upgrade: () => import("./upgrade-B_tLCpc4.mjs").then((m) => m.upgradeCommand),
+		logs: () => import("./logs-D3WakFME.mjs").then((m) => m.logsCommand),
+		mcp: () => import("./mcp-CoVS5Mj3.mjs").then((m) => m.mcpCommand),
+		repo: () => import("./repo-Un_p617X.mjs").then((m) => m.repoCommand),
+		template: () => import("./project-template-CMgD5hnV.mjs").then((m) => m.templateCommand)
 	}
 });
 const quiet = process.argv[2] === "mcp" && process.argv[3] === "serve" || process.argv[2] === "repo" && process.argv[3] === "credential";

package/dist/{local-CkS1XhRu.mjs → local-Dshy0NsJ.mjs}

@@ -1,6 +1,6 @@
-import { r as apiDataRequest } from "./api-ArfD6-t5.mjs";
+import { r as apiDataRequest } from "./api-BHzCvDcY.mjs";
 import { a as realtimeRouter, c as META_COLUMNS, l as blobRouter, n as WORKER_ATTEST_HEADER, o as dbRouter, s as hasPrivateNames } from "./src-RUf3Gfuh.mjs";
-import { a as rewriteApiPath } from "./dev-03LA_Etx.mjs";
+import { a as rewriteApiPath } from "./dev-D_gyIeUq.mjs";
 import { createRequire } from "node:module";
 import { existsSync, mkdirSync, readFileSync, readdirSync, rmSync, statSync, writeFileSync } from "node:fs";
 import { dirname, join, relative, sep } from "node:path";

package/dist/{login-B2FJGIrD.mjs → login-CKNFCp7c.mjs}

@@ -1,6 +1,6 @@
 import { _ as writeConfigFile, f as clearAllProfileTokens, g as upsertProfileAuth, h as setActiveProfile, m as readConfigFile, n as siteConfig, p as listBakedProfiles, v as getBakedProfile, y as isProfileId } from "./site-DM2J10CB.mjs";
-import { n as agentHeaders } from "./api-ArfD6-t5.mjs";
-import { n as openBrowser, r as reportErrors } from "./ui-CaHgvvkJ.mjs";
+import { n as agentHeaders } from "./api-BHzCvDcY.mjs";
+import { n as openBrowser, r as reportErrors } from "./ui-SBUdC9rX.mjs";
 import { n as clearRepoTokenCache } from "./repo-credential-CNDRM-tG.mjs";
 import { defineCommand } from "citty";
 import { hostname } from "node:os";

package/dist/{logs-wSKh_FmL.mjs → logs-D3WakFME.mjs}

@@ -1,6 +1,6 @@
 import { c as resolveProject, o as projectFlagArgs } from "./site-DM2J10CB.mjs";
-import { a as apiRequest, l as withContext } from "./api-ArfD6-t5.mjs";
-import { r as reportErrors } from "./ui-CaHgvvkJ.mjs";
+import { a as apiRequest, l as withContext } from "./api-BHzCvDcY.mjs";
+import { r as reportErrors } from "./ui-SBUdC9rX.mjs";
 import { defineCommand } from "citty";
 //#region src/logs.ts
 /**

package/dist/{mcp-DtRIDtaL.mjs → mcp-CoVS5Mj3.mjs}

@@ -1,6 +1,6 @@
-import { t as version } from "./package-C1xCnyOB.mjs";
+import { t as version } from "./package-SWgTmctH.mjs";
 import { d as tryResolveProject, l as stagingUrl, n as siteConfig, s as projectUrl } from "./site-DM2J10CB.mjs";
-import { a as apiRequest, t as ApiError } from "./api-ArfD6-t5.mjs";
+import { a as apiRequest, t as ApiError } from "./api-BHzCvDcY.mjs";
 import { t as liveDevServer } from "./dev-server-file-Dk9pk4AR.mjs";
 import { defineCommand } from "citty";
 import { serveStdio } from "@modelcontextprotocol/server/stdio";

package/dist/{migrations-CG_O5Ghw.mjs → migrations-DDJ5JJqj.mjs}

@@ -1,5 +1,5 @@
 import { u as tryReadCanopyJson } from "./site-DM2J10CB.mjs";
-import { r as apiDataRequest } from "./api-ArfD6-t5.mjs";
+import { r as apiDataRequest } from "./api-BHzCvDcY.mjs";
 import { readFileSync, readdirSync } from "node:fs";
 import { join, resolve } from "node:path";
 //#region src/migrations.ts

package/dist/{open-COFMburt.mjs → open-BPYozPQo.mjs}

@@ -1,5 +1,5 @@
 import { a as projectDirArgs, c as resolveProject, l as stagingUrl, s as projectUrl } from "./site-DM2J10CB.mjs";
-import { n as openBrowser, r as reportErrors } from "./ui-CaHgvvkJ.mjs";
+import { n as openBrowser, r as reportErrors } from "./ui-SBUdC9rX.mjs";
 import { defineCommand } from "citty";
 //#region src/open.ts
 /**

package/dist/{package-C1xCnyOB.mjs → package-SWgTmctH.mjs}

@@ -1,4 +1,4 @@
 //#region package.json
-var version = "0.7.40";
+var version = "0.7.41";
 //#endregion
 export { version as t };

package/dist/project-template-CMgD5hnV.mjs

@@ -0,0 +1,2 @@
+import { a as templateCommand } from "./project-template-DACdMdpn.mjs";
+export { templateCommand };

package/dist/{project-template-DtTfXyLI.mjs → project-template-DACdMdpn.mjs}

@@ -1,6 +1,6 @@
 import { a as projectDirArgs, c as resolveProject } from "./site-DM2J10CB.mjs";
-import { a as apiRequest, l as withContext } from "./api-ArfD6-t5.mjs";
-import { a as unwrap, i as requireTty, r as reportErrors } from "./ui-CaHgvvkJ.mjs";
+import { a as apiRequest, l as withContext } from "./api-BHzCvDcY.mjs";
+import { a as unwrap, i as requireTty, r as reportErrors } from "./ui-SBUdC9rX.mjs";
 import { defineCommand } from "citty";
 import * as p from "@clack/prompts";
 /** Plain words for the API's template errors. */

package/dist/{projects-B3Wi01lw.mjs → projects-naWQ89Qj.mjs}

@@ -1,8 +1,8 @@
 import { n as siteConfig, s as projectUrl, u as tryReadCanopyJson } from "./site-DM2J10CB.mjs";
-import { a as apiRequest, l as withContext } from "./api-ArfD6-t5.mjs";
-import { a as unwrap, i as requireTty, r as reportErrors } from "./ui-CaHgvvkJ.mjs";
-import { i as nextSteps, n as describeCopy, r as fetchTemplate, t as TEMPLATE_FIXES } from "./project-template-DtTfXyLI.mjs";
-import { i as offerRepoOnCreate, n as cloneProjectRepo } from "./repo-4x-CJwCp.mjs";
+import { a as apiRequest, l as withContext } from "./api-BHzCvDcY.mjs";
+import { a as unwrap, i as requireTty, r as reportErrors } from "./ui-SBUdC9rX.mjs";
+import { i as nextSteps, n as describeCopy, r as fetchTemplate, t as TEMPLATE_FIXES } from "./project-template-DACdMdpn.mjs";
+import { i as offerRepoOnCreate, n as cloneProjectRepo } from "./repo-BCua4L-I.mjs";
 import { defineCommand } from "citty";
 import { existsSync, mkdirSync, readFileSync, readdirSync, writeFileSync } from "node:fs";
 import { join, relative, resolve, sep } from "node:path";

package/dist/{repo-4x-CJwCp.mjs → repo-BCua4L-I.mjs}

@@ -1,6 +1,6 @@
 import { a as projectDirArgs, c as resolveProject, n as siteConfig, u as tryReadCanopyJson } from "./site-DM2J10CB.mjs";
-import { a as apiRequest, l as withContext, n as agentHeaders } from "./api-ArfD6-t5.mjs";
-import { a as unwrap, i as requireTty, r as reportErrors, t as formatDateTime } from "./ui-CaHgvvkJ.mjs";
+import { a as apiRequest, l as withContext, n as agentHeaders } from "./api-BHzCvDcY.mjs";
+import { a as unwrap, i as requireTty, r as reportErrors, t as formatDateTime } from "./ui-SBUdC9rX.mjs";
 import { a as parseCredentialInput, i as helperCommand, o as runCredentialHelper, r as fileTokenCache, t as RepoCredentialError } from "./repo-credential-CNDRM-tG.mjs";
 import { defineCommand } from "citty";
 import { existsSync, realpathSync } from "node:fs";

package/dist/repo-Un_p617X.mjs

@@ -0,0 +1,2 @@
+import { a as repoCommand } from "./repo-BCua4L-I.mjs";
+export { repoCommand };

package/dist/{schedule-CbaDIJXr.mjs → schedule-DjHcaxyt.mjs}

@@ -1,6 +1,6 @@
 import { c as resolveProject, o as projectFlagArgs } from "./site-DM2J10CB.mjs";
-import { a as apiRequest, l as withContext } from "./api-ArfD6-t5.mjs";
-import { r as reportErrors, t as formatDateTime } from "./ui-CaHgvvkJ.mjs";
+import { a as apiRequest, l as withContext } from "./api-BHzCvDcY.mjs";
+import { r as reportErrors, t as formatDateTime } from "./ui-SBUdC9rX.mjs";
 import { defineCommand } from "citty";
 //#region src/schedule.ts
 /**

package/dist/{secrets-CmY4dUHz.mjs → secrets-COwRvCev.mjs}

@@ -1,6 +1,6 @@
 import { a as projectDirArgs, c as resolveProject } from "./site-DM2J10CB.mjs";
-import { a as apiRequest, l as withContext } from "./api-ArfD6-t5.mjs";
-import { a as unwrap, r as reportErrors, t as formatDateTime } from "./ui-CaHgvvkJ.mjs";
+import { a as apiRequest, l as withContext } from "./api-BHzCvDcY.mjs";
+import { a as unwrap, r as reportErrors, t as formatDateTime } from "./ui-SBUdC9rX.mjs";
 import { defineCommand } from "citty";
 import * as p from "@clack/prompts";
 //#region src/secrets.ts

package/dist/{skill-AqZYYsE6.mjs → skill-DSYQA4Ls.mjs}

@@ -1,5 +1,5 @@
-import { t as version } from "./package-C1xCnyOB.mjs";
-import { r as reportErrors } from "./ui-CaHgvvkJ.mjs";
+import { t as version } from "./package-SWgTmctH.mjs";
+import { r as reportErrors } from "./ui-SBUdC9rX.mjs";
 import { defineCommand } from "citty";
 import { cpSync, existsSync, mkdirSync, rmSync, symlinkSync, writeFileSync } from "node:fs";
 import { homedir } from "node:os";

package/dist/{staging-ypR79MlD.mjs → staging-CYMTZyyM.mjs}

@@ -1,6 +1,6 @@
 import { c as resolveProject, l as stagingUrl, o as projectFlagArgs, s as projectUrl } from "./site-DM2J10CB.mjs";
-import { a as apiRequest, l as withContext } from "./api-ArfD6-t5.mjs";
-import { a as unwrap, i as requireTty, r as reportErrors, t as formatDateTime } from "./ui-CaHgvvkJ.mjs";
+import { a as apiRequest, l as withContext } from "./api-BHzCvDcY.mjs";
+import { a as unwrap, i as requireTty, r as reportErrors, t as formatDateTime } from "./ui-SBUdC9rX.mjs";
 import { defineCommand } from "citty";
 import * as p from "@clack/prompts";
 //#region src/staging.ts

package/dist/{token-CDrHQ5Xb.mjs → token-CCpJ1ES4.mjs}

@@ -1,6 +1,6 @@
 import { a as projectDirArgs, c as resolveProject, o as projectFlagArgs } from "./site-DM2J10CB.mjs";
-import { a as apiRequest } from "./api-ArfD6-t5.mjs";
-import { r as reportErrors, t as formatDateTime } from "./ui-CaHgvvkJ.mjs";
+import { a as apiRequest } from "./api-BHzCvDcY.mjs";
+import { r as reportErrors, t as formatDateTime } from "./ui-SBUdC9rX.mjs";
 import { defineCommand } from "citty";
 const tokenCommand = defineCommand({
 	meta: {

package/dist/{ui-CaHgvvkJ.mjs → ui-SBUdC9rX.mjs}

@@ -1,4 +1,4 @@
-import { t as ApiError } from "./api-ArfD6-t5.mjs";
+import { t as ApiError } from "./api-BHzCvDcY.mjs";
 import { spawn } from "node:child_process";
 import { cancel, isCancel } from "@clack/prompts";
 //#region src/ui.ts

package/dist/{upgrade-DSjmifH_.mjs → upgrade-B_tLCpc4.mjs}

@@ -1,5 +1,5 @@
 import { t as PACKAGE_NAME } from "./version-check-CcsA1QjI.mjs";
-import { r as reportErrors } from "./ui-CaHgvvkJ.mjs";
+import { r as reportErrors } from "./ui-SBUdC9rX.mjs";
 import { defineCommand } from "citty";
 import { spawn } from "node:child_process";
 import { fileURLToPath } from "node:url";
@@ -112,7 +112,7 @@ const upgradeCommand = defineCommand({
 		const spec = `${PACKAGE_NAME}@${args.version ?? "latest"}`;
 		const command = pmCommand(pm);
 		const cmd = installArgs(pm, spec);
-		const { skillInstalled } = await import("./skill-AqZYYsE6.mjs");
+		const { skillInstalled } = await import("./skill-DSYQA4Ls.mjs");
 		const { homedir } = await import("node:os");
 		const refreshGlobal = skillInstalled(homedir());
 		const refreshRepo = process.cwd() !== homedir() && skillInstalled(process.cwd());

package/dist/{usage-CP8rBVZi.mjs → usage-BSPnsMXd.mjs}

@@ -1,6 +1,6 @@
 import { c as resolveProject, o as projectFlagArgs } from "./site-DM2J10CB.mjs";
-import { a as apiRequest, l as withContext } from "./api-ArfD6-t5.mjs";
-import { r as reportErrors } from "./ui-CaHgvvkJ.mjs";
+import { a as apiRequest, l as withContext } from "./api-BHzCvDcY.mjs";
+import { r as reportErrors } from "./ui-SBUdC9rX.mjs";
 import { defineCommand } from "citty";
 //#region src/usage.ts
 /**
@@ -60,6 +60,13 @@ function renderUsage(slug, usage) {
 	const deploys = usage.deploys.count;
 	const live = usage.deploys.latestVersion != null ? ` · v${usage.deploys.latestVersion} live` : "";
 	lines.push(`  ${pad("deploys")}${deploys}${live}`);
+	const fixed = usage.fixedIp;
+	if (fixed && (fixed.mode !== "off" || fixed.bytesToday > 0)) {
+		lines.push("");
+		lines.push("Fixed outbound addresses");
+		const gb = (n) => `${Number((n / 1e9).toFixed(n < 1e8 ? 3 : 2))} GB`;
+		lines.push(`  ${pad("today")}${gb(fixed.bytesToday)} of ${gb(fixed.dailyQuotaBytes)}`);
+	}
 	return lines.join("\n");
 }
 const usageCommand = defineCommand({

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mediamonks/canopy-cli",
-  "version": "0.7.40",
+  "version": "0.7.41",
   "description": "Canopy CLI — create, develop and deploy Canopy projects.",
   "bin": {
     "canopy": "./dist/index.mjs"

package/dist/dev-dJ88L73Y.mjs

@@ -1,2 +0,0 @@
-import { n as devCommand } from "./dev-03LA_Etx.mjs";
-export { devCommand };

package/dist/egress-CzxRD6Tp.mjs

@@ -1,188 +0,0 @@
-import { a as projectDirArgs, c as resolveProject } from "./site-DM2J10CB.mjs";
-import { a as apiRequest, l as withContext } from "./api-ArfD6-t5.mjs";
-import { a as unwrap, i as requireTty, r as reportErrors, t as formatDateTime } from "./ui-CaHgvvkJ.mjs";
-import { defineCommand } from "citty";
-import * as p from "@clack/prompts";
-//#region src/egress.ts
-/**
-* canopy egress — manage the project's outbound-host policy: the allowlist
-* (docs/16-egress-allowlist.md) and the egress mode (docs/25-egress-modes.md).
-* In allowlist mode, worker fetches to hosts outside the list are denied
-* (`egress_denied`) on targets that enforce egress control; open mode allows
-* any public hostname behind a built-in blocklist and an outbound rate limit.
-* Policy lives on the platform, not in canopy.json, so a repo file can never
-* widen egress silently on deploy.
-*/
-function printList({ mode, hosts, denied, enforced }, slug) {
-	if (mode === "open") console.log(`${slug} is in OPEN egress mode — the worker may fetch any public host (the allowlist below is kept but not enforced; \`canopy egress mode allowlist\` restores it).`);
-	if (hosts.length === 0) console.log(`No extra egress hosts for ${slug} — the worker can reach platform hosts only.`);
-	else for (const host of hosts) console.log(host);
-	if (denied.length > 0) {
-		console.log(`\nRecently blocked (allow with \`canopy egress allow <host>\`):`);
-		for (const d of denied) {
-			const why = d.reason === "rate_limited" ? "rate limited" : "blocked";
-			console.log(`  ${d.host}  ×${d.count}  ${why}, last ${formatDateTime(d.last_seen)}`);
-		}
-	}
-	if (!enforced) console.error("(note: this site's target does not enforce egress yet — the policy is recorded for when it does)");
-}
-const listCommand = defineCommand({
-	meta: {
-		name: "list",
-		description: "List the project's allowed outbound hosts"
-	},
-	args: { ...projectDirArgs },
-	run: reportErrors("egress list", async ({ args }) => {
-		const { slug } = resolveProject(args);
-		printList(await apiRequest("GET", `/projects/${slug}/egress`), slug);
-	})
-});
-const allowCommand = defineCommand({
-	meta: {
-		name: "allow",
-		description: "Allow the worker to fetch a host (e.g. api.example.com or *.googleapis.com)"
-	},
-	args: {
-		host: {
-			type: "positional",
-			description: "Hostname to allow",
-			required: true
-		},
-		...projectDirArgs
-	},
-	run: reportErrors("egress allow", async ({ args }) => {
-		const { slug } = resolveProject(args);
-		const current = await apiRequest("GET", `/projects/${slug}/egress`);
-		const updated = await apiRequest("PUT", `/projects/${slug}/egress`, { hosts: [...current.hosts, args.host] });
-		console.log(`Allowed ${args.host} for ${slug} — running workers pick it up now.\n`);
-		printList(updated, slug);
-	})
-});
-const removeCommand = defineCommand({
-	meta: {
-		name: "remove",
-		description: "Remove a host from the allowlist"
-	},
-	args: {
-		host: {
-			type: "positional",
-			description: "Hostname to remove",
-			required: true
-		},
-		...projectDirArgs
-	},
-	run: reportErrors("egress remove", async ({ args }) => {
-		const { slug } = resolveProject(args);
-		const current = await apiRequest("GET", `/projects/${slug}/egress`);
-		const wanted = args.host.trim().toLowerCase();
-		if (!current.hosts.includes(wanted)) {
-			console.error(`${wanted} is not on the allowlist for ${slug} (see \`canopy egress list\`).`);
-			process.exit(1);
-		}
-		const updated = await apiRequest("PUT", `/projects/${slug}/egress`, { hosts: current.hosts.filter((h) => h !== wanted) });
-		console.log(`Removed ${wanted} from ${slug} — running workers stop reaching it now.\n`);
-		printList(updated, slug);
-	})
-});
-/** The plain-language risk summary shown before open mode is enabled (docs/25 §2). */
-function openModeRiskSummary(slug, clientAccess) {
-	const lines = [
-		`Open egress mode lets ${slug}'s worker contact ANY public host:`,
-		"",
-		"  - If the URLs it fetches come from user input, users control where it connects.",
-		"  - Abusive outbound traffic can get the project rate-limited or paused.",
-		"  - A built-in blocklist (private IPs, localhost, cloud metadata) and an",
-		"    outbound rate limit still apply, and every visited host is logged",
-		"    (`canopy egress log`)."
-	];
-	if (clientAccess) lines.push("", "  ! This project has client access enabled — untrusted visitors can drive", "    what the worker fetches.");
-	lines.push("", "It's the right choice for apps that fetch arbitrary user-provided URLs", "(link collectors, feed readers, scrapers). Everything else is better served", "by the allowlist.");
-	return lines.join("\n");
-}
-const egressCommand = defineCommand({
-	meta: {
-		name: "egress",
-		description: "Manage which outbound hosts the project's worker may fetch"
-	},
-	subCommands: {
-		list: listCommand,
-		allow: allowCommand,
-		remove: removeCommand,
-		mode: defineCommand({
-			meta: {
-				name: "mode",
-				description: "Show or switch the egress mode (allowlist | open)"
-			},
-			args: {
-				mode: {
-					type: "positional",
-					description: "allowlist | open (omit to show)",
-					required: false
-				},
-				"accept-risk": {
-					type: "boolean",
-					description: "Acknowledge the open-mode risk summary without an interactive prompt"
-				},
-				...projectDirArgs
-			},
-			run: reportErrors("egress mode", async ({ args }) => {
-				const { slug } = resolveProject(args);
-				const current = await apiRequest("GET", `/projects/${slug}/egress`);
-				const wanted = args.mode?.trim().toLowerCase();
-				if (!wanted) {
-					console.log(current.mode);
-					return;
-				}
-				if (wanted !== "allowlist" && wanted !== "open") {
-					console.error(`unknown mode "${wanted}" — expected allowlist or open.`);
-					process.exit(1);
-				}
-				if (wanted === current.mode) {
-					console.log(`${slug} is already in ${wanted} mode.`);
-					return;
-				}
-				if (wanted === "open") {
-					const access = await apiRequest("GET", `/projects/${slug}/client-password`).catch(() => ({ enabled: false }));
-					console.log(openModeRiskSummary(slug, access.enabled));
-					console.log("");
-					if (!args["accept-risk"]) {
-						requireTty("pass --accept-risk to enable open mode without confirmation.");
-						if (unwrap(await p.text({ message: `Type the project slug ("${slug}") to enable open mode.` })).trim() !== slug) {
-							p.cancel("Aborted — egress mode unchanged.");
-							return;
-						}
-					}
-				}
-				const updated = await withContext(apiRequest("PUT", `/projects/${slug}/egress`, { mode: wanted }), {
-					action: `switch ${slug} to ${wanted} egress mode`,
-					fixes: { owner_only: "Only the project owner can switch egress to open mode — ask them to run this command or flip it in the dashboard." }
-				});
-				if (wanted === "open") {
-					console.log(`Open egress mode is ON for ${slug} — running workers pick it up now.`);
-					console.log(`Switch back anytime with \`canopy egress mode allowlist\`.`);
-				} else {
-					console.log(`Allowlist mode restored for ${slug} — only listed hosts are reachable.\n`);
-					printList(updated, slug);
-				}
-			})
-		}),
-		log: defineCommand({
-			meta: {
-				name: "log",
-				description: "Show the outbound traffic log — hosts the worker actually fetched"
-			},
-			args: { ...projectDirArgs },
-			run: reportErrors("egress log", async ({ args }) => {
-				const { slug } = resolveProject(args);
-				const { visits } = await apiRequest("GET", `/projects/${slug}/egress/log`);
-				if (visits.length === 0) {
-					console.log(`No outbound traffic recorded for ${slug} yet.`);
-					return;
-				}
-				for (const v of visits) console.log(`${v.host}  ×${v.count}  last ${formatDateTime(v.last_seen)}`);
-			})
-		})
-	}
-});
-//#endregion
-export { egressCommand };

package/dist/project-template-DlzMx8Oj.mjs

@@ -1,2 +0,0 @@
-import { a as templateCommand } from "./project-template-DtTfXyLI.mjs";
-export { templateCommand };

package/dist/repo-CmbakFVi.mjs

@@ -1,2 +0,0 @@
-import { a as repoCommand } from "./repo-4x-CJwCp.mjs";
-export { repoCommand };