@mondaydotcomorg/z2h-cli 0.1.0

package/dist/shadow/consumer-pkg.d.ts

@@ -0,0 +1,24 @@
+import type { ConsumerPkg } from '../types';
+/**
+ * Return the consumer's `workspaces` field extended with `.zth`. Handles
+ * all three shapes: missing, array form, or object form (`{ packages }`).
+ * Always extends — never replaces the user's existing entries.
+ */
+export declare function ensureConsumerWorkspaces(pkg: ConsumerPkg): {
+    changed: boolean;
+    workspaces: ConsumerPkg['workspaces'];
+};
+/**
+ * Idempotently reshape the consumer's package.json so that:
+ *  - it is marked `"private": true`
+ *  - `.zth` is declared as a yarn workspace member (yarn will hoist)
+ *  - the protected runtime deps are present at compatible versions
+ *  - the protected dev deps are present at compatible versions
+ *
+ * Always extends — never overrides existing fields.
+ */
+export declare function ensureConsumerPkg(pkgPath: string, pkg: ConsumerPkg): Promise<{
+    changed: boolean;
+    pkg: ConsumerPkg;
+}>;
+//# sourceMappingURL=consumer-pkg.d.ts.map

package/dist/shadow/consumer-pkg.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"consumer-pkg.d.ts","sourceRoot":"","sources":["../../src/shadow/consumer-pkg.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AAE5C;;;;GAIG;AACH,wBAAgB,wBAAwB,CAAC,GAAG,EAAE,WAAW,GAAG;IAC1D,OAAO,EAAE,OAAO,CAAC;IACjB,UAAU,EAAE,WAAW,CAAC,YAAY,CAAC,CAAC;CACvC,CAsBA;AAqBD;;;;;;;;GAQG;AACH,wBAAsB,iBAAiB,CACrC,OAAO,EAAE,MAAM,EACf,GAAG,EAAE,WAAW,GACf,OAAO,CAAC;IAAE,OAAO,EAAE,OAAO,CAAC;IAAC,GAAG,EAAE,WAAW,CAAA;CAAE,CAAC,CAgCjD"}

package/dist/shadow/consumer-pkg.js

@@ -0,0 +1,84 @@
+Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
+
+const fsExtra = require('fs-extra');
+const constants = require('../constants.js');
+
+/**
+ * Return the consumer's `workspaces` field extended with `.zth`. Handles
+ * all three shapes: missing, array form, or object form (`{ packages }`).
+ * Always extends — never replaces the user's existing entries.
+ */
+function ensureConsumerWorkspaces(pkg) {
+    const { workspaces } = pkg;
+    if (Array.isArray(workspaces)) {
+        if (workspaces.includes(constants.SHADOW_DIR_NAME)) {
+            return { changed: false, workspaces };
+        }
+        return { changed: true, workspaces: [...workspaces, constants.SHADOW_DIR_NAME] };
+    }
+    if (workspaces && typeof workspaces === 'object') {
+        const pkgs = workspaces.packages ?? [];
+        if (pkgs.includes(constants.SHADOW_DIR_NAME)) {
+            return { changed: false, workspaces };
+        }
+        return {
+            changed: true,
+            workspaces: { ...workspaces, packages: [...pkgs, constants.SHADOW_DIR_NAME] },
+        };
+    }
+    return { changed: true, workspaces: [constants.SHADOW_DIR_NAME] };
+}
+/**
+ * Extend a deps map with the protected entries; only fills in missing ones,
+ * never overrides versions the consumer already pinned.
+ */
+function applyProtected(current, protectedMap) {
+    const next = { ...(current ?? {}) };
+    let changed = false;
+    for (const [name, version] of Object.entries(protectedMap)) {
+        if (!next[name]) {
+            next[name] = version;
+            changed = true;
+        }
+    }
+    return { changed, next };
+}
+/**
+ * Idempotently reshape the consumer's package.json so that:
+ *  - it is marked `"private": true`
+ *  - `.zth` is declared as a yarn workspace member (yarn will hoist)
+ *  - the protected runtime deps are present at compatible versions
+ *  - the protected dev deps are present at compatible versions
+ *
+ * Always extends — never overrides existing fields.
+ */
+async function ensureConsumerPkg(pkgPath, pkg) {
+    let changed = false;
+    const next = { ...pkg };
+    if (next.private !== true) {
+        next.private = true;
+        changed = true;
+    }
+    const ws = ensureConsumerWorkspaces(next);
+    if (ws.changed) {
+        next.workspaces = ws.workspaces;
+        changed = true;
+    }
+    const deps = applyProtected(next.dependencies, constants.PROTECTED_DEPS);
+    if (deps.changed) {
+        next.dependencies = deps.next;
+        changed = true;
+    }
+    const devDeps = applyProtected(next.devDependencies, constants.PROTECTED_DEV_DEPS);
+    if (devDeps.changed) {
+        next.devDependencies = devDeps.next;
+        changed = true;
+    }
+    if (changed) {
+        await fsExtra.writeJson(pkgPath, next, { spaces: 2 });
+    }
+    return { changed, pkg: next };
+}
+
+exports.ensureConsumerPkg = ensureConsumerPkg;
+exports.ensureConsumerWorkspaces = ensureConsumerWorkspaces;

package/dist/shadow/gitignore.d.ts

@@ -0,0 +1,7 @@
+/**
+ * Idempotently append our shadow-dir entries to the consumer's .gitignore.
+ * Never modifies existing entries; only appends missing ones. Creates the
+ * file if absent.
+ */
+export declare function ensureGitignore(consumerDir: string): Promise<void>;
+//# sourceMappingURL=gitignore.d.ts.map

package/dist/shadow/gitignore.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"gitignore.d.ts","sourceRoot":"","sources":["../../src/shadow/gitignore.ts"],"names":[],"mappings":"AAIA;;;;GAIG;AACH,wBAAsB,eAAe,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAoBxE"}

package/dist/shadow/gitignore.js

@@ -0,0 +1,35 @@
+Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
+
+const path = require('node:path');
+const fsExtra = require('fs-extra');
+const constants = require('../constants.js');
+
+const _interopDefault = e => e && e.__esModule ? e : { default: e };
+
+const path__default = /*#__PURE__*/_interopDefault(path);
+
+/**
+ * Idempotently append our shadow-dir entries to the consumer's .gitignore.
+ * Never modifies existing entries; only appends missing ones. Creates the
+ * file if absent.
+ */
+async function ensureGitignore(consumerDir) {
+    const gitignorePath = path__default.default.join(consumerDir, '.gitignore');
+    let body = '';
+    if (await fsExtra.pathExists(gitignorePath)) {
+        body = await fsExtra.readFile(gitignorePath, 'utf8');
+    }
+    const existing = new Set(body
+        .split('\n')
+        .map(l => l.trim())
+        .filter(Boolean));
+    const missing = constants.GITIGNORE_ENTRIES.filter(e => !existing.has(e));
+    if (missing.length === 0) {
+        return;
+    }
+    const prefix = body.length && !body.endsWith('\n') ? '\n' : '';
+    const block = `${prefix}\n# z2h-cli\n${missing.join('\n')}\n`;
+    await fsExtra.writeFile(gitignorePath, body + block);
+}
+
+exports.ensureGitignore = ensureGitignore;

package/dist/shadow/merge-package-json.d.ts

@@ -0,0 +1,16 @@
+import type { ConsumerPkg, ShadowPkg } from '../types';
+/**
+ * Build the shadow package.json. Declares the shared runtime deps as
+ * peerDependencies — yarn resolves them from the workspace root (the
+ * consumer's package.json), guaranteeing a single React instance across
+ * the wrapper and consumer src.
+ */
+export declare function buildShadowPkg(consumerPkg: ConsumerPkg): ShadowPkg;
+/**
+ * Hash the consumer's declared deps. This is the sole input that decides
+ * whether `yarn install` needs to run — the shadow package.json is
+ * regenerated from a CLI-owned template every run and doesn't participate.
+ */
+export declare function hashConsumerDeps(consumer: ConsumerPkg): string;
+export declare function writeShadowPkg(shadowPkgPath: string, shadow: ShadowPkg): Promise<void>;
+//# sourceMappingURL=merge-package-json.d.ts.map

package/dist/shadow/merge-package-json.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"merge-package-json.d.ts","sourceRoot":"","sources":["../../src/shadow/merge-package-json.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,UAAU,CAAC;AAEvD;;;;;GAKG;AACH,wBAAgB,cAAc,CAAC,WAAW,EAAE,WAAW,GAAG,SAAS,CAalE;AAgBD;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,WAAW,GAAG,MAAM,CAW9D;AAED,wBAAsB,cAAc,CAAC,aAAa,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,CAE5F"}

package/dist/shadow/merge-package-json.js

@@ -0,0 +1,66 @@
+Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
+
+const crypto = require('node:crypto');
+const fsExtra = require('fs-extra');
+const constants = require('../constants.js');
+const util_appName = require('../util/app-name.js');
+
+const _interopDefault = e => e && e.__esModule ? e : { default: e };
+
+const crypto__default = /*#__PURE__*/_interopDefault(crypto);
+
+/**
+ * Build the shadow package.json. Declares the shared runtime deps as
+ * peerDependencies — yarn resolves them from the workspace root (the
+ * consumer's package.json), guaranteeing a single React instance across
+ * the wrapper and consumer src.
+ */
+function buildShadowPkg(consumerPkg) {
+    // Use the `@trident/` scope so trident-toolkit strips it and the emitted
+    // bundle becomes `MF-mf-<appName>`, matching the URL the host MF routes to.
+    // The scope also keeps the shadow's name distinct from the consumer's
+    // package.json name (same workspace, different identifiers).
+    return {
+        name: `@trident/${util_appName.mfAppName(consumerPkg.name)}`,
+        version: '0.0.1',
+        private: true,
+        scripts: constants.SHADOW_SCRIPTS,
+        peerDependencies: { ...constants.PROTECTED_DEPS },
+        devDependencies: constants.WORKSPACE_DEV_DEPS,
+    };
+}
+/**
+ * Stable, key-sorted serialization. Two objects with the same keys/values
+ * hash identically regardless of insertion order — so re-orderings from
+ * yarn's install or ensureConsumerPkg don't trigger spurious reinstalls.
+ */
+function stableStringify(value) {
+    return JSON.stringify(value, (_key, v) => {
+        if (v && typeof v === 'object' && !Array.isArray(v)) {
+            return Object.fromEntries(Object.entries(v).sort(([a], [b]) => a.localeCompare(b)));
+        }
+        return v;
+    });
+}
+/**
+ * Hash the consumer's declared deps. This is the sole input that decides
+ * whether `yarn install` needs to run — the shadow package.json is
+ * regenerated from a CLI-owned template every run and doesn't participate.
+ */
+function hashConsumerDeps(consumer) {
+    return crypto__default.default
+        .createHash('sha256')
+        .update(stableStringify({
+        deps: consumer.dependencies ?? {},
+        devDeps: consumer.devDependencies ?? {},
+        peerDeps: consumer.peerDependencies ?? {},
+    }))
+        .digest('hex');
+}
+async function writeShadowPkg(shadowPkgPath, shadow) {
+    await fsExtra.writeJson(shadowPkgPath, shadow, { spaces: 2 });
+}
+
+exports.buildShadowPkg = buildShadowPkg;
+exports.hashConsumerDeps = hashConsumerDeps;
+exports.writeShadowPkg = writeShadowPkg;

package/dist/shadow/metadata.d.ts

@@ -0,0 +1,4 @@
+import type { ConsumerPaths, ShadowMetadata } from '../types';
+export declare function readMetadata(paths: ConsumerPaths): Promise<ShadowMetadata | null>;
+export declare function writeMetadata(paths: ConsumerPaths, meta: ShadowMetadata): Promise<void>;
+//# sourceMappingURL=metadata.d.ts.map

package/dist/shadow/metadata.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"metadata.d.ts","sourceRoot":"","sources":["../../src/shadow/metadata.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,UAAU,CAAC;AAE9D,wBAAsB,YAAY,CAAC,KAAK,EAAE,aAAa,GAAG,OAAO,CAAC,cAAc,GAAG,IAAI,CAAC,CASvF;AAED,wBAAsB,aAAa,CAAC,KAAK,EAAE,aAAa,EAAE,IAAI,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC,CAE7F"}

package/dist/shadow/metadata.js

@@ -0,0 +1,21 @@
+Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
+
+const fsExtra = require('fs-extra');
+
+async function readMetadata(paths) {
+    if (!(await fsExtra.pathExists(paths.shadowMetadata))) {
+        return null;
+    }
+    try {
+        return (await fsExtra.readJson(paths.shadowMetadata));
+    }
+    catch {
+        return null;
+    }
+}
+async function writeMetadata(paths, meta) {
+    await fsExtra.writeJson(paths.shadowMetadata, meta, { spaces: 2 });
+}
+
+exports.readMetadata = readMetadata;
+exports.writeMetadata = writeMetadata;

package/dist/shadow/paths.d.ts

@@ -0,0 +1,3 @@
+import type { ConsumerPaths } from '../types';
+export declare function resolveConsumerPaths(consumerDir: string): ConsumerPaths;
+//# sourceMappingURL=paths.d.ts.map

package/dist/shadow/paths.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"paths.d.ts","sourceRoot":"","sources":["../../src/shadow/paths.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAE9C,wBAAgB,oBAAoB,CAAC,WAAW,EAAE,MAAM,GAAG,aAAa,CAmBvE"}

package/dist/shadow/paths.js

@@ -0,0 +1,31 @@
+Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
+
+const path = require('node:path');
+const constants = require('../constants.js');
+
+const _interopDefault = e => e && e.__esModule ? e : { default: e };
+
+const path__default = /*#__PURE__*/_interopDefault(path);
+
+function resolveConsumerPaths(consumerDir) {
+    const shadowDir = path__default.default.join(consumerDir, constants.SHADOW_DIR_NAME);
+    return {
+        consumerDir,
+        consumerPkg: path__default.default.join(consumerDir, 'package.json'),
+        consumerSrc: path__default.default.join(consumerDir, 'src'),
+        consumerSrcEntry: path__default.default.join(consumerDir, 'src', 'index.tsx'),
+        shadowDir,
+        shadowPkg: path__default.default.join(shadowDir, 'package.json'),
+        shadowSrc: path__default.default.join(shadowDir, 'src'),
+        shadowWrapper: path__default.default.join(shadowDir, 'src', 'index.tsx'),
+        shadowTridentrc: path__default.default.join(shadowDir, '.tridentrc.js'),
+        shadowNvmrc: path__default.default.join(shadowDir, '.nvmrc'),
+        shadowDts: path__default.default.join(shadowDir, 'src', 'declaration.d.ts'),
+        shadowTsconfig: path__default.default.join(shadowDir, 'tsconfig.json'),
+        shadowBuild: path__default.default.join(shadowDir, 'build'),
+        shadowDepsHash: path__default.default.join(shadowDir, '.deps-hash'),
+        shadowMetadata: path__default.default.join(shadowDir, 'metadata.json'),
+    };
+}
+
+exports.resolveConsumerPaths = resolveConsumerPaths;

package/dist/shadow/port.d.ts

@@ -0,0 +1,7 @@
+/**
+ * Tries to bind to `port` on localhost; resolves true if the bind succeeds
+ * (port is free) and the listener was cleanly closed.
+ */
+export declare function isPortFree(port: number): Promise<boolean>;
+export declare function pickPort(): Promise<number>;
+//# sourceMappingURL=port.d.ts.map

package/dist/shadow/port.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"port.d.ts","sourceRoot":"","sources":["../../src/shadow/port.ts"],"names":[],"mappings":"AAOA;;;GAGG;AACH,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAOzD;AAOD,wBAAsB,QAAQ,IAAI,OAAO,CAAC,MAAM,CAAC,CAQhD"}

package/dist/shadow/port.js

@@ -0,0 +1,41 @@
+Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
+
+const net = require('node:net');
+const constants = require('../constants.js');
+
+const _interopDefault = e => e && e.__esModule ? e : { default: e };
+
+const net__default = /*#__PURE__*/_interopDefault(net);
+
+function randomPort() {
+    return constants.MIN_PORT + Math.floor(Math.random() * (constants.MAX_PORT - constants.MIN_PORT + 1));
+}
+/**
+ * Tries to bind to `port` on localhost; resolves true if the bind succeeds
+ * (port is free) and the listener was cleanly closed.
+ */
+function isPortFree(port) {
+    return new Promise(resolve => {
+        const server = net__default.default.createServer();
+        server.once('error', () => resolve(false));
+        server.once('listening', () => server.close(() => resolve(true)));
+        server.listen(port, '127.0.0.1');
+    });
+}
+/**
+ * Picks a random port from the configured range and verifies it's actually
+ * free before returning. Tries up to `MAX_PORT_TRIES` candidates.
+ */
+const MAX_PORT_TRIES = 50;
+async function pickPort() {
+    for (let i = 0; i < MAX_PORT_TRIES; i++) {
+        const p = randomPort();
+        if (await isPortFree(p)) {
+            return p;
+        }
+    }
+    throw new Error(`Could not find a free port in range ${constants.MIN_PORT}-${constants.MAX_PORT} after ${MAX_PORT_TRIES} tries`);
+}
+
+exports.isPortFree = isPortFree;
+exports.pickPort = pickPort;

package/dist/shadow/prepare.d.ts

@@ -0,0 +1,3 @@
+import type { PreparedShadow } from '../types';
+export declare function prepareShadow(): Promise<PreparedShadow>;
+//# sourceMappingURL=prepare.d.ts.map

package/dist/shadow/prepare.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"prepare.d.ts","sourceRoot":"","sources":["../../src/shadow/prepare.ts"],"names":[],"mappings":"AAWA,OAAO,KAAK,EAA8B,cAAc,EAAkB,MAAM,UAAU,CAAC;AAE3F,wBAAsB,aAAa,IAAI,OAAO,CAAC,cAAc,CAAC,CAiC7D"}

package/dist/shadow/prepare.js

@@ -0,0 +1,62 @@
+Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
+
+const fsExtra = require('fs-extra');
+const util_logger = require('../util/logger.js');
+const util_appName = require('../util/app-name.js');
+const shadow_paths = require('./paths.js');
+const shadow_gitignore = require('./gitignore.js');
+const shadow_yarnrc = require('./yarnrc.js');
+const shadow_consumerPkg = require('./consumer-pkg.js');
+const shadow_scaffold = require('./scaffold.js');
+const shadow_metadata = require('./metadata.js');
+const shadow_port = require('./port.js');
+const shadow_sync = require('./sync.js');
+
+async function prepareShadow() {
+    const paths = shadow_paths.resolveConsumerPaths(process.cwd());
+    if (!(await fsExtra.pathExists(paths.consumerPkg))) {
+        throw new Error(`No package.json found in ${paths.consumerDir}`);
+    }
+    if (!(await fsExtra.pathExists(paths.consumerSrcEntry))) {
+        throw new Error(`Consumer must have src/index.tsx (in ${paths.consumerDir})`);
+    }
+    const rawConsumerPkg = (await fsExtra.readJson(paths.consumerPkg));
+    if (!rawConsumerPkg.name) {
+        throw new Error('Consumer package.json must have a "name" field');
+    }
+    const appName = util_appName.cleanAppName(rawConsumerPkg.name);
+    const { pkg: consumerPkg, changed: consumerChanged } = await shadow_consumerPkg.ensureConsumerPkg(paths.consumerPkg, rawConsumerPkg);
+    if (consumerChanged) {
+        util_logger.info(`ensured consumer pkg shape at ${paths.consumerPkg}`);
+    }
+    await shadow_gitignore.ensureGitignore(paths.consumerDir);
+    await shadow_yarnrc.ensureYarnRc(paths.consumerDir);
+    await fsExtra.ensureDir(paths.shadowDir);
+    const metadata = await resolvePortAndMetadata(paths, appName);
+    const port = metadata.port;
+    util_logger.info(`preparing shadow at ${paths.shadowDir} (port ${port})`);
+    await shadow_scaffold.scaffoldShadow(paths, appName, port);
+    await shadow_sync.syncShadow(paths, consumerPkg);
+    return { appName, port, paths };
+}
+/**
+ * Resolve the dev server port. Prefer the persisted port if it's still free
+ * (URL stays stable across restarts). Otherwise pick a fresh one. The
+ * orphaned process — if there is one — keeps running on its old port,
+ * harmless. No process killing, no PID files.
+ */
+async function resolvePortAndMetadata(paths, appName) {
+    const existing = await shadow_metadata.readMetadata(paths);
+    if (existing?.port && (await shadow_port.isPortFree(existing.port))) {
+        return existing;
+    }
+    const next = {
+        createdAt: existing?.createdAt ?? new Date().toISOString(),
+        appName,
+        port: await shadow_port.pickPort(),
+    };
+    await shadow_metadata.writeMetadata(paths, next);
+    return next;
+}
+
+exports.prepareShadow = prepareShadow;

package/dist/shadow/scaffold.d.ts

@@ -0,0 +1,7 @@
+import type { ConsumerPaths } from '../types';
+/**
+ * Write every generated file under .zth/. Overwrites on every run so the
+ * shadow dir is a deterministic function of the CLI version — no drift.
+ */
+export declare function scaffoldShadow(paths: ConsumerPaths, appName: string, port: number): Promise<void>;
+//# sourceMappingURL=scaffold.d.ts.map

package/dist/shadow/scaffold.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"scaffold.d.ts","sourceRoot":"","sources":["../../src/shadow/scaffold.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAqG9C;;;GAGG;AACH,wBAAsB,cAAc,CAAC,KAAK,EAAE,aAAa,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAYvG"}

package/dist/shadow/scaffold.js

@@ -0,0 +1,118 @@
+Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
+
+const path = require('node:path');
+const fsExtra = require('fs-extra');
+
+const _interopDefault = e => e && e.__esModule ? e : { default: e };
+
+const path__default = /*#__PURE__*/_interopDefault(path);
+
+const WRAPPER_TEMPLATE = `import '@vibe/core/tokens';
+import ConsumerApp from '../../src/index';
+import React from 'react';
+import * as ReactDOM from 'react-dom/client';
+import { ErrorBoundary } from 'react-error-boundary';
+
+const roots = new Map<HTMLElement, ReactDOM.Root>();
+
+export function init() {}
+
+export function render(element: HTMLElement) {
+  const root = ReactDOM.createRoot(element);
+  root.render(
+    <ErrorBoundary fallback={<div style={{ padding: 16 }}>This app crashed.</div>}>
+      <ConsumerApp />
+    </ErrorBoundary>,
+  );
+  roots.set(element, root);
+}
+
+export function unmount({ element }: { element: HTMLElement }) {
+  const root = roots.get(element);
+  if (root) {
+    root.unmount();
+    roots.delete(element);
+  }
+}
+`;
+const tridentrcTemplate = (appName, port) => `/** @type {import("@mondaydotcomorg/trident-user-config").MicroFrontendConfig} */
+const config = {
+  appName: '${appName}',
+  port: ${port},
+};
+
+module.exports = config;
+`;
+const dtsFileTemplate = () => `
+declare module '*.module.css' {
+  const classNames: {
+    [className: string]: string;
+  };
+  export = classNames;
+}
+
+declare module '*.module.scss' {
+  const classNames: {
+    [className: string]: string;
+  };
+  export = classNames;
+}
+
+declare module '*.jpg' {
+  const e: string;
+  export default e;
+}
+declare module '*.jpeg' {
+  const e: string;
+  export default e;
+}
+declare module '*.png' {
+  const e: string;
+  export default e;
+}
+declare module '*.riv' {
+  const e: string;
+  export default e;
+}
+
+declare module '*.wasm' {
+  const e: string;
+  export default e;
+}
+`;
+const TSCONFIG_TEMPLATE = {
+    compilerOptions: {
+        target: 'es5',
+        lib: ['dom', 'dom.iterable', 'esnext'],
+        allowJs: false,
+        skipLibCheck: true,
+        esModuleInterop: true,
+        allowSyntheticDefaultImports: true,
+        strict: false,
+        module: 'esnext',
+        moduleResolution: 'bundler',
+        resolveJsonModule: true,
+        noImplicitAny: false,
+        isolatedModules: true,
+        baseUrl: 'src',
+        noEmit: true,
+        jsx: 'react-jsx',
+    },
+    include: ['src', '../src'],
+};
+/**
+ * Write every generated file under .zth/. Overwrites on every run so the
+ * shadow dir is a deterministic function of the CLI version — no drift.
+ */
+async function scaffoldShadow(paths, appName, port) {
+    await fsExtra.ensureDir(paths.shadowSrc);
+    await fsExtra.writeFile(paths.shadowWrapper, WRAPPER_TEMPLATE);
+    await fsExtra.writeFile(paths.shadowTridentrc, tridentrcTemplate(appName, port));
+    await fsExtra.writeFile(paths.shadowNvmrc, `${process.version}\n`);
+    await fsExtra.writeFile(paths.shadowDts, dtsFileTemplate());
+    await fsExtra.writeJson(paths.shadowTsconfig, TSCONFIG_TEMPLATE, { spaces: 2 });
+    // Drop a stub README so contributors who open .zth/ know what they're looking at.
+    await fsExtra.writeFile(path__default.default.join(paths.shadowDir, 'README.md'), '# .zth/\nGenerated by z2h-cli. Do not edit — run `z2h-cli build` or `z2h-cli dev` to refresh.\n');
+}
+
+exports.scaffoldShadow = scaffoldShadow;

package/dist/shadow/sync.d.ts

@@ -0,0 +1,9 @@
+import type { ConsumerPaths, ConsumerPkg } from '../types';
+/**
+ * Regenerate the shadow package.json from the current CLI template and
+ * run `yarn install` at the consumer dir iff the consumer's declared deps
+ * have changed since the last install. Idempotent — safe to call on every
+ * build, dev start, or consumer package.json edit.
+ */
+export declare function syncShadow(paths: ConsumerPaths, consumerPkg: ConsumerPkg): Promise<void>;
+//# sourceMappingURL=sync.d.ts.map

package/dist/shadow/sync.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sync.d.ts","sourceRoot":"","sources":["../../src/shadow/sync.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AAE3D;;;;;GAKG;AACH,wBAAsB,UAAU,CAAC,KAAK,EAAE,aAAa,EAAE,WAAW,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAiB9F"}

package/dist/shadow/sync.js

@@ -0,0 +1,31 @@
+Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
+
+const fsExtra = require('fs-extra');
+const execa = require('execa');
+const util_logger = require('../util/logger.js');
+const shadow_mergePackageJson = require('./merge-package-json.js');
+
+/**
+ * Regenerate the shadow package.json from the current CLI template and
+ * run `yarn install` at the consumer dir iff the consumer's declared deps
+ * have changed since the last install. Idempotent — safe to call on every
+ * build, dev start, or consumer package.json edit.
+ */
+async function syncShadow(paths, consumerPkg) {
+    const shadow = shadow_mergePackageJson.buildShadowPkg(consumerPkg);
+    await shadow_mergePackageJson.writeShadowPkg(paths.shadowPkg, shadow);
+    const newHash = shadow_mergePackageJson.hashConsumerDeps(consumerPkg);
+    const oldHash = (await fsExtra.pathExists(paths.shadowDepsHash)) ? await fsExtra.readFile(paths.shadowDepsHash, 'utf8') : null;
+    if (oldHash !== newHash) {
+        util_logger.info(oldHash ? 'consumer deps changed — yarn install' : 'first run — yarn install');
+        // Yarn 4 is cache-first and non-interactive by default
+        // in non-TTY contexts, so no flags are needed
+        await execa.execa('yarn', ['install'], {
+            cwd: paths.consumerDir,
+            stdio: 'inherit',
+        });
+        await fsExtra.writeFile(paths.shadowDepsHash, newHash);
+    }
+}
+
+exports.syncShadow = syncShadow;

package/dist/shadow/yarnrc.d.ts

@@ -0,0 +1,10 @@
+/**
+ * Ensure the consumer has a `.yarnrc.yml` that pins `nodeLinker: node-modules`.
+ *
+ * Yarn 4 defaults to PnP, which trident-toolkit's webpack pipeline doesn't
+ * support cleanly (webpack expects a flat node_modules). We force the
+ * classic linker so installs produce a real `node_modules/`. Idempotent —
+ * leaves any other settings the user added alone.
+ */
+export declare function ensureYarnRc(consumerDir: string): Promise<void>;
+//# sourceMappingURL=yarnrc.d.ts.map

package/dist/shadow/yarnrc.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"yarnrc.d.ts","sourceRoot":"","sources":["../../src/shadow/yarnrc.ts"],"names":[],"mappings":"AAIA;;;;;;;GAOG;AAEH,wBAAsB,YAAY,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAerE"}