@mediamonks/canopy-cli 0.7.45 → 0.7.46

package/dist/docs/cli-repo.md

@@ -1,6 +1,6 @@
 ---
 title: canopy repo
-description: Create, clone and set up the project's git repository on Canopy.
+description: Create, clone and set up the project's git repository on Canopy, or link a GitHub repository so its pushes deploy.
 ---
 
 `canopy repo` manages the project's git repository. A project has at most one: a
@@ -16,6 +16,10 @@ canopy repo create
 canopy repo clone <slug> [folder]
 canopy repo connect
 canopy repo delete [--yes]
+canopy repo link [<host>/<owner/name>] [--ref <branch>] [--staging-ref <branch>]
+canopy repo branches [--ref <branch>] [--staging-ref <branch>|none]
+canopy repo deploys on|off
+canopy repo unlink
 ```
 
 ## Arguments & flags
@@ -41,6 +45,25 @@ the global `--profile <site>` / `CANOPY_PROFILE`.
   type the slug.
   - `--yes` — skip that question.
 
+These set up [CI deploys](https://docs.canopy.website/guides/ci) from GitHub Actions. All of them are
+owner only (or a platform admin):
+
+- `link [<host>/<owner/name>]` — link a GitHub repository outside Canopy, so a
+  push to its live branch deploys the project. With no argument it links the
+  folder's `origin` remote. The host is github.com or this site's GitHub
+  Enterprise (`monks.ghe.com`), which is the default.
+  - `--ref <branch>` — the live branch (default `main`).
+  - `--staging-ref <branch>` — a staging branch, whose pushes deploy to the
+    staging channel only.
+- `branches` — change the live or staging branch, for a linked repository or a
+  Canopy one. `--staging-ref none` removes the staging branch.
+- `deploys on|off` — turn CI deploys on or off without unlinking. Off makes
+  runs skip the deploy with a warning. Deploy tokens are not affected.
+- `unlink` — remove the link.
+
+`show` also prints the repository CI deploys from, both branches and whether
+CI deploys are on.
+
 ## How it works
 
 Setting up a folder (`create`, `clone`, `connect`) does two things:
@@ -54,7 +77,9 @@ for a short-lived token that only works for this repository, keeps it in
 `~/.canopy` for up to an hour, and gets a new one when needed. `canopy logout`
 throws them away.
 
-Pushing doesn't deploy. Run `canopy deploy` for that.
+Pushing doesn't deploy by itself. Run `canopy deploy`, or set up
+[CI deploys](https://docs.canopy.website/guides/ci): a Canopy repository needs no link, but GitHub Actions
+are off on it until a platform administrator turns them on.
 
 ## Examples
 
@@ -84,4 +109,11 @@ canopy repo show --json
 }
 ```
 
+```bash
+canopy repo link --staging-ref develop
+```
+
+Links the GitHub repository this folder's `origin` points at: pushes to `main`
+deploy live, pushes to `develop` deploy to staging.
+
 Read the [git guide](https://docs.canopy.website/guides/git) for the bigger picture.

package/dist/docs/cli-token.md

@@ -3,12 +3,14 @@ title: canopy token
 description: Create, list, and revoke project-scoped deploy tokens for CI and push-to-main deploys.
 ---
 
-`canopy token` manages deploy tokens: standing `cnpy_` bearer credentials that can do exactly one thing — deploy one specific project. You reach for it when setting up CI (typically GitHub Actions deploying on every push to main) so the runner never needs a personal login.
+`canopy token` manages deploy tokens: standing `cnpy_` bearer credentials that can do exactly one thing — deploy one specific project. You reach for it when setting up CI other than GitHub Actions, so the runner never needs a personal login.
+
+GitHub Actions doesn't need a token: link the repository with [`canopy repo link`](https://docs.canopy.website/cli/repo) and pushes deploy with no secret. See [CI deploys](https://docs.canopy.website/guides/ci).
 
 ## Usage
 
 ```bash
-canopy token create --name "GitHub Actions"
+canopy token create --name "Buildkite"
 canopy token list
 canopy token revoke <id>
 ```
@@ -18,7 +20,7 @@ canopy token revoke <id>
 All subcommands resolve the project the usual way — `canopy.json` in the target directory, or `--project <slug>` to override — and honor the global `--profile <site>` / `CANOPY_PROFILE` for which site the token belongs to.
 
 - `create` — mint a new deploy token for the project. Owner only: editors get a clear error and should ask the owner.
-  - `--name <label>` — a label shown in the dashboard, e.g. `"GitHub Actions"`. Optional but recommended so you can tell tokens apart later.
+  - `--name <label>` — a label shown in the dashboard, e.g. `"Buildkite"`. Optional but recommended so you can tell tokens apart later.
 - `list` — show the project's deploy tokens: id, name, creation time, who created them, and when each was last used. Token values are never shown here.
 - `revoke <id>` — delete a token by its id (from `canopy token list`). Deploys using it stop working immediately.
 
@@ -28,17 +30,17 @@ All subcommands resolve the project the usual way — `canopy.json` in the targe
 
 The token belongs to the project rather than to whoever created it, so CI keeps working when that person leaves. It has no fixed expiry but stops working after 90 days without a deploy; `list` shows when each token was last used.
 
-To use it in CI, put the value in the `CANOPY_DEPLOY_TOKEN` environment variable — the CLI checks it before the login token, so `canopy deploy` works on a runner with no `canopy login`. For GitHub Actions, add it as the repo secret `CANOPY_DEPLOY_TOKEN` (`gh secret set CANOPY_DEPLOY_TOKEN`, or Settings → Secrets); pushes to main then deploy via the project's `canopy-deploy.yml` workflow.
+To use it in CI, put the value in the `CANOPY_DEPLOY_TOKEN` environment variable — the CLI checks it first, so `canopy deploy` works on a runner with no `canopy login`. In GitHub Actions a token wins over the linked repository, and keeps working while CI deploys are switched off.
 
 If a deploy fails with a rejected token, it was likely revoked — create a fresh one here or in the dashboard (Settings → Deploy tokens) and update the secret. Losing a token is never a problem: revoke the old id and mint a new one.
 
 ## Examples
 
 ```bash
-canopy token create --name "GitHub Actions"
+canopy token create --name "Buildkite"
 ```
 
-Prints a new `cnpy_` token once, with instructions for storing it as the `CANOPY_DEPLOY_TOKEN` repo secret.
+Prints a new `cnpy_` token once, to store as the CI's `CANOPY_DEPLOY_TOKEN` secret.
 
 ```bash
 canopy token list --project my-app

package/dist/docs/cli.md

@@ -63,9 +63,13 @@ has a full page per command.
 - `canopy ai models` — the AI models and `auto/*` aliases this site offers,
   with prices. Works from any directory; `--json` for agents.
 
-## CI / deploy tokens
+## CI deploys
 
-- `canopy token create` — create a project-scoped deploy token for CI.
+- `canopy repo link` — link the folder's GitHub repository (owner only): pushes
+  to `main` then deploy from GitHub Actions with no secret.
+  `--staging-ref <branch>` adds a branch that deploys to staging only.
+- `canopy repo deploys on|off` — pause or resume CI deploys without unlinking.
+- `canopy token create` — create a project-scoped deploy token for other CI.
   `--name "<label>"` to label it.
 - `canopy token list` — list the project's deploy tokens.
 - `canopy token revoke <id>` — revoke a token.

package/dist/docs/deploy.md

@@ -77,5 +77,6 @@ canopy open
 
 ## Deploying from CI
 
-For automated push-to-main deploys, use a deploy token instead of an interactive
-login — see `canopy docs ci`.
+For automated push-to-main deploys from GitHub Actions, link the repository with
+`canopy repo link` — no secret needed. Other CI uses a deploy token. See
+`canopy docs ci`.

package/dist/docs/index.json

@@ -69,8 +69,8 @@
         },
         {
           "slug": "ci",
-          "title": "CI and deploy tokens",
-          "summary": "Push-to-main deploys using a project-scoped deploy token, and why we recommend deploying from your own machine instead."
+          "title": "CI deploys",
+          "summary": "Deploy on every push from GitHub Actions with no secret — link the repository once. Deploy tokens for other CI."
         },
         {
           "slug": "git",
@@ -284,7 +284,7 @@
         {
           "slug": "cli-repo",
           "title": "canopy repo",
-          "summary": "Create, clone and set up the project's git repository on Canopy."
+          "summary": "Create, clone and set up the project's git repository on Canopy, or link a GitHub repository so its pushes deploy."
         },
         {
           "slug": "cli-template",

package/dist/docs/platform-deploys-and-rollbacks.md

@@ -27,9 +27,9 @@ the previous version keeps serving until the new one is complete.
   [deploy guide](https://docs.canopy.website/guides/deploy) for details.
 - **From the dashboard** — on the project's Overview tab, upload a new version
   by dragging in a zip, a folder, or loose files. No command line required.
-- **Automatically from CI** — create a project-scoped deploy token, add it to
-  your repository's secrets, and merging to `main` ships a new version on its
-  own. See [CI and deploy tokens](https://docs.canopy.website/guides/ci).
+- **Automatically from CI** — link the project's GitHub repository once
+  (`canopy repo link`), and every push to `main` ships a new version on its own,
+  with no secret. Other CI uses a deploy token. See [CI deploys](https://docs.canopy.website/guides/ci).
 
 The dashboard's deploy history shows every version with who published it and
 where it came from (CLI, dashboard, or CI).
@@ -90,4 +90,4 @@ Downloads are limited to the project's members; the deploy bundle is your
 source, not the public site.
 
 - [Deploying](https://docs.canopy.website/guides/deploy) — Build commands, canopy.json, and what canopy deploy does step by step.
-- [CI and deploy tokens](https://docs.canopy.website/guides/ci) — Ship a new version automatically on every push to main.
+- [CI deploys](https://docs.canopy.website/guides/ci) — Ship a new version automatically on every push to main.

package/dist/{docs-Cpky2XNP.mjs → docs-CtMrMpt1.mjs}

@@ -1,8 +1,8 @@
-import { t as version } from "./package-Dph4v1Cq.mjs";
-import { r as siteConfig } from "./site-0i7wAJqg.mjs";
+import { t as version } from "./package-BdNHq8QV.mjs";
+import { r as siteConfig } from "./site-BL5Ik-yj.mjs";
 import { i as latestKnownVersion, r as compareSemver } from "./version-check-CcsA1QjI.mjs";
-import { n as agentHeaders } from "./api-Bl6SG8Oq.mjs";
-import { r as reportErrors } from "./ui-CLnICOne.mjs";
+import { n as agentHeaders } from "./api-DmJrIsE7.mjs";
+import { r as reportErrors } from "./ui-26ETk1n8.mjs";
 import { defineCommand } from "citty";
 import { existsSync, mkdirSync, readFileSync, readdirSync, writeFileSync } from "node:fs";
 import { homedir } from "node:os";

package/dist/{egress-C2amvqmE.mjs → egress-BM4EpLBh.mjs}

@@ -1,6 +1,6 @@
-import { l as resolveProject, o as projectDirArgs } from "./site-0i7wAJqg.mjs";
-import { a as apiRequest, f as withContext } from "./api-Bl6SG8Oq.mjs";
-import { a as unwrap, i as requireTty, r as reportErrors, t as formatDateTime } from "./ui-CLnICOne.mjs";
+import { c as projectDirArgs, d as resolveProject } from "./site-BL5Ik-yj.mjs";
+import { a as apiRequest, m as withContext } from "./api-DmJrIsE7.mjs";
+import { a as unwrap, i as requireTty, r as reportErrors, t as formatDateTime } from "./ui-26ETk1n8.mjs";
 import { defineCommand } from "citty";
 import * as p from "@clack/prompts";
 //#region src/egress.ts

package/dist/{feedback-CTV6inRg.mjs → feedback-BXhbxyXI.mjs}

@@ -1,7 +1,7 @@
-import { t as version } from "./package-Dph4v1Cq.mjs";
-import { f as tryReadCanopyJson, l as resolveProject, o as projectDirArgs, p as tryResolveProject, r as siteConfig } from "./site-0i7wAJqg.mjs";
-import { a as apiRequest, c as credentials, i as apiDownload, o as apiUpload, s as commonHeaders } from "./api-Bl6SG8Oq.mjs";
-import { r as reportErrors, t as formatDateTime } from "./ui-CLnICOne.mjs";
+import { t as version } from "./package-BdNHq8QV.mjs";
+import { c as projectDirArgs, d as resolveProject, h as tryResolveProject, m as tryReadCanopyJson, r as siteConfig } from "./site-BL5Ik-yj.mjs";
+import { a as apiRequest, c as credentials, i as apiDownload, o as apiUpload, s as commonHeaders } from "./api-DmJrIsE7.mjs";
+import { r as reportErrors, t as formatDateTime } from "./ui-26ETk1n8.mjs";
 import { defineCommand } from "citty";
 import { basename, extname, join } from "node:path";
 import { readFile, writeFile } from "node:fs/promises";
@@ -562,7 +562,7 @@ const watchCommand = defineCommand({
 		} else tryResolveProject({});
 		if (args.since && args.after) throw new Error("Pass --since or --after, not both (--after already says where to resume).");
 		if (args.since && Number.isNaN(Date.parse(args.since))) throw new Error(`--since must be an ISO time such as 2026-10-23T09:00:00Z (got "${args.since}").`);
-		const { apiUrl, token } = credentials();
+		const { apiUrl, token } = await credentials();
 		const controller = new AbortController();
 		const stop = () => controller.abort();
 		process.once("SIGINT", stop);

package/dist/index.mjs

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
-import { t as version } from "./package-Dph4v1Cq.mjs";
-import { i as siteHeaderLine, n as setInvocationProfile } from "./site-0i7wAJqg.mjs";
+import { t as version } from "./package-BdNHq8QV.mjs";
+import { i as siteHeaderLine, n as setInvocationProfile } from "./site-BL5Ik-yj.mjs";
 import { a as notifyOfUpdate, o as runRefresh } from "./version-check-CcsA1QjI.mjs";
 import { defineCommand, runMain } from "citty";
 //#region src/index.ts
@@ -63,39 +63,39 @@ const main = defineCommand({
 		description: "canopy — create and deploy vibecoded projects"
 	},
 	subCommands: {
-		login: () => import("./login-CREcZfLH.mjs").then((m) => m.loginCommand),
-		whoami: () => import("./login-CREcZfLH.mjs").then((m) => m.whoamiCommand),
-		logout: () => import("./login-CREcZfLH.mjs").then((m) => m.logoutCommand),
-		create: () => import("./projects-BRG2HnBs.mjs").then((m) => m.createCommand),
-		init: () => import("./projects-BRG2HnBs.mjs").then((m) => m.initCommand),
-		projects: () => import("./projects-BRG2HnBs.mjs").then((m) => m.projectsCommand),
-		delete: () => import("./projects-BRG2HnBs.mjs").then((m) => m.deleteCommand),
-		rename: () => import("./rename-BGKa25Rq.mjs").then((m) => m.renameCommand),
-		dev: () => import("./dev-CSimnUP3.mjs").then((m) => m.devCommand),
-		deploy: () => import("./deploy-ExrIeX_m.mjs").then((m) => m.deployCommand),
-		promote: () => import("./deploy-ExrIeX_m.mjs").then((m) => m.promoteCommand),
-		staging: () => import("./staging-_2Js0Fkc.mjs").then((m) => m.stagingCommand),
-		rollback: () => import("./deploy-ExrIeX_m.mjs").then((m) => m.rollbackCommand),
-		download: () => import("./deploy-ExrIeX_m.mjs").then((m) => m.downloadCommand),
-		token: () => import("./token-7vSNuz-X.mjs").then((m) => m.tokenCommand),
-		egress: () => import("./egress-C2amvqmE.mjs").then((m) => m.egressCommand),
-		secrets: () => import("./secrets-BjbIi7Gp.mjs").then((m) => m.secretsCommand),
-		roles: () => import("./roles-C7pq9bIx.mjs").then((m) => m.rolesCommand),
-		members: () => import("./roles-C7pq9bIx.mjs").then((m) => m.membersCommand),
-		schedule: () => import("./schedule-BcqBspn3.mjs").then((m) => m.scheduleCommand),
-		feedback: () => import("./feedback-CTV6inRg.mjs").then((m) => m.feedbackCommand),
-		db: () => import("./db-BJJGydgL.mjs").then((m) => m.dbCommand),
-		usage: () => import("./usage-DGGmTwjJ.mjs").then((m) => m.usageCommand),
-		ai: () => import("./ai-FBHTSCLZ.mjs").then((m) => m.aiCommand),
-		open: () => import("./open-Bpz4C2Sr.mjs").then((m) => m.openCommand),
-		browse: () => import("./browse-B8-0dweq.mjs").then((m) => m.browseCommand),
-		docs: () => import("./docs-Cpky2XNP.mjs").then((m) => m.docsCommand),
-		skill: () => import("./skill-Zj19RNo2.mjs").then((m) => m.skillCommand),
-		upgrade: () => import("./upgrade-B9tCAbre.mjs").then((m) => m.upgradeCommand),
-		logs: () => import("./logs-BnrNZvLc.mjs").then((m) => m.logsCommand),
-		mcp: () => import("./mcp-Cy8EwhhD.mjs").then((m) => m.mcpCommand),
-		repo: () => import("./repo-DmFs6H9m.mjs").then((m) => m.repoCommand),
-		template: () => import("./project-template-715H_lnu.mjs").then((m) => m.templateCommand)
+		login: () => import("./login-2MW9sGJO.mjs").then((m) => m.loginCommand),
+		whoami: () => import("./login-2MW9sGJO.mjs").then((m) => m.whoamiCommand),
+		logout: () => import("./login-2MW9sGJO.mjs").then((m) => m.logoutCommand),
+		create: () => import("./projects-CnU3194_.mjs").then((m) => m.createCommand),
+		init: () => import("./projects-CnU3194_.mjs").then((m) => m.initCommand),
+		projects: () => import("./projects-CnU3194_.mjs").then((m) => m.projectsCommand),
+		delete: () => import("./projects-CnU3194_.mjs").then((m) => m.deleteCommand),
+		rename: () => import("./rename-BWvERJgA.mjs").then((m) => m.renameCommand),
+		dev: () => import("./dev-BvVlq9np.mjs").then((m) => m.devCommand),
+		deploy: () => import("./deploy-BnRQusjJ.mjs").then((m) => m.deployCommand),
+		promote: () => import("./deploy-BnRQusjJ.mjs").then((m) => m.promoteCommand),
+		staging: () => import("./staging-Dn8kH9cK.mjs").then((m) => m.stagingCommand),
+		rollback: () => import("./deploy-BnRQusjJ.mjs").then((m) => m.rollbackCommand),
+		download: () => import("./deploy-BnRQusjJ.mjs").then((m) => m.downloadCommand),
+		token: () => import("./token-DMCj88A-.mjs").then((m) => m.tokenCommand),
+		egress: () => import("./egress-BM4EpLBh.mjs").then((m) => m.egressCommand),
+		secrets: () => import("./secrets-BIn2RPoe.mjs").then((m) => m.secretsCommand),
+		roles: () => import("./roles-CrYf_8wk.mjs").then((m) => m.rolesCommand),
+		members: () => import("./roles-CrYf_8wk.mjs").then((m) => m.membersCommand),
+		schedule: () => import("./schedule-DvHSSzfR.mjs").then((m) => m.scheduleCommand),
+		feedback: () => import("./feedback-BXhbxyXI.mjs").then((m) => m.feedbackCommand),
+		db: () => import("./db-DpCMc0uz.mjs").then((m) => m.dbCommand),
+		usage: () => import("./usage-Bpz5B1N1.mjs").then((m) => m.usageCommand),
+		ai: () => import("./ai-CWPQiUft.mjs").then((m) => m.aiCommand),
+		open: () => import("./open-DcQSdfx5.mjs").then((m) => m.openCommand),
+		browse: () => import("./browse-BPLWhoFI.mjs").then((m) => m.browseCommand),
+		docs: () => import("./docs-CtMrMpt1.mjs").then((m) => m.docsCommand),
+		skill: () => import("./skill-vzcCD1b4.mjs").then((m) => m.skillCommand),
+		upgrade: () => import("./upgrade-8_pFNTo5.mjs").then((m) => m.upgradeCommand),
+		logs: () => import("./logs-dZMPTJLu.mjs").then((m) => m.logsCommand),
+		mcp: () => import("./mcp-CGmWkGN8.mjs").then((m) => m.mcpCommand),
+		repo: () => import("./repo-C7AXDtFZ.mjs").then((m) => m.repoCommand),
+		template: () => import("./project-template-Dw11151p.mjs").then((m) => m.templateCommand)
 	}
 });
 const quiet = process.argv[2] === "mcp" && process.argv[3] === "serve" || process.argv[2] === "repo" && process.argv[3] === "credential";

package/dist/{local-BThs382Y.mjs → local-C9Bi9f3y.mjs}

@@ -1,6 +1,6 @@
-import { r as apiDataRequest } from "./api-Bl6SG8Oq.mjs";
+import { r as apiDataRequest } from "./api-DmJrIsE7.mjs";
 import { a as realtimeRouter, c as META_COLUMNS, l as blobRouter, n as WORKER_ATTEST_HEADER, o as dbRouter, s as hasPrivateNames } from "./src-8vxOBOxW.mjs";
-import { a as rewriteApiPath } from "./dev-D-vwE8G-.mjs";
+import { a as rewriteApiPath } from "./dev-BmKeIdMi.mjs";
 import { createRequire } from "node:module";
 import { existsSync, mkdirSync, readFileSync, readdirSync, rmSync, statSync, writeFileSync } from "node:fs";
 import { dirname, join, relative, sep } from "node:path";

package/dist/{login-CREcZfLH.mjs → login-2MW9sGJO.mjs}

@@ -1,6 +1,6 @@
-import { _ as setActiveProfile, b as getBakedProfile, g as readConfigFile, h as listBakedProfiles, m as clearAllProfileTokens, r as siteConfig, v as upsertProfileAuth, x as isProfileId, y as writeConfigFile } from "./site-0i7wAJqg.mjs";
-import { n as agentHeaders } from "./api-Bl6SG8Oq.mjs";
-import { n as openBrowser, r as reportErrors } from "./ui-CLnICOne.mjs";
+import { C as isProfileId, S as getBakedProfile, _ as listBakedProfiles, b as upsertProfileAuth, g as clearAllProfileTokens, r as siteConfig, v as readConfigFile, x as writeConfigFile, y as setActiveProfile } from "./site-BL5Ik-yj.mjs";
+import { n as agentHeaders } from "./api-DmJrIsE7.mjs";
+import { n as openBrowser, r as reportErrors } from "./ui-26ETk1n8.mjs";
 import { n as clearRepoTokenCache } from "./repo-credential-CNDRM-tG.mjs";
 import { defineCommand } from "citty";
 import { hostname } from "node:os";

package/dist/{logs-BnrNZvLc.mjs → logs-dZMPTJLu.mjs}

@@ -1,6 +1,6 @@
-import { l as resolveProject, s as projectFlagArgs } from "./site-0i7wAJqg.mjs";
-import { a as apiRequest, f as withContext } from "./api-Bl6SG8Oq.mjs";
-import { r as reportErrors } from "./ui-CLnICOne.mjs";
+import { d as resolveProject, l as projectFlagArgs } from "./site-BL5Ik-yj.mjs";
+import { a as apiRequest, m as withContext } from "./api-DmJrIsE7.mjs";
+import { r as reportErrors } from "./ui-26ETk1n8.mjs";
 import { defineCommand } from "citty";
 //#region src/logs.ts
 /**

package/dist/{mcp-Cy8EwhhD.mjs → mcp-CGmWkGN8.mjs}

@@ -1,6 +1,6 @@
-import { t as version } from "./package-Dph4v1Cq.mjs";
-import { c as projectUrl, d as stagingUrl, p as tryResolveProject, r as siteConfig } from "./site-0i7wAJqg.mjs";
-import { a as apiRequest, d as noticeRenamesOnly, l as currentSlug, t as ApiError } from "./api-Bl6SG8Oq.mjs";
+import { t as version } from "./package-BdNHq8QV.mjs";
+import { h as tryResolveProject, p as stagingUrl, r as siteConfig, u as projectUrl } from "./site-BL5Ik-yj.mjs";
+import { a as apiRequest, f as noticeRenamesOnly, l as currentSlug, t as ApiError } from "./api-DmJrIsE7.mjs";
 import { t as liveDevServer } from "./dev-server-file-Dk9pk4AR.mjs";
 import { defineCommand } from "citty";
 import { serveStdio } from "@modelcontextprotocol/server/stdio";

package/dist/{migrations-D8NqjC5I.mjs → migrations-BReMlGWP.mjs}

@@ -1,5 +1,5 @@
-import { f as tryReadCanopyJson } from "./site-0i7wAJqg.mjs";
-import { r as apiDataRequest } from "./api-Bl6SG8Oq.mjs";
+import { m as tryReadCanopyJson } from "./site-BL5Ik-yj.mjs";
+import { r as apiDataRequest } from "./api-DmJrIsE7.mjs";
 import { readFileSync, readdirSync } from "node:fs";
 import { join, resolve } from "node:path";
 //#region src/migrations.ts

package/dist/{open-Bpz4C2Sr.mjs → open-DcQSdfx5.mjs}

@@ -1,5 +1,5 @@
-import { c as projectUrl, d as stagingUrl, l as resolveProject, o as projectDirArgs } from "./site-0i7wAJqg.mjs";
-import { n as openBrowser, r as reportErrors } from "./ui-CLnICOne.mjs";
+import { c as projectDirArgs, d as resolveProject, p as stagingUrl, u as projectUrl } from "./site-BL5Ik-yj.mjs";
+import { n as openBrowser, r as reportErrors } from "./ui-26ETk1n8.mjs";
 import { defineCommand } from "citty";
 //#region src/open.ts
 /**

package/dist/{package-Dph4v1Cq.mjs → package-BdNHq8QV.mjs}

@@ -1,4 +1,4 @@
 //#region package.json
-var version = "0.7.45";
+var version = "0.7.46";
 //#endregion
 export { version as t };

package/dist/{project-template-Cdr1uwwE.mjs → project-template-BPW_Dgxj.mjs}

@@ -1,6 +1,6 @@
-import { l as resolveProject, o as projectDirArgs } from "./site-0i7wAJqg.mjs";
-import { a as apiRequest, f as withContext } from "./api-Bl6SG8Oq.mjs";
-import { a as unwrap, i as requireTty, r as reportErrors } from "./ui-CLnICOne.mjs";
+import { c as projectDirArgs, d as resolveProject } from "./site-BL5Ik-yj.mjs";
+import { a as apiRequest, m as withContext } from "./api-DmJrIsE7.mjs";
+import { a as unwrap, i as requireTty, r as reportErrors } from "./ui-26ETk1n8.mjs";
 import { defineCommand } from "citty";
 import * as p from "@clack/prompts";
 /** Plain words for the API's template errors. */

package/dist/project-template-Dw11151p.mjs

@@ -0,0 +1,2 @@
+import { a as templateCommand } from "./project-template-BPW_Dgxj.mjs";
+export { templateCommand };

package/dist/{projects-BRG2HnBs.mjs → projects-CnU3194_.mjs}

@@ -1,8 +1,8 @@
-import { c as projectUrl, f as tryReadCanopyJson, r as siteConfig } from "./site-0i7wAJqg.mjs";
-import { a as apiRequest, f as withContext } from "./api-Bl6SG8Oq.mjs";
-import { a as unwrap, i as requireTty, r as reportErrors } from "./ui-CLnICOne.mjs";
-import { i as nextSteps, n as describeCopy, r as fetchTemplate, t as TEMPLATE_FIXES } from "./project-template-Cdr1uwwE.mjs";
-import { i as offerRepoOnCreate, n as cloneProjectRepo } from "./repo-CwT2RDoW.mjs";
+import { m as tryReadCanopyJson, r as siteConfig, u as projectUrl } from "./site-BL5Ik-yj.mjs";
+import { a as apiRequest, m as withContext } from "./api-DmJrIsE7.mjs";
+import { a as unwrap, i as requireTty, r as reportErrors } from "./ui-26ETk1n8.mjs";
+import { i as nextSteps, n as describeCopy, r as fetchTemplate, t as TEMPLATE_FIXES } from "./project-template-BPW_Dgxj.mjs";
+import { a as offerRepoOnCreate, i as githubOrigin, n as cloneProjectRepo } from "./repo-6a7gRQaf.mjs";
 import { defineCommand } from "citty";
 import { existsSync, mkdirSync, readFileSync, readdirSync, writeFileSync } from "node:fs";
 import { join, relative, resolve, sep } from "node:path";
@@ -84,6 +84,17 @@ function slugify(input) {
 function shouldScaffoldCreate(requested, cwd = process.cwd()) {
 	return requested ?? !existsSync(join(cwd, "canopy.json"));
 }
+/**
+* The "deploy from GitHub" next step (OpenSpec platform-oauth-oidc). Never a
+* link: linking turns CI deploys on, which is the owner's call. With a GitHub
+* `origin` the exact command; without one the shape of it. A folder that
+* pushes to a Canopy repository needs no link, so no step.
+*/
+async function ciLinkStep(dir, canopyRemote) {
+	if (canopyRemote) return [];
+	const origin = await githubOrigin(dir);
+	return origin ? [`canopy repo link ${origin.host}/${origin.repository}   (deploy on every push to main)`] : ["canopy repo link <owner/name>   (once it's on GitHub: deploy on every push to main)"];
+}
 const createCommand = defineCommand({
 	meta: {
 		name: "create",
@@ -186,13 +197,15 @@ const createCommand = defineCommand({
 				`cd ${slug}`,
 				...template.needsInstall ? ["npm install"] : [],
 				...remote ? [`git add -A && git commit -m "Initial commit" && git push -u ${remote} main`] : [],
-				"canopy dev   (or deploy right away: canopy deploy)"
+				"canopy dev   (or deploy right away: canopy deploy)",
+				...await ciLinkStep(targetDir, remote)
 			];
 			p.note(steps.join("\n"), `Scaffolded ./${slug}/ (${template.id}) — next`);
 			p.outro(`Live URL (after first deploy): ${projectUrl(project.slug)}`);
 		} else {
 			const remote = await offerRepoOnCreate(slug, process.cwd(), args.repo);
 			if (remote) p.log.info(`This folder pushes to the project's git repository as "${remote}".`);
+			for (const step of await ciLinkStep(process.cwd(), remote)) p.log.info(`Next: ${step}`);
 			p.outro(existsSync(join(process.cwd(), "canopy.json")) ? "Registered without scaffolding — the existing canopy.json was left unchanged." : "Registered without scaffolding — add a canopy.json to deploy an existing app.");
 		}
 	})
@@ -319,7 +332,8 @@ const initCommand = defineCommand({
 			const steps = [
 				...rel === "." ? [] : [`cd ${rel}`],
 				...template.needsInstall ? ["npm install"] : [],
-				"canopy dev   (or deploy right away: canopy deploy)"
+				"canopy dev   (or deploy right away: canopy deploy)",
+				...await ciLinkStep(targetDir, null)
 			];
 			p.note(steps.join("\n"), `Scaffolded ${rel}/ (${template.id}) for ${slug} — next`);
 			p.outro(`Live URL (after first deploy): ${projectUrl(slug)}`);
@@ -333,7 +347,11 @@ const initCommand = defineCommand({
 			return;
 		}
 		writeCanopyJson(targetDir, { slug });
-		p.note("Add \"dist\"/\"build\" to canopy.json if this app has a build step, then:\ncanopy deploy", `Linked ${rel} to ${slug}`);
+		p.note([
+			"Add \"dist\"/\"build\" to canopy.json if this app has a build step, then:",
+			"canopy deploy",
+			...await ciLinkStep(targetDir, null)
+		].join("\n"), `Linked ${rel} to ${slug}`);
 		p.outro(`Live URL (after first deploy): ${projectUrl(slug)}`);
 	})
 });

package/dist/{rename-BGKa25Rq.mjs → rename-BWvERJgA.mjs}

@@ -1,6 +1,6 @@
-import { c as projectUrl, l as resolveProject, o as projectDirArgs, u as rewriteCanopyJsonSlug } from "./site-0i7wAJqg.mjs";
-import { a as apiRequest, f as withContext } from "./api-Bl6SG8Oq.mjs";
-import { a as unwrap, i as requireTty, r as reportErrors } from "./ui-CLnICOne.mjs";
+import { c as projectDirArgs, d as resolveProject, f as rewriteCanopyJsonSlug, u as projectUrl } from "./site-BL5Ik-yj.mjs";
+import { a as apiRequest, m as withContext } from "./api-DmJrIsE7.mjs";
+import { a as unwrap, i as requireTty, r as reportErrors } from "./ui-26ETk1n8.mjs";
 import { defineCommand } from "citty";
 import * as p from "@clack/prompts";
 //#region src/rename.ts