@mediamonks/canopy-cli 0.7.40 → 0.7.42

package/dist/egress-D6qyaaAn.mjs

@@ -0,0 +1,397 @@
+import { l as resolveProject, o as projectDirArgs } from "./site-0i7wAJqg.mjs";
+import { a as apiRequest, f as withContext } from "./api-Do9c8tZ_.mjs";
+import { a as unwrap, i as requireTty, r as reportErrors, t as formatDateTime } from "./ui-CDUJq-X-.mjs";
+import { defineCommand } from "citty";
+import * as p from "@clack/prompts";
+//#region src/egress.ts
+/**
+* canopy egress — manage the project's outbound-host policy: the allowlist
+* (docs/16-egress-allowlist.md) and the egress mode (docs/25-egress-modes.md).
+* In allowlist mode, worker fetches to hosts outside the list are denied
+* (`egress_denied`) on targets that enforce egress control; open mode allows
+* any public hostname behind a built-in blocklist and an outbound rate limit.
+* Policy lives on the platform, not in canopy.json, so a repo file can never
+* widen egress silently on deploy.
+*/
+function printList({ mode, hosts, denied, enforced }, slug) {
+	if (mode === "open") console.log(`${slug} is in OPEN egress mode — the worker may fetch any public host (the allowlist below is kept but not enforced; \`canopy egress mode allowlist\` restores it).`);
+	if (hosts.length === 0) console.log(`No extra egress hosts for ${slug} — the worker can reach platform hosts only.`);
+	else for (const host of hosts) console.log(host);
+	if (denied.length > 0) {
+		console.log(`\nRecently blocked (allow with \`canopy egress allow <host>\`):`);
+		for (const d of denied) {
+			const why = d.reason === "rate_limited" ? "rate limited" : "blocked";
+			console.log(`  ${d.host}  ×${d.count}  ${why}, last ${formatDateTime(d.last_seen)}`);
+		}
+	}
+	if (!enforced) console.error("(note: this site's target does not enforce egress yet — the policy is recorded for when it does)");
+}
+const listCommand = defineCommand({
+	meta: {
+		name: "list",
+		description: "List the project's allowed outbound hosts"
+	},
+	args: { ...projectDirArgs },
+	run: reportErrors("egress list", async ({ args }) => {
+		const { slug } = resolveProject(args);
+		printList(await apiRequest("GET", `/projects/${slug}/egress`), slug);
+	})
+});
+const allowCommand = defineCommand({
+	meta: {
+		name: "allow",
+		description: "Allow the worker to fetch a host (e.g. api.example.com or *.googleapis.com)"
+	},
+	args: {
+		host: {
+			type: "positional",
+			description: "Hostname to allow",
+			required: true
+		},
+		...projectDirArgs
+	},
+	run: reportErrors("egress allow", async ({ args }) => {
+		const { slug } = resolveProject(args);
+		const current = await apiRequest("GET", `/projects/${slug}/egress`);
+		const updated = await apiRequest("PUT", `/projects/${slug}/egress`, { hosts: [...current.hosts, args.host] });
+		console.log(`Allowed ${args.host} for ${slug} — running workers pick it up now.\n`);
+		printList(updated, slug);
+	})
+});
+const removeCommand = defineCommand({
+	meta: {
+		name: "remove",
+		description: "Remove a host from the allowlist"
+	},
+	args: {
+		host: {
+			type: "positional",
+			description: "Hostname to remove",
+			required: true
+		},
+		...projectDirArgs
+	},
+	run: reportErrors("egress remove", async ({ args }) => {
+		const { slug } = resolveProject(args);
+		const current = await apiRequest("GET", `/projects/${slug}/egress`);
+		const wanted = args.host.trim().toLowerCase();
+		if (!current.hosts.includes(wanted)) {
+			console.error(`${wanted} is not on the allowlist for ${slug} (see \`canopy egress list\`).`);
+			process.exit(1);
+		}
+		const updated = await apiRequest("PUT", `/projects/${slug}/egress`, { hosts: current.hosts.filter((h) => h !== wanted) });
+		console.log(`Removed ${wanted} from ${slug} — running workers stop reaching it now.\n`);
+		printList(updated, slug);
+	})
+});
+/** The plain-language risk summary shown before open mode is enabled (docs/25 §2). */
+function openModeRiskSummary(slug, clientAccess) {
+	const lines = [
+		`Open egress mode lets ${slug}'s worker contact ANY public host:`,
+		"",
+		"  - If the URLs it fetches come from user input, users control where it connects.",
+		"  - Abusive outbound traffic can get the project rate-limited or paused.",
+		"  - A built-in blocklist (private IPs, localhost, cloud metadata) and an",
+		"    outbound rate limit still apply, and every visited host is logged",
+		"    (`canopy egress log`)."
+	];
+	if (clientAccess) lines.push("", "  ! This project has client access enabled — untrusted visitors can drive", "    what the worker fetches.");
+	lines.push("", "It's the right choice for apps that fetch arbitrary user-provided URLs", "(link collectors, feed readers, scrapers). Everything else is better served", "by the allowlist.");
+	return lines.join("\n");
+}
+const modeCommand = defineCommand({
+	meta: {
+		name: "mode",
+		description: "Show or switch the egress mode (allowlist | open)"
+	},
+	args: {
+		mode: {
+			type: "positional",
+			description: "allowlist | open (omit to show)",
+			required: false
+		},
+		"accept-risk": {
+			type: "boolean",
+			description: "Acknowledge the open-mode risk summary without an interactive prompt"
+		},
+		...projectDirArgs
+	},
+	run: reportErrors("egress mode", async ({ args }) => {
+		const { slug } = resolveProject(args);
+		const current = await apiRequest("GET", `/projects/${slug}/egress`);
+		const wanted = args.mode?.trim().toLowerCase();
+		if (!wanted) {
+			console.log(current.mode);
+			return;
+		}
+		if (wanted !== "allowlist" && wanted !== "open") {
+			console.error(`unknown mode "${wanted}" — expected allowlist or open.`);
+			process.exit(1);
+		}
+		if (wanted === current.mode) {
+			console.log(`${slug} is already in ${wanted} mode.`);
+			return;
+		}
+		if (wanted === "open") {
+			const access = await apiRequest("GET", `/projects/${slug}/client-password`).catch(() => ({ enabled: false }));
+			console.log(openModeRiskSummary(slug, access.enabled));
+			console.log("");
+			if (!args["accept-risk"]) {
+				requireTty("pass --accept-risk to enable open mode without confirmation.");
+				if (unwrap(await p.text({ message: `Type the project slug ("${slug}") to enable open mode.` })).trim() !== slug) {
+					p.cancel("Aborted — egress mode unchanged.");
+					return;
+				}
+			}
+		}
+		const updated = await withContext(apiRequest("PUT", `/projects/${slug}/egress`, { mode: wanted }), {
+			action: `switch ${slug} to ${wanted} egress mode`,
+			fixes: { owner_only: "Only the project owner can switch egress to open mode — ask them to run this command or flip it in the dashboard." }
+		});
+		if (wanted === "open") {
+			console.log(`Open egress mode is ON for ${slug} — running workers pick it up now.`);
+			console.log(`Switch back anytime with \`canopy egress mode allowlist\`.`);
+		} else {
+			console.log(`Allowlist mode restored for ${slug} — only listed hosts are reachable.\n`);
+			printList(updated, slug);
+		}
+	})
+});
+const logCommand = defineCommand({
+	meta: {
+		name: "log",
+		description: "Show the outbound traffic log — hosts the worker actually fetched"
+	},
+	args: { ...projectDirArgs },
+	run: reportErrors("egress log", async ({ args }) => {
+		const { slug } = resolveProject(args);
+		const { visits } = await apiRequest("GET", `/projects/${slug}/egress/log`);
+		if (visits.length === 0) {
+			console.log(`No outbound traffic recorded for ${slug} yet.`);
+			return;
+		}
+		for (const v of visits) console.log(`${v.host}  ×${v.count}  last ${formatDateTime(v.last_seen)}`);
+	})
+});
+/** The note `all` prints: what routing every request costs. */
+const FIXED_IP_ALL_NOTE = [
+	"Every outbound request now leaves from the fixed addresses. That means:",
+	"  - each request takes a slower route (an extra hop, and a cold start after idle),",
+	"  - it all counts toward the daily fixed-address transfer quota,",
+	"  - and it leaves from addresses shared with other projects.",
+	"Listing only the hosts that need a fixed address (`canopy egress fixed-ip add <host>`)",
+	"is usually the better choice."
+].join("\n");
+/** `canopy egress fixed-ip` with no argument: mode, hosts, addresses, flags. */
+function renderFixedIp(view, slug, egressMode) {
+	const lines = [];
+	const addresses = view.addresses.join(", ");
+	if (!view.optional) {
+		lines.push(`Every outbound request of ${slug} leaves from the fixed addresses: ${addresses}`);
+		lines.push("Ask partners to allow both. There is nothing to set on this site.");
+		return lines.join("\n");
+	}
+	if (view.mode === "off") {
+		lines.push(`Fixed outbound addresses are off for ${slug} — requests leave normally.`);
+		lines.push(`Route a partner's host through ${addresses} with \`canopy egress fixed-ip add <host>\`.`);
+		return lines.join("\n");
+	}
+	if (view.mode === "all") lines.push(`Every outbound request of ${slug} leaves from: ${addresses}`);
+	else {
+		lines.push(`Requests of ${slug} to these hosts leave from ${addresses}:`);
+		for (const host of view.hosts) {
+			const flag = view.notAllowed.includes(host) ? "  (not allowed — requests are denied)" : "";
+			lines.push(`  ${host}${flag}`);
+		}
+	}
+	if (view.notAllowed.length > 0 && egressMode === "allowlist") lines.push(`Routing doesn't allow a host: add it with \`canopy egress allow <host>\` to reach it.`);
+	return lines.join("\n");
+}
+/** The PUT body `add` sends; from off it starts a fresh list with just this host. */
+function fixedIpAddBody(view, host) {
+	if (view.mode === "off") return {
+		mode: "hosts",
+		hosts: [host]
+	};
+	return { hosts: [...view.hosts, host] };
+}
+/** The PUT body `remove` sends, or null when the host isn't routed. */
+function fixedIpRemoveBody(view, host) {
+	const wanted = host.trim().toLowerCase();
+	if (!view.hosts.includes(wanted)) return null;
+	const hosts = view.hosts.filter((h) => h !== wanted);
+	return view.mode === "hosts" && hosts.length === 0 ? {
+		mode: "off",
+		hosts
+	} : { hosts };
+}
+const FIXED_IP_FIXES = {
+	owner_only: "Only the project owner can turn on fixed outbound addresses or route all traffic — ask them to run this command or turn it on in the dashboard.",
+	fixed_ip_not_optional: "Every request on this site already leaves from the fixed addresses — `canopy egress fixed-ip` shows them.",
+	not_supported_on_target: "This site has no fixed outbound addresses: it runs no project backends to send from them."
+};
+/** The current setting, or a clear exit where the site offers none. */
+async function loadFixedIp(slug) {
+	const egress = await apiRequest("GET", `/projects/${slug}/egress`);
+	if (!egress.fixedIp) {
+		console.error(egress.fixedIp === void 0 ? "This site's API predates fixed outbound addresses." : "This site has no fixed outbound addresses (it runs no project backends).");
+		process.exit(1);
+	}
+	return {
+		egress,
+		view: egress.fixedIp
+	};
+}
+function putFixedIp(slug, fixedIp, action) {
+	return withContext(apiRequest("PUT", `/projects/${slug}/egress`, { fixedIp }), {
+		action,
+		fixes: FIXED_IP_FIXES
+	});
+}
+function requireOptional(view, slug) {
+	if (view.optional) return;
+	console.log(renderFixedIp(view, slug, "allowlist"));
+	process.exit(0);
+}
+let fixedIpSubcommandRan = false;
+const fixedIpAddCommand = defineCommand({
+	meta: {
+		name: "add",
+		description: "Route a host through the fixed addresses (turns the setting on)"
+	},
+	args: {
+		host: {
+			type: "positional",
+			description: "Hostname (api.partner.com or *.partner.com)",
+			required: true
+		},
+		allow: {
+			type: "boolean",
+			description: "Also add the host to the allowlist when it isn't on it"
+		},
+		...projectDirArgs
+	},
+	run: reportErrors("egress fixed-ip add", async ({ args }) => {
+		fixedIpSubcommandRan = true;
+		const { slug } = resolveProject(args);
+		const { egress, view } = await loadFixedIp(slug);
+		requireOptional(view, slug);
+		const updated = await putFixedIp(slug, fixedIpAddBody(view, args.host), `route ${args.host} through the fixed addresses for ${slug}`);
+		const fixed = updated.fixedIp;
+		console.log(`Requests of ${slug} to ${args.host} now leave from the fixed addresses.`);
+		console.log(`Ask the partner to allow both: ${fixed.addresses.join(", ")}\n`);
+		if (fixed.mode === "all") console.log("(All traffic is routed right now, so this host's requests already were.)\n");
+		const host = fixed.hosts.find((h) => h === args.host.trim().toLowerCase()) ?? args.host;
+		if (egress.mode === "allowlist" && fixed.notAllowed.includes(host)) {
+			let allow = Boolean(args.allow);
+			if (!allow && process.stdin.isTTY) allow = unwrap(await p.confirm({
+				message: `${host} isn't on the allowlist, so requests to it are denied. Allow it now?`,
+				initialValue: true
+			}));
+			if (allow) {
+				const allowed = await apiRequest("PUT", `/projects/${slug}/egress`, { hosts: [...egress.hosts, host] });
+				console.log(`Allowed ${host} too.\n`);
+				console.log(renderFixedIp(allowed.fixedIp, slug, allowed.mode));
+				return;
+			}
+		}
+		console.log(renderFixedIp(fixed, slug, updated.mode));
+	})
+});
+const fixedIpRemoveCommand = defineCommand({
+	meta: {
+		name: "remove",
+		description: "Stop routing a host through the fixed addresses"
+	},
+	args: {
+		host: {
+			type: "positional",
+			description: "Hostname to stop routing",
+			required: true
+		},
+		...projectDirArgs
+	},
+	run: reportErrors("egress fixed-ip remove", async ({ args }) => {
+		fixedIpSubcommandRan = true;
+		const { slug } = resolveProject(args);
+		const { view } = await loadFixedIp(slug);
+		requireOptional(view, slug);
+		const body = fixedIpRemoveBody(view, args.host);
+		if (!body) {
+			console.error(`${args.host.trim().toLowerCase()} isn't routed through the fixed addresses for ${slug} (see \`canopy egress fixed-ip\`).`);
+			process.exit(1);
+		}
+		const updated = await putFixedIp(slug, body, `stop routing ${args.host} for ${slug}`);
+		console.log(body.mode === "off" ? `That was the last routed host — fixed outbound addresses are off for ${slug}.` : `Requests of ${slug} to ${args.host} leave normally again.\n`);
+		if (body.mode !== "off") console.log(renderFixedIp(updated.fixedIp, slug, updated.mode));
+	})
+});
+const fixedIpAllCommand = defineCommand({
+	meta: {
+		name: "all",
+		description: "Send every outbound request from the fixed addresses"
+	},
+	args: { ...projectDirArgs },
+	run: reportErrors("egress fixed-ip all", async ({ args }) => {
+		fixedIpSubcommandRan = true;
+		const { slug } = resolveProject(args);
+		const { view } = await loadFixedIp(slug);
+		requireOptional(view, slug);
+		console.log(`${FIXED_IP_ALL_NOTE}\n`);
+		const updated = await putFixedIp(slug, { mode: "all" }, `route all of ${slug}'s requests through the fixed addresses`);
+		console.log(renderFixedIp(updated.fixedIp, slug, updated.mode));
+	})
+});
+const fixedIpOffCommand = defineCommand({
+	meta: {
+		name: "off",
+		description: "Turn fixed outbound addresses off — requests leave normally"
+	},
+	args: { ...projectDirArgs },
+	run: reportErrors("egress fixed-ip off", async ({ args }) => {
+		fixedIpSubcommandRan = true;
+		const { slug } = resolveProject(args);
+		const { view } = await loadFixedIp(slug);
+		requireOptional(view, slug);
+		if (view.mode === "off") {
+			console.log(`Fixed outbound addresses are already off for ${slug}.`);
+			return;
+		}
+		await putFixedIp(slug, { mode: "off" }, `turn fixed outbound addresses off for ${slug}`);
+		console.log(`Fixed outbound addresses are off for ${slug} — requests leave normally now.`);
+	})
+});
+const showFixedIp = reportErrors("egress fixed-ip", async ({ args }) => {
+	const { slug } = resolveProject(args);
+	const { egress, view } = await loadFixedIp(slug);
+	console.log(renderFixedIp(view, slug, egress.mode));
+});
+const egressCommand = defineCommand({
+	meta: {
+		name: "egress",
+		description: "Manage which outbound hosts the project's worker may fetch"
+	},
+	subCommands: {
+		list: listCommand,
+		allow: allowCommand,
+		remove: removeCommand,
+		mode: modeCommand,
+		log: logCommand,
+		"fixed-ip": defineCommand({
+			meta: {
+				name: "fixed-ip",
+				description: "Show or change which requests leave from Canopy's fixed outbound addresses"
+			},
+			args: { ...projectDirArgs },
+			subCommands: {
+				add: fixedIpAddCommand,
+				remove: fixedIpRemoveCommand,
+				all: fixedIpAllCommand,
+				off: fixedIpOffCommand
+			},
+			run: (context) => fixedIpSubcommandRan ? void 0 : showFixedIp(context)
+		})
+	}
+});
+//#endregion
+export { egressCommand };

package/dist/{feedback-BsJ_6ke2.mjs → feedback-DMgUUl0V.mjs}

@@ -1,7 +1,7 @@
-import { t as version } from "./package-C1xCnyOB.mjs";
-import { a as projectDirArgs, c as resolveProject, d as tryResolveProject, n as siteConfig, u as tryReadCanopyJson } from "./site-DM2J10CB.mjs";
-import { a as apiRequest, c as credentials, i as apiDownload, o as apiUpload, s as commonHeaders } from "./api-ArfD6-t5.mjs";
-import { r as reportErrors, t as formatDateTime } from "./ui-CaHgvvkJ.mjs";
+import { t as version } from "./package-CVDpzGgA.mjs";
+import { f as tryReadCanopyJson, l as resolveProject, o as projectDirArgs, p as tryResolveProject, r as siteConfig } from "./site-0i7wAJqg.mjs";
+import { a as apiRequest, c as credentials, i as apiDownload, o as apiUpload, s as commonHeaders } from "./api-Do9c8tZ_.mjs";
+import { r as reportErrors, t as formatDateTime } from "./ui-CDUJq-X-.mjs";
 import { defineCommand } from "citty";
 import { basename, extname, join } from "node:path";
 import { readFile, writeFile } from "node:fs/promises";

package/dist/index.mjs

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
-import { t as version } from "./package-C1xCnyOB.mjs";
-import { r as siteHeaderLine, t as setInvocationProfile } from "./site-DM2J10CB.mjs";
+import { t as version } from "./package-CVDpzGgA.mjs";
+import { i as siteHeaderLine, n as setInvocationProfile } from "./site-0i7wAJqg.mjs";
 import { a as notifyOfUpdate, o as runRefresh } from "./version-check-CcsA1QjI.mjs";
 import { defineCommand, runMain } from "citty";
 //#region src/index.ts
@@ -63,36 +63,37 @@ const main = defineCommand({
 		description: "canopy — create and deploy vibecoded projects"
 	},
 	subCommands: {
-		login: () => import("./login-B2FJGIrD.mjs").then((m) => m.loginCommand),
-		whoami: () => import("./login-B2FJGIrD.mjs").then((m) => m.whoamiCommand),
-		logout: () => import("./login-B2FJGIrD.mjs").then((m) => m.logoutCommand),
-		create: () => import("./projects-B3Wi01lw.mjs").then((m) => m.createCommand),
-		init: () => import("./projects-B3Wi01lw.mjs").then((m) => m.initCommand),
-		projects: () => import("./projects-B3Wi01lw.mjs").then((m) => m.projectsCommand),
-		delete: () => import("./projects-B3Wi01lw.mjs").then((m) => m.deleteCommand),
-		dev: () => import("./dev-dJ88L73Y.mjs").then((m) => m.devCommand),
-		deploy: () => import("./deploy-B7KItUnh.mjs").then((m) => m.deployCommand),
-		promote: () => import("./deploy-B7KItUnh.mjs").then((m) => m.promoteCommand),
-		staging: () => import("./staging-ypR79MlD.mjs").then((m) => m.stagingCommand),
-		rollback: () => import("./deploy-B7KItUnh.mjs").then((m) => m.rollbackCommand),
-		download: () => import("./deploy-B7KItUnh.mjs").then((m) => m.downloadCommand),
-		token: () => import("./token-CDrHQ5Xb.mjs").then((m) => m.tokenCommand),
-		egress: () => import("./egress-CzxRD6Tp.mjs").then((m) => m.egressCommand),
-		secrets: () => import("./secrets-CmY4dUHz.mjs").then((m) => m.secretsCommand),
-		schedule: () => import("./schedule-CbaDIJXr.mjs").then((m) => m.scheduleCommand),
-		feedback: () => import("./feedback-BsJ_6ke2.mjs").then((m) => m.feedbackCommand),
-		db: () => import("./db-DGrCgj-R.mjs").then((m) => m.dbCommand),
-		usage: () => import("./usage-CP8rBVZi.mjs").then((m) => m.usageCommand),
-		ai: () => import("./ai-EyrXJC5z.mjs").then((m) => m.aiCommand),
-		open: () => import("./open-COFMburt.mjs").then((m) => m.openCommand),
-		browse: () => import("./browse-DEhnJAPT.mjs").then((m) => m.browseCommand),
-		docs: () => import("./docs-B0-IEPjd.mjs").then((m) => m.docsCommand),
-		skill: () => import("./skill-AqZYYsE6.mjs").then((m) => m.skillCommand),
-		upgrade: () => import("./upgrade-DSjmifH_.mjs").then((m) => m.upgradeCommand),
-		logs: () => import("./logs-wSKh_FmL.mjs").then((m) => m.logsCommand),
-		mcp: () => import("./mcp-DtRIDtaL.mjs").then((m) => m.mcpCommand),
-		repo: () => import("./repo-CmbakFVi.mjs").then((m) => m.repoCommand),
-		template: () => import("./project-template-DlzMx8Oj.mjs").then((m) => m.templateCommand)
+		login: () => import("./login-CeNvHLUv.mjs").then((m) => m.loginCommand),
+		whoami: () => import("./login-CeNvHLUv.mjs").then((m) => m.whoamiCommand),
+		logout: () => import("./login-CeNvHLUv.mjs").then((m) => m.logoutCommand),
+		create: () => import("./projects-BWTIk80a.mjs").then((m) => m.createCommand),
+		init: () => import("./projects-BWTIk80a.mjs").then((m) => m.initCommand),
+		projects: () => import("./projects-BWTIk80a.mjs").then((m) => m.projectsCommand),
+		delete: () => import("./projects-BWTIk80a.mjs").then((m) => m.deleteCommand),
+		rename: () => import("./rename-BdIFrqvG.mjs").then((m) => m.renameCommand),
+		dev: () => import("./dev-Dj3wFKHe.mjs").then((m) => m.devCommand),
+		deploy: () => import("./deploy-CXMLABvH.mjs").then((m) => m.deployCommand),
+		promote: () => import("./deploy-CXMLABvH.mjs").then((m) => m.promoteCommand),
+		staging: () => import("./staging-ynPlMiHW.mjs").then((m) => m.stagingCommand),
+		rollback: () => import("./deploy-CXMLABvH.mjs").then((m) => m.rollbackCommand),
+		download: () => import("./deploy-CXMLABvH.mjs").then((m) => m.downloadCommand),
+		token: () => import("./token-CxiPrKn_.mjs").then((m) => m.tokenCommand),
+		egress: () => import("./egress-D6qyaaAn.mjs").then((m) => m.egressCommand),
+		secrets: () => import("./secrets-BVx8L0Gj.mjs").then((m) => m.secretsCommand),
+		schedule: () => import("./schedule-DpMIpCGC.mjs").then((m) => m.scheduleCommand),
+		feedback: () => import("./feedback-DMgUUl0V.mjs").then((m) => m.feedbackCommand),
+		db: () => import("./db-BNsX7sXo.mjs").then((m) => m.dbCommand),
+		usage: () => import("./usage-BtPsb7Iu.mjs").then((m) => m.usageCommand),
+		ai: () => import("./ai-DpQ1nLka.mjs").then((m) => m.aiCommand),
+		open: () => import("./open-D71Ms1nG.mjs").then((m) => m.openCommand),
+		browse: () => import("./browse-Dp5HytqK.mjs").then((m) => m.browseCommand),
+		docs: () => import("./docs-CkJGcCpR.mjs").then((m) => m.docsCommand),
+		skill: () => import("./skill-D58yV6K8.mjs").then((m) => m.skillCommand),
+		upgrade: () => import("./upgrade-Dll5rhOQ.mjs").then((m) => m.upgradeCommand),
+		logs: () => import("./logs-BzgJfWNP.mjs").then((m) => m.logsCommand),
+		mcp: () => import("./mcp-DFLaXiY_.mjs").then((m) => m.mcpCommand),
+		repo: () => import("./repo-JBKJqyoS.mjs").then((m) => m.repoCommand),
+		template: () => import("./project-template-BbmSmraT.mjs").then((m) => m.templateCommand)
 	}
 });
 const quiet = process.argv[2] === "mcp" && process.argv[3] === "serve" || process.argv[2] === "repo" && process.argv[3] === "credential";

package/dist/{local-CkS1XhRu.mjs → local-w2wXfE1d.mjs}

@@ -1,6 +1,6 @@
-import { r as apiDataRequest } from "./api-ArfD6-t5.mjs";
+import { r as apiDataRequest } from "./api-Do9c8tZ_.mjs";
 import { a as realtimeRouter, c as META_COLUMNS, l as blobRouter, n as WORKER_ATTEST_HEADER, o as dbRouter, s as hasPrivateNames } from "./src-RUf3Gfuh.mjs";
-import { a as rewriteApiPath } from "./dev-03LA_Etx.mjs";
+import { a as rewriteApiPath } from "./dev-CPR-9slK.mjs";
 import { createRequire } from "node:module";
 import { existsSync, mkdirSync, readFileSync, readdirSync, rmSync, statSync, writeFileSync } from "node:fs";
 import { dirname, join, relative, sep } from "node:path";

package/dist/{login-B2FJGIrD.mjs → login-CeNvHLUv.mjs}

@@ -1,6 +1,6 @@
-import { _ as writeConfigFile, f as clearAllProfileTokens, g as upsertProfileAuth, h as setActiveProfile, m as readConfigFile, n as siteConfig, p as listBakedProfiles, v as getBakedProfile, y as isProfileId } from "./site-DM2J10CB.mjs";
-import { n as agentHeaders } from "./api-ArfD6-t5.mjs";
-import { n as openBrowser, r as reportErrors } from "./ui-CaHgvvkJ.mjs";
+import { _ as setActiveProfile, b as getBakedProfile, g as readConfigFile, h as listBakedProfiles, m as clearAllProfileTokens, r as siteConfig, v as upsertProfileAuth, x as isProfileId, y as writeConfigFile } from "./site-0i7wAJqg.mjs";
+import { n as agentHeaders } from "./api-Do9c8tZ_.mjs";
+import { n as openBrowser, r as reportErrors } from "./ui-CDUJq-X-.mjs";
 import { n as clearRepoTokenCache } from "./repo-credential-CNDRM-tG.mjs";
 import { defineCommand } from "citty";
 import { hostname } from "node:os";

package/dist/{logs-wSKh_FmL.mjs → logs-BzgJfWNP.mjs}

@@ -1,6 +1,6 @@
-import { c as resolveProject, o as projectFlagArgs } from "./site-DM2J10CB.mjs";
-import { a as apiRequest, l as withContext } from "./api-ArfD6-t5.mjs";
-import { r as reportErrors } from "./ui-CaHgvvkJ.mjs";
+import { l as resolveProject, s as projectFlagArgs } from "./site-0i7wAJqg.mjs";
+import { a as apiRequest, f as withContext } from "./api-Do9c8tZ_.mjs";
+import { r as reportErrors } from "./ui-CDUJq-X-.mjs";
 import { defineCommand } from "citty";
 //#region src/logs.ts
 /**

package/dist/{mcp-DtRIDtaL.mjs → mcp-DFLaXiY_.mjs}

@@ -1,6 +1,6 @@
-import { t as version } from "./package-C1xCnyOB.mjs";
-import { d as tryResolveProject, l as stagingUrl, n as siteConfig, s as projectUrl } from "./site-DM2J10CB.mjs";
-import { a as apiRequest, t as ApiError } from "./api-ArfD6-t5.mjs";
+import { t as version } from "./package-CVDpzGgA.mjs";
+import { c as projectUrl, d as stagingUrl, p as tryResolveProject, r as siteConfig } from "./site-0i7wAJqg.mjs";
+import { a as apiRequest, d as noticeRenamesOnly, l as currentSlug, t as ApiError } from "./api-Do9c8tZ_.mjs";
 import { t as liveDevServer } from "./dev-server-file-Dk9pk4AR.mjs";
 import { defineCommand } from "citty";
 import { serveStdio } from "@modelcontextprotocol/server/stdio";
@@ -342,15 +342,16 @@ async function connect(args) {
 	requireSignIn();
 	const tokens = agentTokens(slug, channel);
 	await tokens.token();
+	const current = currentSlug(slug);
 	const upstream = await connectUpstream({
-		url: `${channel === "staging" ? stagingUrl(slug) : projectUrl(slug)}${MCP_PATH}`,
-		project: slug,
+		url: `${channel === "staging" ? stagingUrl(current) : projectUrl(current)}${MCP_PATH}`,
+		project: current,
 		tokens
 	});
 	const config = siteConfig();
 	return {
 		upstream,
-		slug,
+		slug: current,
 		channel,
 		where: `${config.profileId ?? config.apiUrl}, ${channel}`
 	};
@@ -375,6 +376,7 @@ const serveCommand = defineCommand({
 	async run({ args }) {
 		console.log = console.error;
 		console.info = console.error;
+		noticeRenamesOnly();
 		let connection;
 		try {
 			connection = await connect(args);

package/dist/{migrations-CG_O5Ghw.mjs → migrations-Bsu4quya.mjs}

@@ -1,5 +1,5 @@
-import { u as tryReadCanopyJson } from "./site-DM2J10CB.mjs";
-import { r as apiDataRequest } from "./api-ArfD6-t5.mjs";
+import { f as tryReadCanopyJson } from "./site-0i7wAJqg.mjs";
+import { r as apiDataRequest } from "./api-Do9c8tZ_.mjs";
 import { readFileSync, readdirSync } from "node:fs";
 import { join, resolve } from "node:path";
 //#region src/migrations.ts

package/dist/{open-COFMburt.mjs → open-D71Ms1nG.mjs}

@@ -1,5 +1,5 @@
-import { a as projectDirArgs, c as resolveProject, l as stagingUrl, s as projectUrl } from "./site-DM2J10CB.mjs";
-import { n as openBrowser, r as reportErrors } from "./ui-CaHgvvkJ.mjs";
+import { c as projectUrl, d as stagingUrl, l as resolveProject, o as projectDirArgs } from "./site-0i7wAJqg.mjs";
+import { n as openBrowser, r as reportErrors } from "./ui-CDUJq-X-.mjs";
 import { defineCommand } from "citty";
 //#region src/open.ts
 /**

package/dist/{package-C1xCnyOB.mjs → package-CVDpzGgA.mjs}

@@ -1,4 +1,4 @@
 //#region package.json
-var version = "0.7.40";
+var version = "0.7.42";
 //#endregion
 export { version as t };

package/dist/{project-template-DtTfXyLI.mjs → project-template-BXfHpsI8.mjs}

@@ -1,6 +1,6 @@
-import { a as projectDirArgs, c as resolveProject } from "./site-DM2J10CB.mjs";
-import { a as apiRequest, l as withContext } from "./api-ArfD6-t5.mjs";
-import { a as unwrap, i as requireTty, r as reportErrors } from "./ui-CaHgvvkJ.mjs";
+import { l as resolveProject, o as projectDirArgs } from "./site-0i7wAJqg.mjs";
+import { a as apiRequest, f as withContext } from "./api-Do9c8tZ_.mjs";
+import { a as unwrap, i as requireTty, r as reportErrors } from "./ui-CDUJq-X-.mjs";
 import { defineCommand } from "citty";
 import * as p from "@clack/prompts";
 /** Plain words for the API's template errors. */

package/dist/project-template-BbmSmraT.mjs

@@ -0,0 +1,2 @@
+import { a as templateCommand } from "./project-template-BXfHpsI8.mjs";
+export { templateCommand };

package/dist/{projects-B3Wi01lw.mjs → projects-BWTIk80a.mjs}

@@ -1,8 +1,8 @@
-import { n as siteConfig, s as projectUrl, u as tryReadCanopyJson } from "./site-DM2J10CB.mjs";
-import { a as apiRequest, l as withContext } from "./api-ArfD6-t5.mjs";
-import { a as unwrap, i as requireTty, r as reportErrors } from "./ui-CaHgvvkJ.mjs";
-import { i as nextSteps, n as describeCopy, r as fetchTemplate, t as TEMPLATE_FIXES } from "./project-template-DtTfXyLI.mjs";
-import { i as offerRepoOnCreate, n as cloneProjectRepo } from "./repo-4x-CJwCp.mjs";
+import { c as projectUrl, f as tryReadCanopyJson, r as siteConfig } from "./site-0i7wAJqg.mjs";
+import { a as apiRequest, f as withContext } from "./api-Do9c8tZ_.mjs";
+import { a as unwrap, i as requireTty, r as reportErrors } from "./ui-CDUJq-X-.mjs";
+import { i as nextSteps, n as describeCopy, r as fetchTemplate, t as TEMPLATE_FIXES } from "./project-template-BXfHpsI8.mjs";
+import { i as offerRepoOnCreate, n as cloneProjectRepo } from "./repo-LSOxnmUk.mjs";
 import { defineCommand } from "citty";
 import { existsSync, mkdirSync, readFileSync, readdirSync, writeFileSync } from "node:fs";
 import { join, relative, resolve, sep } from "node:path";